Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json)
Hash identifier: h7+MxL5UcxDB9tVThXkDAJvm5GWsCqvjG2rubxkJ5mo=
Subject key identifier: 3E:81:F6:52:5B:83:9A:68:AE:5E:D8:E7:4F:61:8D:D7:CF:54:7F:DB
Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Certificate serial: 01958BF25DD4FC66D6F85CAEA2F5F3E3DD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
Manifest number: 03F7
Signing time: Wed 12 Mar 2025 20:01:11 +0000
Manifest this update: Wed 12 Mar 2025 20:01:11 +0000
Manifest next update: Thu 13 Mar 2025 20:01:11 +0000
Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: mmDT2JH0et+NWiyWCkcNFO2tR5TQ5VQN+Hp0mPRypOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:5d:d4:fc:66:d6:f8:5c:ae:a2:f5:f3:e3:dd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e
Validity
Not Before: Mar 12 20:01:11 2025 GMT
Not After : Mar 13 20:01:11 2025 GMT
Subject: CN=3e81f6525b839a68ae5ed8e74f618dd7cf547fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:c1:75:a5:13:96:8e:44:5d:fd:13:22:01:
9e:b4:e5:80:79:7f:b2:36:be:28:c3:31:50:9f:f8:
31:45:e5:65:22:04:9b:4f:93:07:ac:02:fd:04:a8:
37:08:1a:d3:c6:1e:aa:36:79:02:ba:94:54:05:c2:
33:d8:24:64:78:1c:b5:ff:94:01:b2:c0:7b:b4:7a:
35:7a:c8:3a:24:d5:0c:a6:5f:13:95:24:77:f6:7a:
49:e9:fc:bc:2a:95:3d:97:49:43:22:f7:79:79:74:
64:46:cc:02:37:61:f2:de:81:b1:b9:b6:cf:61:75:
96:88:b8:d0:ed:65:a1:ac:1f:23:90:a3:06:79:97:
32:c8:0b:6b:d7:36:ef:1a:27:da:f4:df:91:26:b2:
0d:01:ed:bd:50:a8:71:ed:45:dd:23:e5:9e:89:8b:
6b:82:47:aa:7b:ef:f7:b2:4c:b7:7d:53:9d:c0:e2:
52:7b:4c:be:5a:96:af:74:0e:30:13:c5:19:7e:01:
98:54:4e:d6:1b:18:87:7b:24:e1:cc:4f:ea:c3:4c:
09:8a:39:0a:76:46:8c:27:46:76:ed:fd:a6:8d:ea:
a7:4f:0a:d0:3f:5d:06:ad:64:48:07:77:00:42:67:
66:f1:12:f5:d9:7a:87:9b:a3:2c:73:67:13:e8:7d:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:81:F6:52:5B:83:9A:68:AE:5E:D8:E7:4F:61:8D:D7:CF:54:7F:DB
X509v3 Authority Key Identifier:
keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ee:95:f3:e7:b3:a2:e6:45:c6:d8:69:a4:39:d2:40:a6:5c:
fe:f0:75:0e:15:ca:55:47:a4:aa:c8:c2:04:64:a4:a2:cf:53:
9d:94:87:6b:bc:ff:fb:57:21:4e:27:ec:4e:a2:d9:d5:b2:26:
cf:a1:26:d8:14:fa:ba:51:42:d8:d1:05:1b:26:ef:8a:08:80:
9b:8e:2e:e3:8a:82:46:fb:d9:9b:76:a2:21:39:8a:12:f5:2c:
53:00:30:fa:aa:e9:b0:0c:12:e3:21:e4:c2:58:c2:2d:ef:1a:
b1:de:6f:b2:42:1d:a9:ef:4f:e4:5c:66:d0:69:9e:d0:83:0a:
5b:ea:69:25:0b:c1:1b:2c:c8:16:2c:a4:e1:ba:c2:6d:44:7f:
3d:78:5d:49:62:10:32:39:6a:c5:9e:61:c6:06:3b:c0:f5:26:
2b:ff:6c:3c:4d:3e:5d:22:b0:85:58:68:65:68:b3:f0:f1:93:
b0:f9:d2:3d:f3:21:39:b4:ba:43:d5:8e:dd:b2:c1:00:60:b8:
5d:ff:18:25:d1:b1:51:b4:bb:f8:af:5c:85:0e:14:9f:ee:19:
ac:9f:39:89:45:82:58:b5:59:a1:58:10:12:26:8c:34:a2:11:
eb:80:40:b1:1e:cc:fe:b5:d3:96:e0:4f:61:89:ff:f0:4e:1d:
45:dd:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:40 2025 by rpki-client