Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: zl4E7jTuYEX38dhAL4M19dKnENx55YbO5/VF/BE2Qhg=
Subject key identifier: EC:38:8D:6C:CC:CA:99:70:E1:E9:26:38:5E:5B:12:33:A3:69:FB:36
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 0196C1944588E1394A3E078696A652DB0BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 23:00:41 +0000
Manifest this update: Sun 11 May 2025 23:00:41 +0000
Manifest next update: Mon 12 May 2025 23:00:41 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: C4gS0sToY9X2Pn5ioZq87Lpv6TRAYxkMSk0t61D95gI=)
2: v5B9bil7tlbUN50h6GDN8m6sKFE.roa (hash: 47YbpbDGbrGPtLvV/Gf30olGqwG6mqrNB3XSB3G5VQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:45:88:e1:39:4a:3e:07:86:96:a6:52:db:0b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: May 11 23:00:41 2025 GMT
Not After : May 12 23:00:41 2025 GMT
Subject: CN=ec388d6cccca9970e1e926385e5b1233a369fb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:11:f0:31:ff:23:ea:15:31:0a:56:56:f9:e0:
e3:2f:46:ec:a3:0a:fb:95:13:68:a4:73:97:b0:cb:
78:ce:f0:ad:65:11:58:ad:f2:09:cd:eb:4d:3d:34:
14:66:ef:63:b9:ac:3e:d2:c0:67:84:4b:4a:8c:3a:
fb:62:f3:a8:48:62:9f:da:c9:4b:e6:d1:d1:0e:00:
59:71:a1:ab:4c:09:69:95:fb:21:a5:7d:0b:9f:03:
5a:da:f0:f8:46:59:b8:bb:c4:c0:06:c4:d5:6e:a7:
2d:59:a3:60:2c:27:d4:6e:d3:5a:be:03:ba:cc:56:
4a:e6:fc:55:4e:7a:d8:52:e0:ce:e8:a9:29:84:c8:
28:a0:f7:de:2a:61:3a:35:56:0d:8e:0f:27:68:0f:
7d:cb:2c:9f:29:01:87:f1:6d:80:1a:cf:26:d8:74:
fa:1c:51:38:3b:d3:48:ce:84:32:bb:76:9c:97:e5:
b2:ab:74:a4:aa:a6:8d:71:32:4d:2f:40:35:d4:7f:
fb:05:c4:0b:0e:e6:bd:7b:ae:1e:c2:23:94:99:b4:
c7:d1:da:be:e1:43:2a:1e:27:cf:4f:ab:a7:b4:61:
ec:1c:67:58:fd:12:14:37:45:51:ea:6d:5e:0f:00:
a8:47:15:37:8a:8c:bd:51:9c:bc:4a:30:5f:7d:9a:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:38:8D:6C:CC:CA:99:70:E1:E9:26:38:5E:5B:12:33:A3:69:FB:36
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f5:b5:af:ae:c4:43:27:ea:89:df:ac:ab:ff:c2:f6:19:26:
d0:8f:86:f0:a1:5e:63:11:d1:92:07:bb:cf:82:9b:6c:2c:10:
e4:2c:6d:db:bb:05:45:f9:ee:94:e4:10:ae:d3:d4:bc:bb:57:
b4:74:28:a9:de:cf:86:d1:06:9c:40:1b:76:9d:ed:51:d5:c9:
16:54:6a:bb:04:09:3c:40:a6:d7:c5:7e:2d:50:91:54:d7:dc:
a4:5a:b0:b5:df:cf:2a:6a:df:dd:c7:3c:31:f5:7e:b0:52:3f:
29:d8:4e:61:c2:21:bd:a5:68:16:1a:fe:91:25:1b:4c:58:fe:
44:bf:6e:3d:f6:01:31:c0:92:f8:91:90:d8:60:c9:d8:29:8b:
df:0c:d3:f8:a8:09:9f:6e:00:65:2f:d4:1d:0d:6d:f7:03:58:
9e:4d:31:d0:a5:49:fa:63:da:c8:e3:8d:07:53:17:7a:2e:10:
bf:51:7f:7e:46:bd:b9:13:07:86:4c:82:c1:76:ac:e4:ce:11:
93:ae:50:6a:27:f5:b0:32:1d:be:e8:7f:f5:d4:83:bc:3c:58:
c2:62:17:15:69:2b:01:b0:82:f2:2a:38:08:6d:e1:82:ff:5a:
5a:72:4f:bb:45:ae:dc:fc:7c:5a:c4:4e:d1:02:1b:c1:f4:83:
2d:4c:21:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:21:36 2025 by rpki-client