Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: KoJ/11kWi9SGntwNyzQyXrIQ5Ey8tN85EiX16B1HZBY=
Subject key identifier: 1A:E6:1A:2D:5B:A4:A8:31:47:93:C8:61:8D:2A:C3:85:6C:68:8A:17
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 01958BBB44AA5D416ABA79396B9D6DC6DAF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 19:01:00 +0000
Manifest this update: Wed 12 Mar 2025 19:01:00 +0000
Manifest next update: Thu 13 Mar 2025 19:01:00 +0000
Files and hashes: 1: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: pY65npYnUZ0LwCWexxF28E1MxYdHhe0Ry1vrzyM09y4=)
2: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
3: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
4: nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa (hash: jcflcFSB0gGF5Eobckb0cDmbAhuF6soPeVbl+/qaprQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:44:aa:5d:41:6a:ba:79:39:6b:9d:6d:c6:da:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: Mar 12 19:01:00 2025 GMT
Not After : Mar 13 19:01:00 2025 GMT
Subject: CN=1ae61a2d5ba4a8314793c8618d2ac3856c688a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:68:5d:53:29:37:60:e7:3c:54:e5:80:07:
ad:6c:be:08:65:ec:11:da:72:15:48:5b:8e:9b:e9:
4a:9a:33:95:f8:60:d0:a0:7d:14:a3:87:10:63:45:
1f:ba:59:2e:46:2a:a2:28:97:bc:fe:5c:1f:b1:02:
0f:d7:27:7d:d9:97:a9:ab:7f:1e:dd:72:4c:d6:0a:
81:7f:e5:a9:64:57:87:2c:fe:d5:b9:58:37:4c:0c:
f2:37:b2:db:22:fb:a9:f9:8d:0f:77:24:54:e7:b6:
23:65:93:db:d8:ee:f1:ec:29:d7:d7:11:55:e5:31:
3a:b4:96:ed:18:e1:94:ac:f9:40:ae:a5:21:6d:ea:
ca:01:5b:f0:c3:ab:9f:38:79:6b:81:34:07:ca:e8:
78:da:89:4b:e7:30:2c:d2:15:c2:e3:2e:6a:cb:52:
4c:7d:46:62:d0:c8:fe:c4:b6:1f:4a:07:c4:9d:dc:
f3:b3:21:09:04:70:29:9d:03:b0:0b:30:71:57:e4:
66:da:d0:8d:6b:cb:48:bd:22:b7:df:cf:ae:10:8e:
9b:92:83:ba:6b:d8:bf:7d:bd:a8:87:de:f1:e7:06:
7a:a2:4d:fa:2c:49:54:bf:86:23:42:ed:96:66:51:
85:70:b6:b5:72:82:54:0a:c2:d2:a8:33:f0:9e:3b:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E6:1A:2D:5B:A4:A8:31:47:93:C8:61:8D:2A:C3:85:6C:68:8A:17
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:04:74:6d:21:c4:10:ae:8f:2a:17:ac:7d:eb:67:d3:92:05:
04:cc:74:17:0c:40:58:3c:1e:67:7c:a0:fc:3d:14:21:8a:ba:
4e:cd:f6:c1:b1:eb:0d:10:7c:51:03:54:6f:52:e6:66:b6:8a:
0a:e9:b8:17:32:30:9a:a1:de:70:b7:99:ad:4a:dc:cb:8c:39:
ab:b5:81:a0:72:7f:67:c2:6e:2a:56:7a:17:27:d2:95:16:9b:
0a:a8:9d:f2:07:e2:b7:c5:b5:d1:b7:91:a2:a2:b7:2a:d6:d2:
16:94:1a:99:ab:f2:45:e2:c8:99:f6:4d:76:ef:4a:6f:59:4e:
b0:34:12:95:03:a4:44:b7:67:15:93:91:68:ca:58:2c:b5:e7:
66:d7:68:11:3c:90:f9:18:34:34:98:5c:49:0e:e7:b7:93:6c:
35:91:c5:ab:1d:31:cb:fe:e5:e1:1b:9b:33:1d:f2:e3:ce:a1:
f3:0a:8c:07:eb:bd:f1:99:2f:ba:fc:a1:3b:e5:6b:7d:ef:8c:
20:e8:f8:cc:b6:da:cd:f0:ec:6c:af:6f:48:0b:ee:96:65:31:
c1:93:8c:7a:0c:e1:f3:46:2b:37:3c:04:0e:fb:02:a1:52:64:
bc:5f:d6:5b:ba:4c:1a:1b:7f:51:8d:5b:c9:9f:e9:03:8f:f0:
16:04:c8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:09 2025 by rpki-client