Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
File: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft (raw, json)
Hash identifier: gHGdaTgxc15+j3/p3fhGkBQCK0CIDUs+GdsIdP7S3NU=
Subject key identifier: 43:38:65:D7:CE:36:F4:BA:27:D4:DF:FD:CD:D7:F9:23:C0:C3:7B:AE
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 01964F35737E0252C45D4DBFEEE2B9388A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 18:00:25 +0000
Manifest this update: Sat 19 Apr 2025 18:00:25 +0000
Manifest next update: Sun 20 Apr 2025 18:00:25 +0000
Files and hashes: 1: O_KCzwVMWWFZcOERuZfC4YWn9FY.roa (hash: GvDcDGS0R/CSMmzRrzV54m/DC/W2FYWSA7lqDitIkMA=)
2: bp7wOLoR7KHYyMpRk1AVcymuiZM.roa (hash: xjmDEJIk2t11tVAVqOoUo8z5SEcqH7rBtC3fb0L+2ZM=)
3: zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl (hash: PzS/+scLxT4G3LQFD4NOkOTZyZtlsrVog9cHz5yr3Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:73:7e:02:52:c4:5d:4d:bf:ee:e2:b9:38:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Apr 19 18:00:25 2025 GMT
Not After : Apr 20 18:00:25 2025 GMT
Subject: CN=433865d7ce36f4ba27d4dffdcdd7f923c0c37bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:c8:b0:1c:17:a1:81:f5:80:57:29:38:06:
b1:46:41:6b:83:53:c5:98:30:7e:45:dc:25:3d:4a:
04:f7:3e:ae:38:ac:5b:7a:b4:77:01:43:6a:9a:1f:
10:1a:af:f1:f5:c8:35:16:6d:00:5b:ef:8a:15:0c:
cb:9b:f9:4d:4b:e4:36:ad:30:f8:d1:c1:08:fa:60:
76:f6:85:46:90:cf:ce:58:10:ff:99:16:ce:54:c7:
4e:77:a6:2f:c9:54:6d:b9:84:75:e5:05:51:ed:20:
5a:91:58:01:43:8b:85:79:00:98:62:47:80:fd:59:
53:ba:61:0d:43:3e:4b:93:f2:19:1b:51:2c:86:cf:
4a:68:e5:2e:d8:7f:15:39:7c:0a:c9:2c:d1:30:1c:
6f:2f:da:8b:54:d2:a5:4e:1b:77:ca:31:6f:4d:f5:
65:bb:de:f4:09:e2:42:a4:63:70:bf:03:68:83:3e:
1c:bb:90:9a:53:96:d5:30:71:45:c8:42:41:78:8d:
4e:22:bb:bb:aa:f1:cb:9d:06:79:fd:6e:c0:4f:30:
bf:65:f0:a3:3f:fd:99:06:ba:70:65:57:9d:cd:90:
5c:3a:94:a1:5b:4a:60:ee:fd:61:fe:a2:52:33:06:
0e:22:68:51:de:3d:04:ac:63:9a:fe:82:1c:e6:ee:
96:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:65:D7:CE:36:F4:BA:27:D4:DF:FD:CD:D7:F9:23:C0:C3:7B:AE
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:66:a6:cf:e9:11:c4:fb:f4:0e:2b:8d:7e:b4:d1:d3:59:53:
dd:7a:bd:93:cf:30:d8:9e:33:f0:ca:06:41:56:38:4c:cb:1a:
04:d7:bc:e0:24:77:8e:40:37:39:e7:f1:d8:df:6f:fb:7d:d3:
e3:9c:63:7f:a2:69:fd:c0:f5:c7:a8:9a:90:d0:35:f8:87:f5:
36:ef:80:ef:d6:19:e1:3f:a6:0a:4e:86:c3:f9:88:77:c7:c2:
f6:eb:32:61:24:f3:5a:ff:13:0c:49:93:69:e2:b5:9f:a1:49:
36:42:06:74:87:97:78:59:63:48:c7:82:62:54:aa:eb:eb:f4:
98:87:fd:00:5e:02:86:86:d1:db:e7:c4:b1:19:6d:08:40:76:
34:00:59:9e:cb:db:8b:b9:fe:e7:7c:ee:4c:73:6b:d1:9a:9a:
4b:aa:fe:b8:75:61:36:a5:71:44:c2:be:9b:ed:a5:4f:3f:d6:
95:01:a2:db:b2:4b:60:ea:e3:39:22:25:b4:43:c2:6c:5e:9d:
91:ea:e3:d8:e7:cb:7d:84:a8:9e:59:b7:6a:cc:2c:49:69:ce:
9e:c4:e7:44:e4:8c:66:28:4a:5f:e8:1d:59:93:f1:4e:fb:0c:
09:bb:a0:a9:88:ce:b8:04:12:b8:98:af:95:32:dd:2a:92:46:
5a:f2:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:41 2025 by rpki-client