Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: G3vNoDhRPesmAKbOzq91ZLqXtQJFKr8YtAY6DL2rvzw=
Subject key identifier: D1:31:BB:59:B5:5D:DF:18:94:FA:E2:CC:92:9D:42:0B:ED:D2:FE:C5
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 0196458D7DAA5EB8317DC1DDA57DFB891F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 09FD
Signing time: Thu 17 Apr 2025 21:00:22 +0000
Manifest this update: Thu 17 Apr 2025 21:00:22 +0000
Manifest next update: Fri 18 Apr 2025 21:00:22 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: dlmK7+0WO6NbXodY3Ua1UPIQQiARLD81Hb7z7urahNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:7d:aa:5e:b8:31:7d:c1:dd:a5:7d:fb:89:1f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Apr 17 21:00:22 2025 GMT
Not After : Apr 18 21:00:22 2025 GMT
Subject: CN=d131bb59b55ddf1894fae2cc929d420bedd2fec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:88:42:ca:88:34:1e:e4:5c:88:a9:0f:54:
21:da:76:47:04:a1:d7:f9:9a:d0:bb:2c:04:5c:32:
65:27:89:a8:0d:96:be:22:62:42:72:f3:d6:98:f2:
47:9c:e5:13:78:df:97:33:e6:4b:61:0e:14:c9:d9:
57:df:6c:27:01:50:ea:0b:5a:c8:c9:76:11:c1:a8:
43:07:ee:34:4a:74:25:48:0e:f2:59:57:ac:23:6a:
73:4c:cb:76:26:ce:b4:f2:9a:6b:b2:ed:30:3d:59:
df:00:38:41:2e:6e:0f:ca:60:62:cc:a4:18:43:c7:
40:71:ed:9e:81:f9:17:54:78:0f:7f:64:45:72:f8:
70:4c:c1:d3:01:d1:46:c7:10:92:71:92:1f:d5:10:
d8:02:38:b0:9f:76:8a:84:2e:55:e7:36:3f:fb:6c:
57:ea:0a:f7:bd:78:ac:93:e4:09:18:e7:ad:a9:67:
23:45:48:f1:08:a1:01:36:76:99:47:a7:07:9a:f8:
16:81:93:03:6c:01:e6:ea:7c:e8:a9:52:76:58:ca:
50:42:c9:a7:6e:8c:35:23:65:b1:cf:b2:39:60:29:
d0:07:72:bc:ee:f0:61:df:fd:55:d8:c0:65:2c:91:
1d:09:27:af:b9:f6:d9:fa:4f:9c:7b:15:c5:24:2c:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:BB:59:B5:5D:DF:18:94:FA:E2:CC:92:9D:42:0B:ED:D2:FE:C5
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:92:ed:e0:ad:1b:e2:e4:3a:d5:47:3c:20:dc:7d:9b:13:90:
ef:82:74:3f:13:94:db:0b:1c:69:99:20:e5:19:f5:56:7a:f5:
57:5b:fe:a8:1b:3e:f2:de:9b:fe:c6:e8:36:89:57:c5:82:ea:
a1:c1:82:ec:21:c9:6f:13:31:7b:70:9a:0e:46:14:6b:f0:11:
3b:c0:75:fe:90:f3:05:03:de:a3:ec:9f:86:af:55:6b:0c:79:
b6:81:f4:1f:df:f2:b4:00:f1:2e:76:b4:d4:27:2d:4c:ba:52:
1c:8a:14:a9:37:19:83:d6:08:2c:0c:e5:30:34:71:79:03:48:
75:f9:63:f5:7a:bf:33:ff:42:30:c5:c6:05:4c:c6:e8:9a:07:
9e:0d:b6:33:85:cf:56:f8:3c:58:5f:63:a4:d7:77:e0:e5:0a:
b4:c5:f1:93:48:2d:63:18:e2:1b:67:83:8c:72:41:82:1b:ab:
0e:47:63:5c:a6:4d:b7:88:7c:44:27:c2:5f:9d:a9:3b:1f:2a:
c3:9a:18:e0:60:fb:dd:6d:9c:7e:5c:e9:bc:d2:ff:dd:af:75:
8f:4c:95:0b:6c:cd:f0:23:95:5b:a3:1d:34:77:54:77:2b:35:
82:e8:26:21:66:25:4f:c8:59:df:be:f0:24:07:e1:dc:27:7e:
68:16:88:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:56:18 2025 by rpki-client