Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
File: Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft (raw, json)
Hash identifier: IZaIJdY8OCxgbsn1QGnx0uAieChcIJiHzWoG5cg1wGU=
Subject key identifier: 08:D8:6E:DF:19:D3:16:51:6D:E4:9D:27:A1:0A:E8:CA:44:A4:C5:6B
Authority key identifier: 66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
Certificate issuer: /CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Certificate serial: 01964BFD707AADEFBD401E527F48DDD135A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
Manifest number: 14CD
Signing time: Sat 19 Apr 2025 03:00:22 +0000
Manifest this update: Sat 19 Apr 2025 03:00:22 +0000
Manifest next update: Sun 20 Apr 2025 03:00:22 +0000
Files and hashes: 1: 4cueVYGn7FG0ZEgg6Tbl8VUqwQ0.roa (hash: nftpb28hHTEVRFrgXZ0NAPskqh1IzDTL1Eib3OJFbuI=)
2: Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl (hash: nFWnxBFDgb1cnitJ9A41zltabsMlfTuNo54uQ3P1fOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:70:7a:ad:ef:bd:40:1e:52:7f:48:dd:d1:35:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669f5c8b9b63ae5e28786eba10a1f6572a60e3fc
Validity
Not Before: Apr 19 03:00:22 2025 GMT
Not After : Apr 20 03:00:22 2025 GMT
Subject: CN=08d86edf19d316516de49d27a10ae8ca44a4c56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:dd:b5:17:77:01:70:2e:7a:ed:e3:b1:d5:
7b:3f:24:5d:32:4f:a2:15:99:3b:dd:af:3c:25:dc:
24:40:04:36:bf:21:6c:f6:01:be:09:0d:cd:44:9e:
f1:88:a2:d9:fb:df:bc:df:74:6a:b0:81:6b:a5:25:
b4:ac:1a:f4:a3:16:c2:0c:b2:da:0a:56:7b:2a:09:
34:97:8a:9e:17:20:81:0b:67:03:1b:fd:6a:a5:3d:
ed:c5:2d:e8:d7:3b:9d:59:d0:be:a8:35:46:58:4c:
94:a5:28:cf:b4:50:95:31:95:3b:64:06:ba:b2:a3:
67:54:a7:45:de:ea:10:95:4c:b3:a0:2d:1f:30:3d:
1f:96:67:3b:b0:1a:65:a5:66:66:3a:77:26:12:9b:
ab:78:9e:41:90:89:35:78:34:0f:1e:f5:ca:a2:51:
68:6b:30:cd:d8:ff:c4:7b:4a:1a:0f:fe:f8:99:1d:
46:5d:87:12:e1:5b:31:1f:6b:cd:da:3d:1a:f5:03:
88:29:c4:d1:a0:df:74:00:8b:2e:c4:3c:cd:6f:f7:
36:0e:96:31:0b:93:01:88:f1:94:df:53:fc:a2:b7:
ea:aa:2e:ab:16:f3:cd:6c:e7:03:50:1e:61:8b:96:
8b:e3:8d:20:e0:9a:4c:e1:9f:5a:43:8e:d7:a7:d4:
73:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D8:6E:DF:19:D3:16:51:6D:E4:9D:27:A1:0A:E8:CA:44:A4:C5:6B
X509v3 Authority Key Identifier:
keyid:66:9F:5C:8B:9B:63:AE:5E:28:78:6E:BA:10:A1:F6:57:2A:60:E3:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp9ci5tjrl4oeG66EKH2Vypg4_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3c2efb-2292-4c6a-914b-55eb820fd596/1/Zp9ci5tjrl4oeG66EKH2Vypg4_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:bb:c4:ef:c0:a3:4c:c7:39:a3:86:00:9f:01:5b:ea:03:
7a:72:9f:c9:75:e4:20:6b:58:a1:fb:91:92:57:61:82:4f:99:
7f:b3:ef:ff:c9:e9:3e:45:92:fd:0b:63:ee:1b:04:df:49:32:
8c:45:f0:de:0b:6a:80:03:48:49:ba:e4:2b:40:4a:07:6e:57:
ba:8d:79:45:a2:55:76:99:47:f2:d6:73:7a:25:02:9e:95:23:
36:d1:e3:4a:0d:85:e2:b0:17:79:79:b1:ec:4f:97:74:b2:71:
65:8e:32:83:26:a9:c2:ce:ea:37:b9:eb:19:39:db:d7:e7:67:
34:32:7d:9e:96:9d:32:3f:e8:4e:a0:4c:f8:84:15:ed:4c:2a:
45:47:be:6f:d7:71:dc:7b:9f:82:67:2c:8c:ae:68:1d:5b:05:
40:62:43:30:ca:f3:29:ee:6e:f0:87:bd:fb:a9:67:44:14:71:
f8:dc:21:9e:e7:82:70:ed:62:fd:58:12:04:a4:19:b2:0a:88:
e5:d5:72:f8:4e:9f:82:fa:66:9a:6e:aa:d6:f8:29:85:5a:8c:
e1:78:0c:19:92:38:b1:c4:e5:d9:c9:f1:b4:e3:c3:36:7e:c7:
fd:f2:5d:2b:c2:d0:a1:9f:9c:d1:1d:e5:1e:22:42:ae:3d:86:
19:2c:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:50:24 2025 by rpki-client