Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json)
Hash identifier: RpNvI/2X/fIXze2uisNni1mBFd6IWpyNVAAafBGvfEU=
Subject key identifier: 77:95:94:6F:C3:DC:5D:F7:33:E8:8E:FB:21:49:5D:F7:0E:C5:60:D9
Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Certificate serial: 019590061849C233CA7D1E88500EC8128B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
Manifest number: 099F
Signing time: Thu 13 Mar 2025 15:01:13 +0000
Manifest this update: Thu 13 Mar 2025 15:01:13 +0000
Manifest next update: Fri 14 Mar 2025 15:01:13 +0000
Files and hashes: 1: j_xflR4S2WvglBWH8M3t9MideIU.roa (hash: Cyel9g1MztQmxzP3oBvWVirfHDPFN3Z5801vcO4qaLk=)
2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: yGdqDLcvWS2iEduvYz16hSPqJ7J6KRGaSX8rufeEt6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:06:18:49:c2:33:ca:7d:1e:88:50:0e:c8:12:8b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d
Validity
Not Before: Mar 13 15:01:13 2025 GMT
Not After : Mar 14 15:01:13 2025 GMT
Subject: CN=7795946fc3dc5df733e88efb21495df70ec560d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:4d:41:5e:62:08:57:43:48:8f:12:4d:bb:
74:3f:b4:34:dd:64:b7:69:eb:91:4b:65:16:27:b3:
56:19:5e:40:cf:36:db:bb:ed:ea:f8:4b:e3:52:5e:
d3:d8:41:57:59:62:ca:2b:24:ab:65:1c:25:68:97:
e3:a0:41:54:86:29:e3:e8:6a:f8:4d:a9:c5:ed:c6:
11:98:a3:2d:58:30:ad:a2:20:7c:f5:fb:c2:73:3b:
99:41:18:72:9c:5f:32:3a:f3:d5:ee:2e:af:ef:50:
66:f6:88:34:9d:c0:97:5b:ac:bc:3a:16:6b:1d:5f:
6e:4c:1c:fc:3d:ac:51:86:7b:fd:37:77:59:fc:a2:
69:d5:db:ca:f4:d3:78:71:58:49:85:b9:6e:e2:08:
8d:22:07:75:37:ff:89:93:98:dc:c4:e5:52:88:16:
b5:44:ba:09:2a:a7:1c:2b:c3:6e:24:47:54:10:d4:
27:da:3d:89:52:48:6a:cf:b2:39:f7:a9:fe:f9:ee:
1b:8f:02:87:af:58:a2:28:5d:35:6c:0d:7a:b3:07:
95:59:d9:13:ab:65:2c:08:20:23:a4:68:12:4a:30:
2a:8b:7f:36:cc:31:aa:7e:c0:81:97:ff:c4:c9:a8:
9a:9b:17:b5:9b:05:61:88:ac:cd:28:6c:23:09:81:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:94:6F:C3:DC:5D:F7:33:E8:8E:FB:21:49:5D:F7:0E:C5:60:D9
X509v3 Authority Key Identifier:
keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:f7:08:85:0f:b8:a5:cf:c9:b6:e6:43:2f:a4:c1:65:5a:
da:80:ad:66:b0:6d:64:92:7b:26:64:b3:32:17:d0:46:70:f3:
29:84:ee:f7:5a:a7:7e:26:2c:15:4d:7c:16:ec:09:e8:29:c6:
0a:0f:24:2a:82:b0:8c:61:fe:14:3d:32:52:2f:3b:54:64:20:
35:64:8f:36:a8:cc:3d:d9:11:08:3d:35:c1:44:1a:29:01:c2:
f6:d7:83:a0:7c:22:75:a5:a9:d9:ef:24:38:33:5d:9a:57:75:
76:d0:38:c7:f1:9d:13:ed:41:5b:28:3e:1e:c1:07:e9:a8:df:
53:cf:37:86:8a:4f:91:52:e2:dc:3c:db:fc:98:69:5a:9c:9a:
ab:0f:29:c0:e0:c3:39:66:62:92:62:b5:bf:56:62:8a:5a:2a:
cb:9d:56:64:ce:d4:39:62:b6:ee:ca:63:ca:08:67:19:0e:24:
e8:db:65:c0:97:6d:0d:9c:80:c3:8a:08:c7:9c:32:c1:7e:71:
b7:78:67:7c:5d:08:f5:6e:15:75:d0:06:05:10:93:3a:12:61:
88:4a:e4:2b:b9:72:38:48:bb:45:9e:f2:9b:0e:8d:67:68:c8:
83:46:ae:30:f1:58:f2:92:b4:e1:2a:55:22:43:60:39:61:13:
2e:07:cd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:38:15 2025 by rpki-client