Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
File: zepK3ugLBlGc5A3T0T8oup9XWVc.mft (raw, json)
Hash identifier: xICUssmra19uF5MyIy/MeAtSsdgCzLYiclwj12cFQJw=
Subject key identifier: 6C:33:ED:87:F5:29:77:E6:75:AC:4A:36:E3:43:3C:87:20:BF:E2:4C
Authority key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Certificate issuer: /CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Certificate serial: 0196A4D2F9EF96E2C8DFEBEE9C9A69ABDBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
Manifest number: 1237
Signing time: Tue 06 May 2025 09:00:11 +0000
Manifest this update: Tue 06 May 2025 09:00:11 +0000
Manifest next update: Wed 07 May 2025 09:00:11 +0000
Files and hashes: 1: O0pEQEzhWfGPoGN9_GYQs2aEBkA.roa (hash: SE3IDQJtlW1HyYxGFEmw6qC9BXcob4+h3FZns0TYNu4=)
2: sVJ8yb4YMNZC8SR4z31lotsJRHA.roa (hash: +zzqZHb3MjdSyZ19xzKBnWrbrHGVz+kt5/OJZPLUdEA=)
3: zepK3ugLBlGc5A3T0T8oup9XWVc.crl (hash: nC/Z9ZKfZmXZUyMgYVaCPuX0O4RPP2GSsA/inKyNlfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 09:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d2:f9:ef:96:e2:c8:df:eb:ee:9c:9a:69:ab:db:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Validity
Not Before: May 6 09:00:11 2025 GMT
Not After : May 7 09:00:11 2025 GMT
Subject: CN=6c33ed87f52977e675ac4a36e3433c8720bfe24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:fd:b2:a7:d4:5e:54:f3:18:13:d2:2d:9c:
ee:3d:f1:92:43:e8:d0:81:08:50:d6:69:ed:dc:ab:
11:6e:6f:af:28:19:8e:61:5d:2c:ab:bc:2d:6b:04:
05:35:9c:7e:a0:28:85:55:26:c2:2e:43:0c:57:6d:
9a:24:1b:b9:b9:82:82:80:02:a6:82:c2:8d:90:77:
95:5e:34:d6:17:67:5d:ab:23:4f:01:ef:1b:51:c5:
71:50:ca:25:a1:23:87:a5:61:25:05:a5:8b:c0:c4:
97:39:63:ef:a9:be:74:9d:5c:c1:7f:03:02:c4:40:
2c:fe:f4:60:27:4b:07:4a:41:02:3f:0b:98:37:ba:
5e:ba:88:d3:05:64:cb:3f:15:cc:db:92:0f:b0:a1:
51:db:68:2c:17:d5:2f:e0:cf:11:42:b1:0b:c5:54:
1f:3e:c6:fe:93:3f:e1:6f:88:60:f1:47:48:83:b5:
1a:8e:4c:f1:f1:1b:bc:3b:0e:19:bb:9c:91:41:69:
db:f0:50:61:5c:98:6a:65:53:e0:5a:8c:7a:43:26:
56:99:4e:86:82:0c:c1:6f:58:fa:44:b3:4f:e5:9f:
fc:7d:71:e8:8f:a1:7d:0e:d6:7f:4f:df:7a:cd:ee:
bf:95:60:07:5b:78:79:98:d3:47:88:53:1e:98:6c:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:33:ED:87:F5:29:77:E6:75:AC:4A:36:E3:43:3C:87:20:BF:E2:4C
X509v3 Authority Key Identifier:
keyid:CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d0:92:df:02:2e:93:22:98:1b:23:33:9f:9d:f8:3e:3c:0c:
7a:87:2b:1d:5c:2e:f0:c8:51:ec:e0:f4:e0:20:db:f6:10:6b:
e6:ec:73:69:66:07:96:17:68:77:97:d6:46:6b:0a:3f:9e:85:
02:93:4d:10:24:a3:a4:71:e9:b8:51:89:80:a4:ea:4e:7a:67:
a0:80:af:4a:d1:79:cc:5d:f4:88:e2:1b:e9:d9:62:5f:d1:93:
73:ab:6d:7a:d3:94:6b:6a:66:af:49:d1:6c:fb:ab:24:5e:33:
d1:94:d9:70:95:a2:cb:39:4d:4b:56:5c:5e:ec:05:fe:19:da:
9d:29:ae:ba:dc:9f:9c:52:b2:dd:54:af:3f:8b:7a:93:f9:fd:
6e:d3:2b:6b:66:f0:8e:0a:60:ab:46:b4:fc:d0:03:b7:08:a3:
8d:d5:dd:74:c8:d4:5a:9d:a7:64:36:8a:1f:bd:1e:d3:0e:f5:
a0:d7:b2:e0:fe:8e:68:9e:53:55:5c:d5:39:b0:ea:1d:96:34:
37:2c:ef:e5:40:0a:da:91:b9:c6:2e:c1:1d:76:5a:ca:9a:81:
fc:cb:bb:48:55:e6:7f:4b:5c:bb:a7:24:96:ce:17:e4:4a:88:
1c:c1:51:3b:ce:64:6e:d2:52:f9:ca:26:c9:48:6c:dd:bf:03:
28:1f:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:25:57 2025 by rpki-client