Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
File: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft (raw, json)
Hash identifier: SI+9U/ZI4WY5ILFQVbCeh2aHAXu3O8/FhtVekIu7UC0=
Subject key identifier: 1D:45:4E:90:D6:01:DE:26:45:52:E6:5A:45:B7:65:5D:B1:79:E5:48
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 0196D06234E01150C3A0E21EED22EB255ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
Manifest number: 0B39
Signing time: Wed 14 May 2025 20:00:18 +0000
Manifest this update: Wed 14 May 2025 20:00:18 +0000
Manifest next update: Thu 15 May 2025 20:00:18 +0000
Files and hashes: 1: 0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl (hash: lKI7mvvLa+HsBitYvJ1LJqWPa+ZwLAsjAo654eMFUy8=)
2: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (hash: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:62:34:e0:11:50:c3:a0:e2:1e:ed:22:eb:25:5a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: May 14 20:00:18 2025 GMT
Not After : May 15 20:00:18 2025 GMT
Subject: CN=1d454e90d601de264552e65a45b7655db179e548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:d6:82:2b:90:27:92:b3:16:46:8d:90:9c:
28:53:f2:e0:17:1a:95:a2:db:58:e5:68:6e:bd:3a:
35:2e:7e:4b:7d:02:ef:37:53:85:76:bd:5a:ad:84:
0d:f0:3e:94:cb:8e:01:23:ee:27:6b:ae:02:cf:96:
f6:db:8d:d5:d8:b9:56:aa:d7:d6:0c:f2:df:ad:50:
69:84:1f:27:0f:94:71:b9:93:32:2f:8f:35:89:87:
b4:f0:0e:8f:0d:f5:06:c6:52:22:c8:1c:3a:f0:7f:
cf:72:ed:d7:0e:e6:c3:39:8a:69:d8:dd:0d:4d:50:
f0:50:59:d1:2e:f1:e8:a7:65:c7:5a:04:8b:89:96:
d4:af:06:e5:47:b3:44:ee:19:7a:85:06:24:b0:6a:
17:72:15:a3:4a:7d:d6:aa:b0:e2:b7:26:4b:21:22:
9f:e2:22:41:7a:3c:69:5d:b2:60:09:13:ae:83:51:
92:04:b8:43:49:3c:d5:f1:27:d8:72:4c:cd:b7:72:
e9:9c:98:8d:aa:c9:ae:34:6a:28:8f:3d:f9:bd:3f:
09:fb:21:b3:ea:15:1b:a4:39:4a:1f:0e:c4:8c:2b:
4b:ac:67:9f:a0:4e:cd:6f:75:de:55:36:4b:3c:1b:
e5:0b:f0:77:35:0f:9a:ae:af:3f:54:2d:15:fc:15:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:4E:90:D6:01:DE:26:45:52:E6:5A:45:B7:65:5D:B1:79:E5:48
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:82:fb:98:64:87:90:41:86:73:e9:b1:16:61:45:28:39:6c:
6f:99:be:58:e7:8c:82:6a:10:2e:a3:ef:37:3d:c3:d9:8a:a0:
30:6d:ea:a3:bd:aa:66:b1:15:cb:66:6d:f7:2a:1d:ef:1a:6c:
31:ff:9a:9a:b8:17:63:37:ce:57:25:a9:71:f9:80:99:be:22:
ca:05:7d:ba:0b:a5:4f:31:77:fe:01:da:ff:6d:a1:35:05:85:
09:07:03:61:09:90:20:b9:40:23:46:b9:37:7f:85:b3:98:33:
3b:ce:40:11:ff:e6:a8:ab:37:e0:a1:bf:b3:94:f7:50:26:7b:
16:c8:a6:64:74:65:7c:25:ca:2a:9b:61:09:de:6d:cb:e1:d6:
77:aa:9d:54:f5:b0:ce:9b:f3:b8:2c:1d:6e:94:24:fe:b5:34:
b5:ec:ae:7f:8c:f9:56:c3:c2:56:22:2c:31:d8:cc:c2:a3:03:
1c:3d:d0:60:c1:aa:5a:1d:36:97:d4:08:40:e8:0c:55:a3:f3:
1f:dd:60:db:ce:f8:f5:45:7c:8f:cf:2d:24:11:a8:d7:50:f4:
da:ae:d8:9e:d8:33:5a:1b:49:20:7e:53:70:dd:66:51:fa:f2:
19:92:d3:f0:52:f0:b8:b8:14:09:d2:48:8c:21:d7:f4:08:e0:
dc:59:aa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:36:06 2025 by rpki-client