Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft (raw, json)
Hash identifier: o4pnHOqG9lgU9S9npoelRPVjDzl4xkvrYApCCCEI1eI=
Subject key identifier: 7C:6D:4F:DB:6D:21:0A:03:DF:AD:7D:6B:63:29:C1:43:5F:59:A9:7E
Authority key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Certificate issuer: /CN=cdee78ad857607523b50b60acd9e22ca5a107854
Certificate serial: 01964F35BA39AF367E6F2B3CF0157125CA4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 18:00:43 +0000
Manifest this update: Sat 19 Apr 2025 18:00:43 +0000
Manifest next update: Sun 20 Apr 2025 18:00:43 +0000
Files and hashes: 1: X-KNJVz9F02-eLDfaKPH63PtzRc.roa (hash: qtVoMR5Y45CsVcXQuHhRRS1BbnVU7jS1ywbPtWRVweo=)
2: Zi7Ur4wbJWR3EdLIxTIMt470yv8.roa (hash: 2ojUhQY/moH0LhM/gEFCEK3T0bFJRBAMK4gF5wvlAf4=)
3: ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl (hash: XYZg6EOzd911jwnbxun4Zqw1Xf7oqfQpijRSabuydDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:ba:39:af:36:7e:6f:2b:3c:f0:15:71:25:ca:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Validity
Not Before: Apr 19 18:00:43 2025 GMT
Not After : Apr 20 18:00:43 2025 GMT
Subject: CN=7c6d4fdb6d210a03dfad7d6b6329c1435f59a97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:26:eb:bd:54:a5:60:56:fb:8c:8d:b9:7d:
3e:a9:36:b6:df:4d:a7:54:bf:e4:76:fd:75:69:c2:
37:af:c2:ae:a3:7e:65:c1:4d:0c:f0:e3:26:c7:cd:
9c:8f:e9:eb:71:59:bc:0a:60:e6:f6:db:d7:8f:16:
63:7d:d8:ca:64:e7:b5:e6:7b:87:57:4c:15:cc:47:
99:fc:c5:46:ac:e6:60:be:f1:3a:5e:f9:d2:78:c8:
db:cb:80:12:ed:e4:ea:55:79:7a:a6:82:24:bd:7f:
60:4e:4f:d8:db:ff:58:41:8a:ff:37:d3:d0:72:21:
3c:90:b1:bb:95:07:9f:5f:87:df:78:a9:d4:8a:4b:
ab:8e:55:f3:fe:61:4d:f4:97:8f:f9:15:f4:be:d7:
73:de:fd:d4:0b:e9:82:d0:8d:5c:9c:cf:3c:16:3d:
df:17:79:3d:3f:49:b6:83:a8:46:1d:65:64:3b:ad:
b9:88:77:fb:b0:4b:21:73:da:e9:11:0a:79:02:aa:
58:fc:0f:ef:00:a4:20:0c:89:e1:26:9e:24:4e:20:
2c:55:07:22:39:5e:66:fc:d6:68:60:df:52:50:5c:
94:6d:8f:24:bb:60:b9:80:c3:77:96:6c:cc:4b:9e:
8a:54:35:34:cc:9d:b2:f9:ae:80:34:05:dc:32:ce:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6D:4F:DB:6D:21:0A:03:DF:AD:7D:6B:63:29:C1:43:5F:59:A9:7E
X509v3 Authority Key Identifier:
keyid:CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bf:74:03:92:c5:7e:56:7d:81:b6:99:03:fb:78:dc:e6:5e:
af:83:24:13:42:20:b2:b8:1d:15:7d:54:3d:6b:43:d5:ac:83:
b5:aa:df:45:dd:a1:87:cd:f1:c2:d0:28:8b:49:ea:a6:f5:95:
bf:f9:7c:46:e4:d5:ba:69:df:39:d7:73:c2:e9:b5:e7:d7:5d:
16:a2:2a:12:eb:a1:cd:8d:38:d4:51:e1:35:45:34:6b:a4:0d:
fb:8a:67:75:72:07:52:a4:01:09:fd:2a:1f:1c:71:ea:da:fb:
63:51:2d:d5:32:70:61:9d:e5:91:ba:d1:f6:20:b8:43:da:03:
48:36:3c:e9:4c:0e:b6:43:df:73:74:79:2a:bf:0a:e6:6f:0c:
90:70:7c:f9:30:53:b8:f8:c1:7a:40:f4:6b:c6:34:7c:47:b7:
6f:c3:80:4f:7b:4a:a2:bd:03:3f:20:00:61:94:03:a5:54:ec:
fe:e4:86:75:2c:50:52:1c:f1:4b:d9:b1:a2:34:f2:17:d2:d6:
5c:d8:73:2c:f5:3c:f6:08:5c:c2:83:26:1e:11:b8:28:35:be:
33:42:3d:0a:88:f7:23:a1:09:21:0d:ee:8c:2b:90:8c:69:e2:
61:7b:b2:63:96:f0:7d:ba:0f:58:e6:63:ef:ec:c7:b3:ea:ab:
ec:7f:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:06:03 2025 by rpki-client