Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File: ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier: /pzIqmmslIA1W0PhW8SF2mP1ApiVo+KcDUeioa3efZQ=
Subject key identifier: 08:C0:14:CF:47:5E:64:7D:D7:0A:C9:21:11:4B:26:92:E5:D1:FF:E7
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer: /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial: 01965613D62CFCDA1131C0397FBA7B0EEAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 02:01:02 +0000
Manifest this update: Mon 21 Apr 2025 02:01:02 +0000
Manifest next update: Tue 22 Apr 2025 02:01:02 +0000
Files and hashes: 1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
3: nBzRioAspYogjhuqMfmeJKfieBA.roa (hash: zMCnSjaFE4ydwmXDRAVpua0IoyMIX5RMql4K/75vlGo=)
4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: 651JUJDxKOLrBT+QRBFK/o7xxukv7DxxTS5ilaTbpEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:d6:2c:fc:da:11:31:c0:39:7f:ba:7b:0e:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Validity
Not Before: Apr 21 02:01:02 2025 GMT
Not After : Apr 22 02:01:02 2025 GMT
Subject: CN=08c014cf475e647dd70ac921114b2692e5d1ffe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:08:88:ad:00:6b:cc:49:84:8a:fe:fa:48:dd:
d0:32:11:3e:c8:3c:43:e4:5d:2c:c6:34:25:fb:f2:
ff:e2:ef:dd:c2:6e:e4:a9:48:09:7b:3e:cd:5f:20:
dc:31:93:0c:87:00:09:ab:62:c1:5d:2a:10:98:60:
e5:1a:74:f0:85:f4:83:c2:db:ef:78:ae:86:10:81:
50:e0:e7:03:04:b6:c9:2d:26:a4:44:57:be:99:4b:
31:70:35:b2:c4:43:ba:9f:35:a3:67:87:c3:96:63:
90:55:96:34:50:9c:db:68:47:0e:a3:16:12:a9:8a:
0a:bb:16:f8:46:c4:0f:0d:10:77:50:a9:aa:46:12:
7c:61:63:2a:97:e1:e2:c4:ac:dc:bd:7f:98:78:04:
98:e2:67:54:c6:c8:72:cd:83:d5:b3:8b:22:05:db:
75:80:bc:90:53:eb:56:5a:b3:23:a8:9e:87:47:e2:
2c:71:75:30:24:ed:a7:b4:2f:47:71:bb:e1:a7:33:
4c:bb:9e:1b:a9:fc:3a:6b:e0:ad:b1:d9:de:e1:3e:
d9:d4:c5:63:1b:c2:a8:0a:4c:b2:9f:8b:24:fc:da:
27:69:89:ce:f7:08:3b:ac:e2:66:3f:d8:c5:e0:ec:
b0:7f:b2:47:be:21:95:5e:60:d6:0e:9d:f5:12:2b:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:14:CF:47:5E:64:7D:D7:0A:C9:21:11:4B:26:92:E5:D1:FF:E7
X509v3 Authority Key Identifier:
keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f8:57:01:59:e4:2c:9d:44:f3:a4:89:7a:b3:d8:ea:ce:dd:
d3:9d:7f:25:bc:08:b8:dd:06:fa:ae:a6:67:d7:05:09:eb:ac:
fd:a9:ae:d0:ff:41:0b:70:ad:ee:35:18:e4:cc:38:7a:7a:89:
ac:93:44:75:bd:e2:6a:9f:04:2b:a2:c0:cb:24:48:55:71:24:
13:e8:8a:d6:ba:8d:fa:1d:84:ca:aa:f9:0a:7e:d6:6a:ae:c1:
34:e8:97:ce:10:32:51:69:74:e4:36:b2:bf:ed:0f:3d:58:e8:
7e:1e:7d:31:55:69:28:eb:df:dd:dc:a1:4e:a7:c8:c6:a0:a6:
e4:27:77:11:fb:ca:71:14:d2:96:b5:96:e6:6f:fb:4c:c1:02:
0e:b1:85:6b:38:cb:17:87:29:3d:b8:d9:16:e3:01:98:8f:1c:
13:ae:b7:aa:84:01:a7:d8:af:49:42:e0:91:9d:a0:85:af:56:
2b:95:db:16:a4:d7:86:d8:40:8e:0f:c4:4c:af:42:fa:43:53:
c1:bf:92:7f:45:9b:2c:62:68:6e:03:91:e5:2a:f8:6e:ee:ba:
ec:d9:f9:7b:28:ed:33:11:4c:f4:94:6d:80:e6:91:3c:6f:a0:
d1:d6:b1:5b:19:39:88:bc:1d:55:cd:2f:b6:6f:df:a9:26:85:
8f:53:ab:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:53:08 2025 by rpki-client