Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
File: zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft (raw, json)
Hash identifier: uO8i2qIQbmZkX/EWG12ou8YEQLPwPMeUSFlqgblF4ZE=
Subject key identifier: 04:EC:DD:D6:13:37:A1:80:3C:58:E4:04:EB:6F:66:1C:6E:8E:28:3C
Authority key identifier: CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
Certificate issuer: /CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Certificate serial: 01963F548F5A4556E074A1FBBB4BDC59F5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 16:00:28 +0000
Manifest this update: Wed 16 Apr 2025 16:00:28 +0000
Manifest next update: Thu 17 Apr 2025 16:00:28 +0000
Files and hashes: 1: apVhYj18Bs_r1Q931zVqcqi5yvI.roa (hash: /gXE2P6qUcVxgRclWTrINQ6lVlcjG0089HciFUVuRsI=)
2: zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl (hash: ftNGMObCHzd7GNcS9UtHoKlQ3pjl8EE4/TZV0vDEMSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:8f:5a:45:56:e0:74:a1:fb:bb:4b:dc:59:f5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce56aa0e21558c92a48654244e05961a1fcfa0f2
Validity
Not Before: Apr 16 16:00:28 2025 GMT
Not After : Apr 17 16:00:28 2025 GMT
Subject: CN=04ecddd61337a1803c58e404eb6f661c6e8e283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:2d:20:60:ad:3d:9a:b5:8c:e4:bb:42:97:
ec:f6:8f:d2:05:ce:8a:ce:e2:82:bb:3b:84:47:d4:
48:2a:f6:87:cd:4c:83:ef:c1:64:c6:9f:f6:e1:d2:
7d:f2:11:18:b1:8b:1e:e1:c6:c7:3f:5b:10:e1:46:
d2:f7:f8:f6:5e:0e:e0:4b:c9:d4:b5:86:7d:2a:2f:
40:5d:c5:0f:1b:02:8c:e0:26:a6:e6:1f:79:58:72:
22:7f:61:c2:73:93:95:b7:ec:c7:c2:6a:8d:be:c2:
4e:8b:89:22:8c:a9:ef:21:24:e9:65:d7:89:ea:aa:
96:f2:33:0f:9b:7d:08:8c:5e:7a:ea:aa:23:d2:b1:
1a:2b:10:94:22:e0:24:1c:b6:51:f9:bf:94:65:53:
29:a4:e2:cc:6f:c3:81:32:ef:85:62:3b:1a:c4:1b:
3b:c8:be:52:6c:a2:06:49:0b:21:13:e2:2c:9f:62:
01:a6:e9:d0:09:a4:e6:dd:8c:3f:31:57:c3:bb:80:
52:a5:b8:50:62:55:35:0f:66:12:a0:94:b5:26:f5:
df:b4:72:c0:1e:4b:df:d0:93:07:65:10:c0:00:60:
c3:89:14:3f:f7:b7:ed:d0:5a:a3:af:9f:f2:f7:4f:
4a:80:b0:c9:8e:0a:ae:6c:cf:eb:22:81:dc:f7:fa:
f4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:DD:D6:13:37:A1:80:3C:58:E4:04:EB:6F:66:1C:6E:8E:28:3C
X509v3 Authority Key Identifier:
keyid:CE:56:AA:0E:21:55:8C:92:A4:86:54:24:4E:05:96:1A:1F:CF:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlaqDiFVjJKkhlQkTgWWGh_PoPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/07476c-2c5b-40e9-b562-54fa30864c21/1/zlaqDiFVjJKkhlQkTgWWGh_PoPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:90:a7:bf:3a:56:5e:9f:8d:08:7e:5d:57:aa:ef:67:03:70:
10:53:17:04:27:9b:e0:e3:60:f8:ca:59:ce:3d:c8:a5:74:32:
80:b5:1d:92:d7:f4:81:a7:7b:49:21:47:dd:2b:95:8b:c1:3b:
32:07:19:45:21:74:60:73:86:7c:e5:6d:8b:ee:c6:52:47:0f:
f7:98:cb:0d:19:b3:10:7c:70:fa:41:17:91:22:17:89:e2:d9:
03:02:46:d5:17:d6:53:be:98:8e:d7:d1:f2:75:26:e8:52:f3:
fa:13:7d:49:df:94:f7:c7:7e:5a:15:c3:f4:7c:4e:88:44:ae:
bc:6d:0d:63:58:67:60:0c:d2:57:0c:be:f4:2f:dc:2a:34:c6:
6b:99:29:da:04:6d:7e:6d:65:1e:a4:df:75:38:60:8b:72:ee:
28:aa:8d:65:96:1f:79:93:54:5b:1b:ed:b8:0f:a9:b5:70:01:
af:b7:95:38:49:5c:e2:e6:6e:11:bf:55:f5:ac:49:47:0d:70:
3e:7f:ff:c4:ad:cb:12:2a:3c:9d:e5:1b:84:d9:bd:81:a6:2f:
0d:ca:3e:47:93:dc:d0:fb:f7:30:5d:eb:bc:b3:4f:db:5d:c6:
d9:5b:36:e1:d7:54:15:7f:84:6f:5e:b7:41:1a:57:09:f9:0d:
e7:8d:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:27:10 2025 by rpki-client