Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
File: ziLdGXJbalnnnw_zl4mlZY5KX90.mft (raw, json)
Hash identifier: oc94PpIi3bV1iX4xloEPnI50eSj5YlTQdxpULQUkbug=
Subject key identifier: B8:51:81:86:46:4F:19:FA:7A:2B:29:43:1D:41:7B:E3:82:90:45:5E
Authority key identifier: CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
Certificate issuer: /CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Certificate serial: 0196B7EC73E1FEF60AC526A59D1EB285FE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 02:00:48 +0000
Manifest this update: Sat 10 May 2025 02:00:48 +0000
Manifest next update: Sun 11 May 2025 02:00:48 +0000
Files and hashes: 1: vCN5n7XgRlbJNVyUvtiVehd0W-c.roa (hash: doLyWpoVrhe1vhRGrAeN+5Um0tW+zvGku8pJrn/YoG0=)
2: ziLdGXJbalnnnw_zl4mlZY5KX90.crl (hash: 5W8zzfT/YjQc9f8BSceABfsrHsNB1FtFFeKrptbzFj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:73:e1:fe:f6:0a:c5:26:a5:9d:1e:b2:85:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce22dd19725b6a59e79f0ff39789a5658e4a5fdd
Validity
Not Before: May 10 02:00:48 2025 GMT
Not After : May 11 02:00:48 2025 GMT
Subject: CN=b8518186464f19fa7a2b29431d417be38290455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ec:54:24:34:bf:da:de:8e:df:0c:03:d5:9a:
53:71:38:59:75:b3:56:04:0f:0f:8b:e6:f7:5a:c6:
7c:b6:e9:d8:2e:53:7d:3c:b6:ef:e8:15:f8:a8:55:
57:ed:1c:e3:0e:53:21:bc:06:66:cb:28:32:2c:61:
d7:74:18:62:82:8f:2e:7c:fc:a7:27:5e:45:e9:1f:
f3:fe:b1:92:5b:b5:ec:87:7d:c2:1e:18:3b:41:3b:
4d:40:a2:f5:bc:f8:11:a1:0d:13:07:e6:a9:06:77:
7f:b2:d8:7f:26:dd:50:5d:72:7d:95:fc:84:45:4d:
54:77:b3:cb:6a:8a:d4:3d:9f:68:89:4c:f4:13:d5:
b2:f0:ea:bd:bc:4a:c5:d9:29:6a:f4:32:23:db:35:
35:ae:6b:bb:5f:2a:d7:03:f1:cb:3f:3b:92:ba:af:
75:e9:61:d9:03:53:e5:85:8f:02:d2:94:2a:e6:37:
86:c3:9d:59:19:d0:38:8f:d6:da:95:e9:2d:fa:09:
4d:66:73:42:f5:72:99:ff:f0:2d:f3:d4:5a:d6:78:
57:8f:9e:ea:97:b7:34:f1:0b:32:61:c2:f0:25:b7:
a0:35:b7:67:0e:a0:3e:11:bd:aa:f0:cf:d5:4d:15:
6b:fb:55:42:53:ed:97:be:f2:93:18:c3:12:64:04:
96:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:51:81:86:46:4F:19:FA:7A:2B:29:43:1D:41:7B:E3:82:90:45:5E
X509v3 Authority Key Identifier:
keyid:CE:22:DD:19:72:5B:6A:59:E7:9F:0F:F3:97:89:A5:65:8E:4A:5F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLdGXJbalnnnw_zl4mlZY5KX90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c75f12-97a4-4d9e-9978-b1822755f712/1/ziLdGXJbalnnnw_zl4mlZY5KX90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:33:3c:87:4d:0b:8e:e4:42:16:7f:5a:6a:97:f2:9e:91:a6:
b7:e7:01:41:01:1e:06:e1:8b:8a:1f:28:82:5e:ec:f3:52:d0:
76:f4:6a:0a:26:4c:7a:82:a9:aa:cf:fb:27:fd:a5:bb:a7:c3:
5e:bb:5e:a4:e0:ed:5e:4c:69:bd:13:da:2d:98:e7:50:5c:99:
8f:7b:1c:c7:d0:c5:34:7e:d0:58:e6:be:27:03:ee:41:15:7e:
3e:ca:75:9e:d3:09:a7:aa:db:83:fc:43:58:49:9e:e2:3e:06:
a2:e1:9d:f4:d3:b2:15:26:f3:02:20:ed:4b:c7:8c:b8:df:18:
4e:5d:41:e8:bc:ae:48:74:87:af:bd:eb:ba:9c:34:31:9a:2f:
c9:a2:2e:14:0a:97:b6:eb:56:6a:4e:85:53:70:1a:e4:1e:50:
8f:a7:07:06:ab:26:4f:a3:70:b4:93:bf:ea:6a:a3:34:fc:66:
41:ec:b5:db:2a:1c:89:00:be:07:b3:56:78:73:95:b0:af:44:
f5:ff:cb:87:53:c3:34:ec:04:48:ef:7f:39:b3:29:a4:1d:39:
c7:9d:28:05:15:3f:55:c2:43:0a:d7:37:87:b4:c1:f4:aa:f6:
c0:94:82:c7:c1:71:f6:d7:53:bd:0c:bf:a9:08:30:c0:33:ce:
1f:ef:d8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:41:10 2025 by rpki-client