Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: JEJg5YfNJorm7fVmDMHEmsPp61rkrH1ntJkr+9GUiyo=
Subject key identifier: C5:71:CE:5F:61:8C:AF:D3:C0:1C:69:AE:F6:3C:79:A4:B5:CA:BA:3F
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01969E2C1CF5926FBB323BFE12ECABD7D357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1537
Signing time: Mon 05 May 2025 02:00:12 +0000
Manifest this update: Mon 05 May 2025 02:00:12 +0000
Manifest next update: Tue 06 May 2025 02:00:12 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 8ohBz2shB7LBDFBPVFrPm061ij/oBp4H0f2LrPRtEeQ=)
2: VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa (hash: Ey27v1VSvBG1kOCOG9N8A9sC+9f+2KfQyTxQVT7GEW4=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:1c:f5:92:6f:bb:32:3b:fe:12:ec:ab:d7:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: May 5 02:00:12 2025 GMT
Not After : May 6 02:00:12 2025 GMT
Subject: CN=c571ce5f618cafd3c01c69aef63c79a4b5caba3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:e0:7f:15:c5:1a:be:48:d2:f0:7d:47:8c:
04:8c:dd:96:fd:2f:45:95:c2:ae:df:bc:fb:63:b4:
16:b8:9f:22:c2:b0:8e:46:5c:fe:5f:97:ab:1a:68:
a9:63:ec:00:09:f0:2a:49:9e:ce:27:e2:7c:6c:88:
90:df:0e:71:00:04:1a:81:ca:56:e8:1c:86:ea:e5:
6a:b4:44:3a:64:cd:38:93:c1:5d:37:d9:db:09:4c:
29:c4:e7:1d:5e:be:51:b6:fa:1b:f9:db:43:a0:5d:
3e:ee:e1:d4:aa:65:40:29:44:6b:14:f3:2d:1b:d2:
0b:43:73:0c:b2:08:1f:b6:a4:88:70:fc:fd:e2:ac:
26:bb:a7:40:62:05:86:2a:30:1e:5f:69:c4:a7:16:
88:ff:1f:33:ac:3f:1f:16:89:84:4b:b2:74:44:20:
c0:a6:78:13:aa:33:cf:a1:da:8c:ce:1f:b4:87:ce:
bf:9c:01:ec:cc:5a:bb:b6:a3:43:41:0a:70:97:de:
2d:85:3b:b1:a3:4c:5f:57:2d:8f:8d:e3:fe:4c:25:
c6:50:1b:6a:56:91:13:52:a7:eb:45:6f:1d:e5:01:
9f:f8:f4:ca:18:01:e0:85:f0:f0:39:3f:b7:30:02:
c8:90:37:b8:1f:11:6f:86:4d:45:2a:71:e5:ad:b2:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:71:CE:5F:61:8C:AF:D3:C0:1C:69:AE:F6:3C:79:A4:B5:CA:BA:3F
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a5:2e:ab:5b:fc:9a:f1:12:ee:1f:d7:0a:1b:ae:26:e4:57:
9b:01:fa:37:43:31:84:f3:dc:f5:60:06:6a:e9:8b:8c:da:38:
36:9e:74:39:55:3d:ae:19:71:9f:02:ef:41:b5:7e:dc:fe:5d:
b3:fe:d1:80:b5:bd:2c:d5:af:44:82:da:54:61:91:c9:7b:6d:
ca:79:86:42:dc:e0:f1:53:89:0b:d8:75:4f:5f:c6:8f:c7:b0:
e6:c0:c3:32:25:94:4e:3d:73:1a:d8:ea:34:84:91:5b:44:0e:
ef:84:af:3f:7c:b3:f0:01:1d:dc:a9:cd:88:45:1a:54:b4:e9:
0a:94:dc:d7:32:1f:3d:84:f0:61:a9:3a:0f:fb:c8:40:ca:48:
15:88:7c:86:c4:24:32:60:6b:77:90:c1:2c:ed:76:83:a3:2d:
9b:47:cc:58:2b:8b:30:a6:86:42:0c:d8:9b:c9:1c:da:aa:a8:
82:6d:38:fd:de:6e:24:8c:eb:43:7d:b3:c2:1e:0a:27:81:3b:
df:8d:18:32:3f:78:7b:d1:f2:dc:ff:73:21:db:09:16:9b:72:
7d:a9:d0:b9:50:2b:46:81:f5:74:11:ba:40:2e:c0:fb:2a:d9:
a6:d1:25:e6:56:e5:d6:72:73:f4:68:14:97:be:08:d3:ee:69:
1a:90:67:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:26:10 2025 by rpki-client