Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File: zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier: MPy6zgKyNMze9kx0nOZo1g92STK56WLcu2RPXhmC2wE=
Subject key identifier: FA:2F:05:83:C8:57:29:C9:CC:D3:A9:DC:BE:5B:C6:8F:72:28:86:24
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer: /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial: 01964CD9863D090AA59C04D8848977E03CC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number: 1413
Signing time: Sat 19 Apr 2025 07:00:45 +0000
Manifest this update: Sat 19 Apr 2025 07:00:45 +0000
Manifest next update: Sun 20 Apr 2025 07:00:45 +0000
Files and hashes: 1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: wqYb+qW1j8Hj1azTy8nbq9shzW9mdIkkY4fjEikI90o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:86:3d:09:0a:a5:9c:04:d8:84:89:77:e0:3c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Validity
Not Before: Apr 19 07:00:45 2025 GMT
Not After : Apr 20 07:00:45 2025 GMT
Subject: CN=fa2f0583c85729c9ccd3a9dcbe5bc68f72288624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b5:9f:a9:7c:0d:a0:19:c0:27:05:3a:94:b9:
61:7b:ec:e1:19:ba:32:df:12:fb:b4:06:55:ba:d5:
71:c9:b8:90:ae:a6:7a:60:90:23:19:4d:86:b5:c8:
c5:15:58:65:f1:e2:79:bb:cc:e1:97:23:e3:9f:31:
ee:ee:9b:1e:09:b4:d7:d5:20:d9:c4:b6:a5:72:f2:
95:ff:93:5f:51:16:21:ca:5e:5c:26:49:73:44:2a:
f4:d4:f7:7e:a3:98:8a:a0:08:96:3a:f5:56:10:cc:
dd:03:63:5d:99:ce:e7:ee:31:f7:98:6c:19:0d:25:
30:d3:f8:46:d4:05:a1:c7:e4:74:bb:88:69:0a:c7:
2c:14:52:3b:d5:d6:6d:08:69:5e:6f:d7:52:01:5c:
d4:4a:3e:2b:0a:43:71:9c:d3:55:66:48:4c:10:20:
e6:97:5c:1b:ae:ae:c3:41:1d:49:9e:eb:34:04:88:
9e:d1:ec:ce:38:ab:06:0e:de:51:ca:77:a1:ff:b0:
92:57:9a:6f:c6:fb:0b:7d:40:f0:ff:10:85:00:30:
8c:61:af:93:34:cf:1d:49:91:ad:87:a7:f9:e4:3e:
dc:ee:3d:72:c5:94:20:c5:a1:27:32:aa:41:5e:84:
58:f0:da:3d:43:91:02:0b:1f:37:7c:44:bb:4d:07:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2F:05:83:C8:57:29:C9:CC:D3:A9:DC:BE:5B:C6:8F:72:28:86:24
X509v3 Authority Key Identifier:
keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:51:87:93:6b:b4:da:eb:29:2f:17:5c:9e:73:d9:ed:aa:fb:
1e:41:36:41:b3:a8:a5:fe:c0:c6:27:dd:14:8d:17:f7:d8:c3:
ce:5d:07:da:0f:42:a6:51:19:c9:28:06:90:fb:6e:42:2e:54:
3d:ab:e3:74:64:82:08:a4:e7:0f:8f:c8:05:3e:0d:7a:13:d4:
dd:d6:ce:cc:48:f2:c6:0c:f9:69:3c:54:3f:2b:e7:6e:4d:de:
e0:48:f7:16:c9:21:ec:aa:a2:6f:6c:8c:66:03:98:b3:e5:9e:
6f:03:94:97:3a:67:0f:d6:ae:b7:46:d2:1b:49:89:04:43:55:
25:cb:ec:3a:50:69:e6:fe:64:5b:9e:28:5d:79:fb:96:78:b7:
52:7a:95:83:f9:7c:9b:ad:e2:33:3a:14:b0:a9:54:bb:45:8c:
08:af:25:c4:ba:d8:68:0e:12:df:d1:4e:fb:a1:d5:14:d8:17:
c0:dc:d4:91:c8:2b:e6:ad:d7:d5:fa:84:be:08:8e:39:78:98:
25:6a:0a:d7:c2:e4:35:d3:39:19:80:1d:05:de:07:26:2a:82:
c5:2d:64:2e:74:bd:39:18:9e:ea:9d:8a:aa:8d:3c:34:bd:c0:
17:d4:75:83:52:60:89:2f:bf:95:fa:a3:7a:2b:44:2c:44:2c:
f1:f5:2d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:19 2025 by rpki-client