Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: YVudfNnQyCyccfcNefr6NA2/boYHUAk/39aNjUgiH2w=
Subject key identifier: 74:51:49:45:E2:BF:6A:47:FC:3D:27:F5:94:79:02:73:05:C9:3B:E9
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 01964D7EE7EC41ACA2062960C979F820913C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 0AE7
Signing time: Sat 19 Apr 2025 10:01:24 +0000
Manifest this update: Sat 19 Apr 2025 10:01:24 +0000
Manifest next update: Sun 20 Apr 2025 10:01:24 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: 1kJjHTbDrDpAms7R968U2BQjUeX/ZywHCSO1k/IJS5I=)
2: dQBlElXfO8pSdNwEKXjKZ-O9USg.roa (hash: S1t1SaIMwKXjVRHsk1Cwo0eWHwRLwztBGFQg3vgYpOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:e7:ec:41:ac:a2:06:29:60:c9:79:f8:20:91:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: Apr 19 10:01:24 2025 GMT
Not After : Apr 20 10:01:24 2025 GMT
Subject: CN=74514945e2bf6a47fc3d27f59479027305c93be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:1a:d0:7a:91:23:64:1f:5c:b4:6e:64:22:
a9:38:b9:63:69:ce:54:83:a2:73:2b:df:9c:01:76:
9c:0b:56:0a:25:51:13:4a:87:b7:ba:80:b1:00:ec:
06:67:c6:0f:63:d4:2c:fc:0a:11:e7:c2:41:06:e3:
6b:2c:a3:61:e1:86:2d:b1:2c:5f:1c:08:5b:d7:8b:
f3:27:fb:f0:52:92:7d:3e:87:30:90:f6:90:55:49:
bf:90:fd:ef:60:ac:37:14:fb:4c:17:1f:b3:2d:bf:
f6:5f:50:83:38:04:01:fe:ea:02:cd:4c:31:40:29:
09:7c:09:2d:c0:b2:76:88:92:f7:2d:34:e8:fc:6d:
84:e3:78:4e:a7:6e:2a:7c:1e:54:84:85:c4:62:a0:
8d:44:2b:17:fa:3e:fa:e2:a2:e2:92:eb:79:a9:d9:
9e:31:6d:c2:59:02:c7:2e:14:40:c5:62:62:25:92:
9a:3e:f0:9d:28:b1:49:0a:03:a4:e2:f7:7c:df:b2:
91:c5:b2:5c:9d:00:cf:11:84:db:94:f4:fd:b2:02:
d9:15:f0:37:81:70:16:0c:c1:62:c5:b2:8b:e2:81:
25:be:81:81:76:50:a7:0f:c7:3f:0c:30:b3:f6:0b:
e9:0d:f3:f9:7f:78:d7:2d:b6:be:ae:67:4f:77:9d:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:51:49:45:E2:BF:6A:47:FC:3D:27:F5:94:79:02:73:05:C9:3B:E9
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7e:8e:00:fb:9a:ef:fc:72:e0:9b:83:10:c0:b0:84:9b:2a:
dd:9e:10:39:73:6a:d4:f7:64:c6:e6:4d:fd:97:15:5b:81:8d:
94:8c:e5:ce:c8:96:e1:ac:be:2c:b5:5d:d1:a7:33:96:6a:73:
92:79:2d:92:71:ed:9d:bb:69:57:a3:4c:5b:b5:49:c2:25:8c:
08:b9:69:5e:92:d3:75:10:10:26:67:91:94:2a:fc:8e:bf:8c:
e3:81:48:ac:c1:18:2e:3d:12:18:3f:73:9b:e8:4b:0a:98:85:
16:2b:42:7e:05:f8:50:3b:a5:ca:3a:0b:41:90:df:bc:28:25:
67:22:86:fb:11:de:58:29:51:52:61:20:be:ef:47:ee:2d:f4:
3d:ca:45:42:67:0a:78:1c:98:84:fb:f0:a6:63:6f:8e:46:4f:
df:b9:c2:08:39:31:68:aa:f3:10:33:14:15:11:37:1f:9b:0e:
b7:c9:b0:48:25:46:37:1d:54:e9:c1:1b:a2:e6:ab:d6:29:1b:
26:be:f2:3a:b5:df:1e:3b:68:81:32:86:dd:87:ca:05:37:28:
2c:dc:e0:e2:32:29:c7:bb:85:87:9e:0b:c8:16:87:cf:09:4b:
46:1c:83:af:90:88:45:78:5b:73:db:3f:f8:83:4b:e9:b7:a6:
7b:f0:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:40:11 2025 by rpki-client