Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: 5eoos6NCVDy3Rv6wMZWLY+6YCxkYcDMDUWVM8yG9/WE=
Subject key identifier: 5D:94:BA:41:C8:84:D0:DB:B3:BD:AC:EC:36:AE:A4:A3:C3:52:A5:FE
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 019653EE363696663CDED8B547E299340D6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0BE3
Signing time: Sun 20 Apr 2025 16:00:42 +0000
Manifest this update: Sun 20 Apr 2025 16:00:42 +0000
Manifest next update: Mon 21 Apr 2025 16:00:42 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: RLnmjzn77fpqClizZS1C3UHCFHMj0eDno+jqt7HUnuI=)
2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:36:36:96:66:3c:de:d8:b5:47:e2:99:34:0d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: Apr 20 16:00:42 2025 GMT
Not After : Apr 21 16:00:42 2025 GMT
Subject: CN=5d94ba41c884d0dbb3bdacec36aea4a3c352a5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:be:f6:f6:21:70:3f:52:a4:3e:ec:62:ac:
c9:d9:69:03:00:b5:d2:9d:86:40:78:85:fe:ca:64:
de:6c:c6:4a:21:2d:44:5d:1e:df:51:de:71:9b:79:
79:8f:bb:cf:74:25:a5:bb:c9:13:eb:85:fe:2f:e6:
4b:48:b9:eb:ab:2e:1a:b9:e1:5c:61:d7:6b:6e:4f:
3f:43:fb:03:13:0c:33:bd:3d:6d:ae:da:17:30:0d:
5c:85:53:d4:56:d6:7f:e7:f1:fb:d2:e0:cd:dd:b4:
2a:81:d2:ea:4a:76:ee:5e:fc:2b:4c:09:ee:0a:b6:
bc:fb:b2:29:ec:ea:38:f2:f9:01:e4:81:9e:84:a0:
c4:f6:59:ef:4e:2a:8e:80:bc:59:64:47:53:11:87:
3d:c1:6f:5f:ff:77:5e:79:ac:83:2e:12:39:73:fb:
03:cc:1d:fa:a3:d7:3d:c2:84:96:7a:5b:1f:94:6e:
2d:81:63:a5:c4:aa:76:58:b0:df:2f:c8:1c:5c:fd:
3f:4e:8d:06:17:f8:87:e8:16:63:81:64:47:04:99:
00:03:1d:38:8a:1a:9e:85:0e:ad:09:41:6d:d4:20:
57:0e:46:ee:f3:f0:87:b0:22:92:18:9b:d9:13:44:
e4:0b:3a:fc:55:83:c0:66:9d:a7:c2:bf:f9:0d:69:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:BA:41:C8:84:D0:DB:B3:BD:AC:EC:36:AE:A4:A3:C3:52:A5:FE
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5d:20:43:98:32:1e:b5:7c:76:aa:67:03:b4:57:30:43:bd:
7c:74:2c:45:ae:67:b0:5e:10:71:ee:12:70:41:a5:03:4b:96:
27:d6:89:77:6e:ed:44:48:03:76:e9:70:20:b5:1e:72:ab:6c:
5b:98:7e:7a:23:82:96:18:ec:54:b3:03:76:72:cf:f3:4c:68:
52:fa:e5:c3:9c:a4:04:73:46:bf:08:57:85:c1:a5:d9:f8:76:
29:47:44:c6:7d:bf:97:a0:04:f3:7e:85:14:d5:1a:81:c8:ea:
5a:0b:30:e2:a6:6e:4a:b2:d5:28:c6:0b:c2:5c:41:b5:42:f9:
32:3a:1e:9d:ef:0f:79:07:7e:71:70:9f:a9:45:10:d1:40:55:
9a:7a:bf:7a:9b:80:ba:19:66:d5:71:86:63:3b:02:f9:38:84:
f3:c0:c4:fa:47:f4:ad:d3:30:0b:a0:96:a3:dc:23:ba:05:36:
d8:b6:e1:a9:d2:63:17:50:4b:56:e5:0f:37:1e:cc:4b:4b:af:
84:82:6e:7b:c4:07:a9:e1:df:2b:0e:df:3a:07:f6:36:78:25:
03:b3:78:b3:dd:fe:cc:b7:a8:7f:2d:85:84:17:bf:37:5b:6d:
a0:76:33:4d:87:d7:21:5d:b7:04:8c:0a:fc:00:5f:60:a7:62:
00:39:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:44:55 2025 by rpki-client