Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
File: Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft (raw, json)
Hash identifier: uVB6htbKxcheVdJvMPm5fpx5GnuGHFO1a9uA4FpHjCY=
Subject key identifier: 73:4E:EA:DB:93:17:B6:B7:F8:41:78:6E:19:EC:E4:F6:95:AB:EA:3A
Authority key identifier: 66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
Certificate issuer: /CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Certificate serial: 019652A515B92BEC3C7EFD10A43E76C4FDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
Manifest number: 0498
Signing time: Sun 20 Apr 2025 10:01:12 +0000
Manifest this update: Sun 20 Apr 2025 10:01:12 +0000
Manifest next update: Mon 21 Apr 2025 10:01:12 +0000
Files and hashes: 1: ZhxwMRHWErqoZg_Itz4BRM1Zy1g.roa (hash: pA1I1yaFQSWAdVvtp/IDWYB864SqtxE1eJEw16TKrNs=)
2: Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl (hash: n2JoOND6ZO0C0LV8cYjsZeaJOvi53IqWiWjnyjwC7bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a5:15:b9:2b:ec:3c:7e:fd:10:a4:3e:76:c4:fd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e17c08acdc77e944b2839508f1fd711e8e97b
Validity
Not Before: Apr 20 10:01:12 2025 GMT
Not After : Apr 21 10:01:12 2025 GMT
Subject: CN=734eeadb9317b6b7f841786e19ece4f695abea3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bb:be:4a:b0:1b:af:29:a2:b8:da:88:56:cc:
a3:4e:1b:f9:98:5f:51:23:d6:7b:31:9c:bb:61:b1:
62:3c:53:b2:e3:56:69:06:eb:fe:f7:41:45:1e:ad:
25:87:67:9d:b8:73:f8:79:13:3d:cc:80:28:79:09:
bf:9b:94:87:d6:c2:80:d8:f5:8a:1b:1e:2e:49:ec:
c5:54:b2:13:84:3a:f7:bf:db:20:b8:b4:d7:79:6c:
9b:46:fe:38:18:55:0a:88:76:58:ba:ec:8e:02:b2:
89:10:01:87:2b:d4:3f:03:0c:04:01:8c:3f:4a:6c:
bb:3c:e2:9f:3d:78:86:dd:93:c0:08:68:84:5f:f8:
58:ea:5f:6e:47:48:86:6b:b9:f0:50:87:7a:c4:2c:
0b:92:3a:89:4c:64:9b:ba:32:0e:09:ce:03:d0:d6:
06:fc:98:e8:71:72:0b:8c:5c:8d:e5:5b:64:6e:87:
57:a7:99:1c:b3:b9:8f:13:96:ec:e4:07:33:c6:e8:
a7:cf:02:20:99:f0:e0:30:d9:35:f8:64:2d:c4:09:
ff:f5:71:d6:2a:ed:ba:d5:5f:54:fd:7c:a7:62:bc:
ed:54:82:95:09:fa:24:59:dc:ab:d5:9a:4b:80:bb:
d9:3e:b1:ce:ae:ee:3b:c3:90:9a:e8:64:25:c0:e7:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:EA:DB:93:17:B6:B7:F8:41:78:6E:19:EC:E4:F6:95:AB:EA:3A
X509v3 Authority Key Identifier:
keyid:66:5E:17:C0:8A:CD:C7:7E:94:4B:28:39:50:8F:1F:D7:11:E8:E9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl4XwIrNx36USyg5UI8f1xHo6Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/40658e-c1a5-4858-8912-00ceeb6a414f/1/Zl4XwIrNx36USyg5UI8f1xHo6Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:20:d3:ad:cf:68:d3:28:fa:dc:27:4f:91:45:e9:e1:47:d5:
36:64:3e:8c:ae:6c:39:ef:2a:8a:b4:e7:54:db:5e:2c:a0:f6:
b8:37:f4:15:6d:b4:d9:92:2a:df:96:f6:64:ac:bb:42:7e:dc:
78:e4:6a:31:9a:66:14:3e:7e:f8:cc:36:0e:b4:cb:be:f5:b7:
2d:76:77:4a:bd:98:ba:d9:a9:d0:c2:dd:c5:d8:fc:92:09:6c:
de:0b:65:1b:46:ea:bd:67:44:e8:06:d3:c8:78:a3:93:82:af:
18:e5:73:79:df:da:20:c4:d8:93:48:f2:39:1b:23:1e:f8:ae:
2a:0a:99:0b:0b:35:af:56:8d:4c:6a:0e:90:de:39:4f:5e:46:
bd:70:ed:33:3c:ba:27:2c:33:bc:0c:5f:21:e7:cf:bf:b8:13:
8a:4d:ea:a7:74:9b:79:9b:b2:c0:b6:99:13:b3:6e:31:31:d7:
ea:53:da:b9:18:c2:78:2a:71:bb:37:df:d4:b9:65:9c:95:4f:
c7:ca:9f:ff:84:6a:9c:7b:e5:af:e7:f9:46:c2:fe:8a:8b:de:
66:a9:6b:48:ec:1c:dc:3a:ed:a8:01:3d:2c:af:2e:88:34:5b:
cb:63:7e:2b:af:a0:aa:dd:fb:9e:a5:3d:df:b8:33:3d:4e:93:
4d:63:04:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:15:22 2025 by rpki-client