Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
File: zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json)
Hash identifier: wI/LWitVlAVb3Oganr4F8PPYFG7dacq/LJdqcX/x48s=
Subject key identifier: A4:16:6F:D2:02:BF:CE:6B:10:B8:6A:F6:59:D3:3A:79:0C:73:BB:A4
Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
Certificate issuer: /CN=cdd0ae41cdab559862964178bfeae368496b07d7
Certificate serial: 0196451F81374B150E6E91903130C0E5C093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
Manifest number: 0BD5
Signing time: Thu 17 Apr 2025 19:00:14 +0000
Manifest this update: Thu 17 Apr 2025 19:00:14 +0000
Manifest next update: Fri 18 Apr 2025 19:00:14 +0000
Files and hashes: 1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: j0IvC1nQIvkKz00X1zGLLht0CK9CoDRNyNC90KMI3r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:81:37:4b:15:0e:6e:91:90:31:30:c0:e5:c0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7
Validity
Not Before: Apr 17 19:00:14 2025 GMT
Not After : Apr 18 19:00:14 2025 GMT
Subject: CN=a4166fd202bfce6b10b86af659d33a790c73bba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:68:fa:18:62:18:ca:0c:e8:bb:aa:2e:1e:
1f:ef:5b:a2:78:60:43:23:b8:ee:c3:f7:4a:b1:29:
9f:a3:98:e7:26:8c:a1:3c:82:4a:74:18:6e:66:08:
ec:6f:2c:16:5d:f2:71:69:a5:43:e7:f4:cb:0d:a8:
95:8b:b0:eb:56:e1:09:92:d2:e1:a9:58:b7:06:39:
75:b1:62:d3:50:0a:6d:e1:6f:a3:c6:bf:cc:62:9a:
0e:74:da:ba:b5:26:b3:18:28:ce:1e:31:26:6a:bb:
80:72:c4:5e:8a:b2:7d:4c:9a:b7:54:99:5f:08:1c:
2d:83:72:92:68:9b:b5:85:9c:2f:e1:c4:f5:e4:1e:
4c:ae:0e:43:c8:ef:e8:28:1a:3a:f5:97:6d:86:83:
d5:cc:12:2a:9f:5d:28:21:ed:4f:01:94:b4:88:0b:
db:4f:77:e6:dc:34:a7:79:61:2e:fc:56:bc:d2:59:
5a:1a:86:97:ef:cf:00:f8:a1:39:69:a5:f3:c0:3a:
69:08:83:75:37:aa:f0:83:0f:2d:14:cb:ec:8c:05:
d2:81:9a:f5:11:78:ee:1f:06:6e:85:6a:8f:ce:42:
bd:80:09:93:2b:4d:34:ba:76:7a:ab:99:68:4e:ba:
cc:27:e6:41:44:0a:2c:72:43:8a:b0:83:1d:9e:b0:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:16:6F:D2:02:BF:CE:6B:10:B8:6A:F6:59:D3:3A:79:0C:73:BB:A4
X509v3 Authority Key Identifier:
keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:54:73:31:26:57:dd:2b:a9:3c:76:1b:33:7c:cd:3e:79:9d:
90:63:db:dd:f0:2d:75:0c:55:64:9e:17:f1:aa:80:4b:ee:96:
89:58:1b:82:6d:c2:b3:42:12:9c:9c:fe:16:04:27:ad:30:c8:
85:c4:13:2d:0e:e9:74:15:82:6e:2a:b6:d6:8a:5e:6b:3d:fd:
df:4d:18:89:ce:b6:fe:2b:10:de:a8:fd:5c:6a:14:76:77:b9:
46:2b:d5:41:11:52:4c:fe:e6:0d:e1:59:8a:76:cc:75:a5:e7:
a7:2b:18:1b:3a:ee:55:e2:69:72:0f:49:66:e0:32:72:fb:6d:
c4:9c:02:8c:91:e1:97:a9:b4:a0:2e:70:31:89:12:71:b2:c5:
2b:18:7c:ce:b2:e3:a4:17:ed:17:a7:43:4d:42:5e:2b:4e:74:
f4:25:26:72:bb:40:ca:3a:f4:77:8a:be:a0:44:b7:c8:81:3f:
7e:7e:2e:fa:0a:af:c9:85:31:3d:47:06:3d:d8:1c:a0:48:f5:
06:67:c2:5c:52:e6:65:e7:af:f8:12:53:0b:ac:a8:82:27:42:
fb:53:5d:be:cc:e4:58:7c:48:e3:3a:ac:78:45:ad:16:46:7b:
05:60:30:a2:79:eb:0f:0e:50:6f:e8:38:f1:4c:8f:14:7b:37:
97:e7:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:37:27 2025 by rpki-client