Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
File: zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft (raw, json)
Hash identifier: m+kjUThRCJ0DvjveqIsvLQaqT6agM3ztxGGDl0lBodk=
Subject key identifier: DA:3F:C5:36:1A:AE:4F:9C:30:66:13:D5:60:32:27:02:CF:54:DF:E6
Authority key identifier: CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
Certificate issuer: /CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Certificate serial: 0196CF87052C86AB7204467FBB3E7E414F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
Manifest number: D2
Signing time: Wed 14 May 2025 16:00:54 +0000
Manifest this update: Wed 14 May 2025 16:00:54 +0000
Manifest next update: Thu 15 May 2025 16:00:54 +0000
Files and hashes: 1: zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl (hash: P07QJmjsnBXNR3mhZ6dvKKkwQbpymfOMYUOievvpRvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:87:05:2c:86:ab:72:04:46:7f:bb:3e:7e:41:4f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea7ccd2aec0bbefc6350856512a95fe02259959
Validity
Not Before: May 14 16:00:54 2025 GMT
Not After : May 15 16:00:54 2025 GMT
Subject: CN=da3fc5361aae4f9c306613d560322702cf54dfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:6c:f6:df:2a:61:97:56:93:af:c4:73:c1:
f6:51:3d:eb:0d:44:00:e9:ea:c1:1c:aa:65:23:52:
6e:90:c4:ff:da:03:12:9f:a1:ba:4c:8a:60:48:23:
39:1c:75:f3:87:f6:4f:65:bb:d7:97:42:12:25:cc:
96:23:5e:69:82:77:e9:25:80:3e:47:79:8d:2b:5b:
3f:0a:6d:3d:19:37:28:f1:14:43:1b:24:e3:ea:86:
24:b6:07:ee:04:4b:e7:02:84:c4:0b:20:76:c7:1b:
16:fc:5f:33:8c:0e:eb:2f:77:c9:64:49:7c:2a:30:
0b:18:a9:ff:b9:a2:00:b9:70:d2:0b:85:e8:8a:1c:
99:74:ee:e7:b0:3e:74:02:35:6f:72:6d:68:7d:44:
17:06:89:83:0e:2d:d1:aa:92:63:73:ba:f5:42:90:
6a:70:43:ae:d4:dc:b9:60:c6:94:5b:c2:ec:d8:52:
43:45:b9:8a:43:46:13:37:15:05:99:c2:62:2e:2d:
71:e8:23:97:26:84:71:98:cd:66:52:1a:fc:54:cb:
a5:83:87:e0:3f:db:79:28:5f:9b:5b:27:10:33:ec:
d5:66:ad:a4:fd:a6:e7:0c:04:65:24:09:38:a0:6c:
ca:4f:87:47:cd:b4:fc:19:40:47:43:64:84:b9:e5:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3F:C5:36:1A:AE:4F:9C:30:66:13:D5:60:32:27:02:CF:54:DF:E6
X509v3 Authority Key Identifier:
keyid:CE:A7:CC:D2:AE:C0:BB:EF:C6:35:08:56:51:2A:95:FE:02:25:99:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqfM0q7Au-_GNQhWUSqV_gIlmVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a79a3d-7f29-497b-ae2c-37f54476a9d7/1/zqfM0q7Au-_GNQhWUSqV_gIlmVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:92:a4:07:cc:b7:6d:9a:22:8a:e3:48:35:51:b9:52:6d:16:
19:0c:29:15:59:62:49:d5:dd:03:2a:92:56:08:4d:82:11:11:
51:38:cd:95:71:c3:d0:17:a0:13:69:40:e9:07:33:d8:6c:66:
71:f8:9b:71:ff:76:5b:5c:9b:75:2c:58:d1:51:d2:c0:07:c7:
37:1f:00:be:e9:6a:08:50:15:f7:47:66:f0:b2:33:ad:ce:2f:
b1:cb:91:e8:46:e0:e7:97:0e:20:c4:a8:dc:77:54:3f:ff:c9:
78:8c:f3:aa:d2:74:48:e3:4e:bc:52:83:08:4a:3d:fb:e7:74:
d4:bd:39:86:ec:52:68:80:6b:41:8c:fb:e2:33:4b:c9:e0:33:
d1:80:76:82:12:a1:de:6f:11:68:75:06:ae:56:ff:0e:8f:df:
38:40:66:d2:52:4e:2b:f3:89:3e:ab:b4:79:97:78:59:f3:a7:
5e:cb:31:02:4d:cf:94:5f:b2:2e:73:4e:40:a0:30:0c:46:c7:
62:4f:b0:b0:a5:71:82:9a:98:44:34:c4:31:8b:b7:f7:c2:5b:
63:17:9a:7a:0b:95:0b:0f:39:63:9b:9c:aa:28:9d:59:9c:1b:
86:c3:dd:27:80:65:d2:34:34:c7:25:8e:9f:92:e7:9e:bf:b5:
ae:7c:7c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:06:28 2025 by rpki-client