Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
File: zisQ2JtVN5E1AxJ-uHImr7idGy0.mft (raw, json)
Hash identifier: SV6fPdXenVOaftipSUmB3wPGQ80KVJh/WD7LXGeBaKQ=
Subject key identifier: BB:D9:A5:12:F5:A6:FC:47:35:53:C3:32:02:4B:5E:3A:A9:52:D3:6F
Authority key identifier: CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
Certificate issuer: /CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Certificate serial: 01969F3F8EB5795954E74AA999EFCF1AD970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 07:01:04 +0000
Manifest this update: Mon 05 May 2025 07:01:04 +0000
Manifest next update: Tue 06 May 2025 07:01:04 +0000
Files and hashes: 1: puw08h74TtFA6oc3LqSJELivWac.roa (hash: 6izoAc/QEsoM8sPaZbI92YMt+TMYy+EV7r4bwPmo4dA=)
2: zisQ2JtVN5E1AxJ-uHImr7idGy0.crl (hash: Y4g1B9i+jCtviO2VMarcgFtxIWa4m/MVeZxVwVwSJc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:8e:b5:79:59:54:e7:4a:a9:99:ef:cf:1a:d9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2b10d89b5537913503127eb87226afb89d1b2d
Validity
Not Before: May 5 07:01:04 2025 GMT
Not After : May 6 07:01:04 2025 GMT
Subject: CN=bbd9a512f5a6fc473553c332024b5e3aa952d36f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:d4:10:85:c8:60:08:8e:8c:48:27:29:a6:
1d:70:ae:f0:ad:8d:1c:a8:f0:c7:a7:49:77:b1:9f:
d5:6d:9b:32:e2:0f:40:f1:d1:08:c5:83:1c:40:90:
0b:3b:c7:08:38:72:1c:3a:c1:a6:b5:d5:53:f5:fb:
79:10:7c:1e:31:08:9a:0b:73:fe:0b:fd:6d:8a:a4:
54:dc:7a:ec:82:e1:97:4d:4e:fb:e5:b4:4f:b2:8a:
e2:d0:70:35:8d:d1:51:de:ac:81:ee:4c:85:50:bc:
ca:68:15:d2:a7:f2:1e:41:00:0f:e3:2b:f5:3b:36:
44:19:0a:20:5c:78:f2:41:63:9d:83:b1:5b:cb:a5:
2c:46:fe:d5:a1:2b:a0:27:c9:ca:68:56:d3:de:b7:
d4:02:bb:f2:bb:b3:b7:84:4f:d4:04:45:b1:98:b7:
06:c3:5c:98:ec:07:d4:68:58:41:c7:0f:a6:9c:33:
b5:92:a4:97:08:7d:f5:dd:00:ca:07:c8:5d:e5:b4:
cb:95:1a:bf:09:73:35:82:2a:14:af:57:12:8a:75:
40:07:70:59:2f:dd:36:4b:a2:dc:58:a9:8e:2f:7d:
a8:93:03:de:70:06:49:c9:df:e5:39:7d:ed:28:e3:
8e:bf:59:f0:2d:7d:ad:c3:17:33:2f:e3:1e:04:be:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:A5:12:F5:A6:FC:47:35:53:C3:32:02:4B:5E:3A:A9:52:D3:6F
X509v3 Authority Key Identifier:
keyid:CE:2B:10:D8:9B:55:37:91:35:03:12:7E:B8:72:26:AF:B8:9D:1B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zisQ2JtVN5E1AxJ-uHImr7idGy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d3b263-b0f1-4a6b-912e-373dda43f792/1/zisQ2JtVN5E1AxJ-uHImr7idGy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:da:0a:71:1f:60:d9:86:f3:1d:91:a5:e9:96:4b:b0:bb:33:
2b:d1:f9:5c:46:a7:ac:e0:31:f6:d7:64:f5:23:07:f2:f2:6e:
ab:c2:da:f3:5a:87:6a:31:83:e8:27:86:27:92:6b:74:55:65:
15:c0:e3:c1:87:05:1e:7b:54:03:57:8f:37:87:8c:61:1e:19:
94:6a:11:12:20:71:10:8b:5f:71:e1:b7:ed:86:69:0a:51:4d:
47:00:31:92:a9:14:e5:58:eb:b9:70:d6:2f:52:0a:58:0b:6c:
e8:f4:7f:14:af:03:b7:f0:3d:43:68:60:d9:93:9a:d7:e2:e8:
ac:f4:92:9f:b9:bc:95:3a:69:7f:9e:d8:a7:30:a0:19:d9:2c:
41:1a:36:34:6f:29:15:23:cd:d3:59:c0:95:94:74:ae:00:1e:
4d:fa:e6:f0:47:63:02:24:57:2b:78:a5:16:c4:68:25:16:33:
1e:27:53:d9:a9:e2:23:77:a8:8d:25:8e:04:ec:78:64:00:f6:
32:b0:ed:c1:a4:87:2c:94:69:69:c5:d3:ca:2d:83:a6:99:7c:
c6:a0:61:72:94:fa:a0:77:3e:19:76:c5:d3:5b:23:85:8a:57:
da:08:ac:80:4c:39:91:dc:1b:6a:17:4b:b8:df:e2:63:a5:24:
8f:80:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:04:23 2025 by rpki-client