Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
File: zRvlrhITa5bNnXilwkykct6Ixlg.mft (raw, json)
Hash identifier: AqSy2cpP379YJa6ZZDkJsjhNz+GTAwfTbE6zhjWXyS8=
Subject key identifier: BA:AD:EA:D5:EF:B5:AF:08:01:02:BC:E2:F9:84:8E:5D:7A:31:CA:B1
Authority key identifier: CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
Certificate issuer: /CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Certificate serial: 0196D174D81891579C3A6CC9F32F292D5F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
Manifest number: 0771
Signing time: Thu 15 May 2025 01:00:17 +0000
Manifest this update: Thu 15 May 2025 01:00:17 +0000
Manifest next update: Fri 16 May 2025 01:00:17 +0000
Files and hashes: 1: zRvlrhITa5bNnXilwkykct6Ixlg.crl (hash: F9y9xvjdh64i1klOtvM7boIOUJF6DzHws/bs2dGzGic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:74:d8:18:91:57:9c:3a:6c:c9:f3:2f:29:2d:5f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1be5ae12136b96cd9d78a5c24ca472de88c658
Validity
Not Before: May 15 01:00:17 2025 GMT
Not After : May 16 01:00:17 2025 GMT
Subject: CN=baadead5efb5af080102bce2f9848e5d7a31cab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:07:97:01:92:21:22:99:13:df:7a:80:e0:
15:83:ce:9b:93:55:3b:75:b3:dc:b8:34:e3:8e:99:
04:b7:bd:2d:c4:8f:81:ba:0b:27:e3:37:f9:58:a0:
66:74:02:21:23:7c:fd:1a:41:68:f4:64:43:bf:b4:
f9:a5:20:18:9a:31:94:78:b6:6c:12:f7:c7:b5:f0:
e9:b7:1e:b9:1e:a2:1b:29:4d:e4:fc:e4:6f:85:e9:
ef:89:b3:89:a1:28:81:5c:78:77:66:4d:5f:ba:44:
71:fb:1a:7d:c7:f2:fc:ec:f7:22:b6:b6:3a:59:82:
b8:bf:82:e3:10:c7:8e:48:aa:39:24:09:fd:1b:a7:
f4:96:3f:86:7f:2c:fd:b8:de:45:23:88:43:91:27:
7b:03:a2:8b:be:ef:65:05:31:5b:10:d6:2c:70:19:
60:2e:68:8c:8b:46:89:1b:fd:75:73:8d:20:71:40:
9e:84:ee:aa:c9:e9:cf:19:76:43:f6:0f:6f:ff:dd:
50:85:b3:9f:c9:be:00:b6:36:6a:79:9f:1f:01:08:
ca:11:68:aa:a3:27:66:bc:6e:12:3e:9c:97:4b:31:
59:ff:ed:1f:fe:65:c1:00:87:be:f9:fe:6b:59:5b:
ba:8e:92:da:19:79:37:24:3b:90:fd:2e:47:8e:87:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:EA:D5:EF:B5:AF:08:01:02:BC:E2:F9:84:8E:5D:7A:31:CA:B1
X509v3 Authority Key Identifier:
keyid:CD:1B:E5:AE:12:13:6B:96:CD:9D:78:A5:C2:4C:A4:72:DE:88:C6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRvlrhITa5bNnXilwkykct6Ixlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/5b1129-21dd-4ea5-9648-5f16de5c8658/1/zRvlrhITa5bNnXilwkykct6Ixlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fb:09:ac:43:15:4b:e3:9a:eb:f0:6b:cb:58:ba:92:32:8c:
1b:20:b7:d8:ee:a2:ac:14:e3:d6:19:3d:e1:e5:51:12:dc:78:
c9:77:32:3f:f4:b9:29:1c:49:8c:25:ac:0e:6f:f5:7c:08:61:
4a:a9:22:5f:92:e2:e7:df:04:04:b8:a0:51:c2:e5:c6:3c:40:
d8:e6:c5:1c:f7:e6:28:3e:df:3b:e6:67:ca:5b:e9:9f:65:d6:
d0:b5:9e:97:6b:bb:af:94:1f:03:b0:d3:04:f7:ca:ad:98:b6:
0c:d4:ca:c0:7f:f2:38:7b:b1:43:5c:ab:3b:b5:00:2f:9c:d5:
c7:42:fb:de:6c:35:92:10:a7:05:06:ad:ae:67:77:fb:ff:1e:
72:85:d1:77:49:20:06:71:49:64:cc:75:a6:ee:e7:c0:88:0c:
47:01:31:af:ad:39:a2:cf:df:8f:92:48:b3:64:cf:73:1d:11:
c4:9b:0b:a6:30:e4:16:b7:cb:c8:66:3f:2d:ec:1c:e5:a2:05:
c6:5f:08:59:c1:18:36:5e:3c:1e:fb:73:87:f2:99:2f:29:83:
7b:4a:40:f5:eb:09:88:37:99:b7:a4:39:55:a9:bc:b0:dc:cf:
9f:79:a7:ee:20:a6:d4:6b:06:8e:8b:99:7b:8e:59:91:8f:b3:
a1:c3:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 09:55:24 2025 by rpki-client