Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: u4btDETGNN7OvLSPB9tCO/UvAYn/+W4VKQpxbPTIsco=
Subject key identifier: 2E:C2:85:75:53:FE:A5:96:38:A1:7D:FC:FB:C1:CB:B8:C0:88:44:5D
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 019638ADDB9C87457266C33515F32B610EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 14F1
Signing time: Tue 15 Apr 2025 09:00:40 +0000
Manifest this update: Tue 15 Apr 2025 09:00:40 +0000
Manifest next update: Wed 16 Apr 2025 09:00:40 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: 52jXpKmyxL1cTJTYBpwbIOeV8Q10LjFTusBAeGLVEkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:ad:db:9c:87:45:72:66:c3:35:15:f3:2b:61:0e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: Apr 15 09:00:40 2025 GMT
Not After : Apr 16 09:00:40 2025 GMT
Subject: CN=2ec2857553fea59638a17dfcfbc1cbb8c088445d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c6:38:b2:56:53:79:c1:c5:53:29:ac:0b:f4:
78:a1:a8:bd:35:8a:aa:d8:cf:c3:d6:d8:0e:db:92:
25:1c:69:9a:aa:7c:79:18:c7:84:52:a2:9f:8e:c6:
09:ce:59:92:71:2e:4a:46:3e:7c:ec:69:ee:84:d4:
59:a6:da:11:50:bb:60:8d:45:e7:0f:04:e2:af:af:
4d:eb:45:7b:da:0a:62:20:ae:8a:60:fc:66:3f:74:
92:1a:bf:fe:d7:47:d0:27:cd:ab:7a:a1:52:3e:ca:
4e:13:91:1f:58:23:d3:8c:cb:9b:1e:da:73:d5:ec:
ef:60:0e:3e:af:07:18:25:c7:a6:61:c7:3d:c1:73:
15:10:a3:e1:74:02:0f:b2:22:70:1e:1f:fd:5d:7e:
0d:e8:b3:67:cf:6a:c4:99:6e:5b:b4:ba:0b:b5:b3:
ec:dc:4a:67:58:0b:48:ad:b9:33:5a:ee:6e:ea:b2:
83:4b:6c:1a:b1:b3:2d:e2:2f:4a:b7:5c:d5:61:e4:
cd:7a:61:ca:73:58:64:c9:bc:45:d4:38:91:6b:c9:
9c:5e:87:82:82:1a:c7:ed:cd:71:c7:fd:05:98:d7:
60:46:44:f4:a0:0b:a1:55:c9:25:4c:5a:60:14:3a:
1c:ca:74:27:00:14:3b:d8:4e:f3:c4:46:e6:80:cf:
f0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C2:85:75:53:FE:A5:96:38:A1:7D:FC:FB:C1:CB:B8:C0:88:44:5D
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1a:23:b0:f3:aa:97:8e:01:6e:b7:d8:f7:ff:dd:44:91:3f:
4b:fa:75:0e:6f:da:e0:58:cc:1f:9a:1c:14:79:ce:ef:e9:7e:
8b:1c:a8:34:96:b6:39:bb:48:8a:29:6c:69:5b:1c:e0:ae:8b:
c0:4f:f8:63:ec:ed:a2:34:20:ed:2d:e1:52:72:44:35:8e:81:
f2:c0:85:10:d9:57:e2:68:ea:b9:68:dc:01:a2:9a:1c:c3:d8:
8a:c2:9f:90:e5:cb:db:23:70:48:66:bc:91:5f:86:89:89:89:
b1:c4:46:ec:ea:35:5e:90:28:9e:47:8f:c9:f6:9f:92:32:cb:
43:f0:e8:0f:28:b7:b2:0e:b0:45:21:83:6b:61:ec:d0:80:4c:
9d:91:0e:ce:d1:c6:b1:08:a7:1b:3d:3f:52:3d:29:2c:a1:e5:
67:3a:7e:93:f7:4e:23:26:c5:8a:cd:d8:1b:62:75:68:6c:d3:
79:ec:6f:61:18:d6:ad:d5:f3:a4:ae:fd:31:88:dd:80:6b:c9:
fc:d7:73:e4:a6:f5:3d:e1:a7:1a:63:2f:3f:c7:0c:d0:68:35:
d4:4d:fb:16:d4:dc:81:56:dd:a7:d1:1a:fc:c4:c9:99:66:e0:
e9:54:07:cf:8a:a0:bb:cf:ca:43:7f:48:c9:95:e8:b0:67:5f:
d5:c7:e7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:35:05 2025 by rpki-client