Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
File: ZePmyEfHm7BarCTUF4F41vfARIU.mft (raw, json)
Hash identifier: /pW261PLZHFlD7v9YZcNmlFxzSTrROp4ooq+JqLZNEQ=
Subject key identifier: B5:86:3C:9F:25:45:03:E4:2B:87:1F:F4:43:A0:FA:09:82:65:B7:2B
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Certificate issuer: /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial: 01964AEB11DD7BD288B683E3939224F60D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
Manifest number: 0196
Signing time: Fri 18 Apr 2025 22:00:41 +0000
Manifest this update: Fri 18 Apr 2025 22:00:41 +0000
Manifest next update: Sat 19 Apr 2025 22:00:41 +0000
Files and hashes: 1: ZePmyEfHm7BarCTUF4F41vfARIU.crl (hash: fuIwmdtJFs5r+Nay4qOFmlcXY2kXoKhJJisTnWYHnR4=)
2: _G6b2YObaO8vXwxmRAdxtdM520E.roa (hash: 1ZvsYB4M9L/iBBRu/0d0SPNVtbn8DNDppTZnbpT7L4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:11:dd:7b:d2:88:b6:83:e3:93:92:24:f6:0d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Validity
Not Before: Apr 18 22:00:41 2025 GMT
Not After : Apr 19 22:00:41 2025 GMT
Subject: CN=b5863c9f254503e42b871ff443a0fa098265b72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:57:f7:38:f6:bd:5e:73:71:97:35:6f:3a:
57:4b:6f:6b:54:59:cd:18:1f:7e:c9:51:8e:07:b5:
fa:6c:27:d5:45:ae:7c:22:8e:f9:c4:36:8f:d7:3b:
14:2f:73:80:85:59:97:cc:92:43:2d:2f:1b:31:68:
e3:6b:f8:65:f9:7c:99:05:80:b8:03:22:10:d0:f2:
f4:f1:7d:8c:bb:d5:e5:e1:b9:ab:e1:6c:c2:16:0f:
49:4f:5e:cf:bf:b5:e6:67:62:22:59:cb:55:71:93:
f2:06:69:b8:80:81:15:18:7d:c5:f4:49:19:1d:19:
54:6d:45:c4:12:bf:f9:8c:c1:3f:e0:15:04:03:98:
fb:ba:c2:84:65:6f:97:ac:db:1d:ba:f0:6a:8c:0c:
88:3b:68:9b:90:2c:a3:98:75:f6:b5:65:16:23:b5:
b3:79:1a:b4:88:a2:85:ee:59:59:45:d5:67:03:3b:
a6:5b:22:d8:ba:a9:18:20:cf:c6:74:5b:75:82:f8:
49:81:2c:3a:26:c0:9b:d8:3d:70:69:d8:36:5c:4b:
3a:d7:74:97:82:e0:55:90:a8:21:3a:9a:7c:62:8c:
f2:c9:e3:ed:b4:e1:26:63:d9:2b:5b:20:db:ad:8b:
7e:59:af:f0:20:05:ba:09:fd:2e:8b:69:76:4c:fb:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:86:3C:9F:25:45:03:E4:2B:87:1F:F4:43:A0:FA:09:82:65:B7:2B
X509v3 Authority Key Identifier:
keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:31:f1:7c:4a:8a:bb:2d:82:3e:3a:35:95:73:ac:7b:cd:7f:
51:34:9c:39:3e:95:d0:16:c6:dd:a4:dd:04:ef:c1:52:9e:a3:
9a:41:93:5b:b7:41:51:fa:6d:9c:65:59:1b:b8:c5:e6:4e:a1:
d8:ef:2e:7e:c4:2a:9c:01:3e:6a:2f:05:22:5d:4f:5d:38:05:
12:10:e5:20:02:d0:c0:8a:0f:8d:84:2d:25:4b:b4:5b:3a:ab:
f5:fc:7f:1d:ad:d3:c2:1e:20:52:c1:66:3b:e2:b7:6c:d8:ae:
86:7e:00:6b:3c:f8:8d:b0:82:1a:48:94:89:29:a8:c1:ef:2b:
7f:e3:5c:00:c1:44:90:68:4e:ee:d8:3a:c3:3b:e6:28:a1:eb:
cf:c8:b9:66:37:72:16:e5:05:f9:12:57:f4:7c:e0:3c:f8:3d:
1e:31:57:c6:4b:16:54:f4:a5:ca:8d:35:e6:09:c5:1d:d1:cc:
af:42:62:4d:e1:42:2a:e3:80:c1:0e:4d:2d:18:10:1b:7c:00:
67:8f:80:37:97:b4:8b:49:76:31:58:4f:04:2a:35:f5:15:36:
72:f1:b5:eb:36:0d:2a:d3:01:bd:1b:71:06:53:f5:3b:a6:c9:
7a:f3:f0:46:0e:de:4d:e2:ae:bd:fd:fd:37:87:3b:04:d6:11:
c7:27:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:41:18 2025 by rpki-client