Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: CUAclqZg1HthUopSbuSQuN19c1XrFhS2x6AR8yrcjzc=
Subject key identifier: 34:CC:5B:F9:99:2A:60:B0:1D:6F:6D:3F:2C:99:5F:69:65:E8:E5:54
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 01965537B1A9C28224019B9779AEB7F0B905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 0DF5
Signing time: Sun 20 Apr 2025 22:00:35 +0000
Manifest this update: Sun 20 Apr 2025 22:00:35 +0000
Manifest next update: Mon 21 Apr 2025 22:00:35 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: Eq/3MSZXBDQWDPvx01WzxxhBuqjqGHnIscXoNv1E8II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:b1:a9:c2:82:24:01:9b:97:79:ae:b7:f0:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: Apr 20 22:00:35 2025 GMT
Not After : Apr 21 22:00:35 2025 GMT
Subject: CN=34cc5bf9992a60b01d6f6d3f2c995f6965e8e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:e7:07:32:95:9d:eb:1a:83:11:7d:7e:9d:
94:bc:4b:a3:45:78:b0:ab:3b:e5:fb:f0:5b:df:71:
ea:f2:24:62:3c:ef:35:f0:10:12:b6:fc:af:91:d6:
92:c6:45:f7:db:1b:00:a8:a3:67:55:08:3e:3b:ef:
d5:f7:a1:d7:b7:ad:16:0a:32:86:05:23:48:d3:c8:
8e:65:66:66:d5:d1:b6:d5:24:4f:a4:e5:36:bd:62:
17:74:0c:40:66:be:33:33:49:68:e7:f1:40:4a:1c:
66:ec:67:db:47:68:d3:f1:b2:53:6f:9c:c9:14:35:
0d:a9:61:89:2a:b6:38:62:c5:36:28:3b:80:c1:6c:
d1:d9:1b:e1:a8:0e:cf:11:b0:d5:b3:b4:26:4d:84:
42:a1:1b:2f:b0:a8:a8:97:bb:e4:78:60:d9:47:7a:
e8:4f:42:66:11:71:91:f9:f8:ea:f1:b1:5c:36:3b:
85:19:ce:a2:07:da:68:df:00:2b:16:92:11:42:67:
b6:46:be:1e:05:50:3f:22:a5:a5:ae:85:04:62:9e:
47:f7:02:9d:0b:3a:c3:89:29:40:ea:f5:1d:b5:84:
48:b5:e8:6b:2a:96:fc:7a:5d:48:1f:1a:40:f0:11:
fc:55:c1:fb:36:28:d2:65:8c:f0:3c:dd:71:6b:2c:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:5B:F9:99:2A:60:B0:1D:6F:6D:3F:2C:99:5F:69:65:E8:E5:54
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e3:30:4c:83:d3:73:50:3c:5a:f9:be:13:f0:15:33:98:c7:
3f:18:34:6a:a5:5f:bc:fe:cf:f4:6a:b4:70:32:8e:5f:72:48:
9e:14:ba:10:78:cc:f0:74:d2:07:df:e7:4f:f1:04:22:80:8f:
d9:4c:a8:13:d1:86:d7:e9:fb:d0:d0:f2:88:4e:0f:77:39:fc:
e3:97:3b:8b:12:0e:61:a5:8e:f7:02:fc:30:b4:f9:be:c3:10:
a2:b8:c0:09:65:45:e2:bf:07:be:d9:bd:d3:45:78:58:6e:1c:
a3:1b:a2:f1:53:b9:bf:cf:94:76:09:b8:85:a6:93:e6:eb:06:
a3:45:b9:58:93:42:04:fa:f2:d8:16:f3:45:64:c3:85:1e:1a:
dc:77:aa:a8:a2:34:4b:0e:a7:71:c4:eb:7f:42:18:a0:60:96:
f7:23:c7:30:4b:83:a5:4d:de:f3:63:f8:4e:0a:e6:45:be:c8:
05:ac:3a:6d:a2:ff:33:82:50:3a:3b:8f:dd:9e:07:55:2f:93:
08:f1:a2:0f:8d:fa:44:5a:9c:9f:07:52:f3:d9:77:24:e4:b0:
e7:00:38:b7:1c:b8:06:be:7d:87:e8:65:95:55:4b:09:3e:e6:
d4:b3:e6:8f:88:9e:80:00:86:bb:ed:2d:ba:53:5d:4f:a6:8c:
6d:b1:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:46 2025 by rpki-client