Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
File: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft (raw, json)
Hash identifier: +3xdwq4TIstYkOmzivmJbtJlXfq3tu6bim2V/5rdVi0=
Subject key identifier: B1:FB:5A:66:4C:44:D2:74:AE:73:CF:E4:EB:58:F1:0E:64:52:7C:7D
Authority key identifier: D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
Certificate issuer: /CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Certificate serial: 0196C15CFD8084A6768EA38BC1005A9597EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
Manifest number: 0E2D
Signing time: Sun 11 May 2025 22:00:19 +0000
Manifest this update: Sun 11 May 2025 22:00:19 +0000
Manifest next update: Mon 12 May 2025 22:00:19 +0000
Files and hashes: 1: 1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl (hash: ML9RHIU3BQx12uYeSrZPbCJBVhqSCCjsVe2PC2lU/JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5c:fd:80:84:a6:76:8e:a3:8b:c1:00:5a:95:97:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d599ad82ca0fdba06fe08b7b9e0d1373b71cb469
Validity
Not Before: May 11 22:00:19 2025 GMT
Not After : May 12 22:00:19 2025 GMT
Subject: CN=b1fb5a664c44d274ae73cfe4eb58f10e64527c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:36:71:9d:25:2c:e7:92:26:37:f0:63:2b:
95:67:b8:90:a1:f8:8a:2e:47:53:26:54:cd:33:d8:
c4:30:9f:f7:a5:cd:b6:52:c9:ff:a2:cc:d2:0a:8a:
1d:aa:88:c3:52:ca:f0:ee:e1:9c:5f:d4:3a:42:84:
19:2e:40:14:0f:42:3f:b9:bc:f5:24:69:b2:f5:31:
9b:8a:55:c1:b8:51:b6:b7:de:1c:8d:6b:98:3c:5c:
03:30:82:4b:2c:d0:4d:77:e9:66:77:eb:5e:38:e8:
e6:df:bb:af:df:e2:a4:aa:0a:89:24:4d:8e:99:6f:
ac:3d:80:1d:a1:01:ec:d1:1c:da:f2:5e:5f:c9:59:
6c:3d:29:d4:69:a2:30:2a:05:c5:47:9a:17:7f:5c:
fa:1a:0d:a5:82:eb:30:b7:5a:29:7f:39:e6:5a:7a:
f5:53:1b:91:2d:f8:93:51:15:96:44:35:a2:87:95:
69:9f:23:8e:c0:0c:c4:a5:c3:70:c6:15:bb:f4:bb:
d0:6e:c6:b7:cf:06:68:91:d6:a0:08:b3:63:8f:53:
ee:91:b1:f0:fd:5c:09:7d:5c:cd:cb:2f:9a:17:96:
07:25:80:70:ac:32:5e:6a:05:51:2d:79:72:6a:99:
e1:d7:be:3d:64:de:8a:7e:98:62:c8:8e:a7:e2:c6:
21:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FB:5A:66:4C:44:D2:74:AE:73:CF:E4:EB:58:F1:0E:64:52:7C:7D
X509v3 Authority Key Identifier:
keyid:D5:99:AD:82:CA:0F:DB:A0:6F:E0:8B:7B:9E:0D:13:73:B7:1C:B4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZmtgsoP26Bv4It7ng0Tc7cctGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/934073-021b-4fbe-b019-b6a6f8eda75a/1/1ZmtgsoP26Bv4It7ng0Tc7cctGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:17:92:a2:73:74:fa:9f:7d:c1:a6:21:fd:eb:0c:52:2b:45:
73:79:81:e0:b7:86:b7:63:d2:3c:aa:c4:58:a6:e8:f5:80:37:
41:30:60:38:69:c0:76:b3:f6:82:09:fd:a0:d2:d7:e1:8a:29:
eb:0d:1c:ca:8f:d6:8e:67:76:25:1b:c0:d7:bb:fa:57:4d:c3:
3e:50:01:70:6b:37:0a:04:b5:1e:ef:dd:1b:8b:0e:1e:f1:41:
12:aa:e5:69:bb:05:2a:c0:af:b1:67:67:22:d8:e4:08:77:24:
28:a1:39:42:76:1b:45:b1:80:48:f3:93:c2:ab:33:48:a4:9e:
ff:b4:dc:b6:54:51:8f:d8:23:19:d0:f0:e1:9c:f0:f2:70:fa:
32:02:65:39:6c:1b:e1:7d:5f:9e:63:76:11:73:20:37:6f:ec:
2c:ad:4d:2f:19:2a:ab:90:2b:f5:b7:65:dd:5a:00:00:c6:0b:
e4:a0:d7:56:4e:b3:b2:95:00:57:43:df:58:31:bf:14:32:95:
9f:1b:5b:d7:17:6f:9c:2e:ee:e9:83:fc:18:43:07:f3:a5:6a:
ff:07:16:8e:0c:6e:f7:3f:0d:89:b4:03:fa:1d:cd:03:c5:ee:
79:07:30:10:97:29:8a:0e:ff:27:c7:92:ef:05:d9:9f:3b:a2:
2c:44:3d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:03:12 2025 by rpki-client