Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
File: ZD2vEi46h6yqb9tiw1olKhmaWNk.mft (raw, json)
Hash identifier: cQjEQwoaHLBw6NnPk1t5BdoKSawwaby4y94iWDMQhsY=
Subject key identifier: 66:2C:80:4B:22:95:19:A9:AB:C4:DA:2D:F5:A5:86:04:14:1E:88:38
Authority key identifier: 64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
Certificate issuer: /CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Certificate serial: 019659B99AF234FCA27114890C9D20CBB7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
Manifest number: 0C83
Signing time: Mon 21 Apr 2025 19:00:58 +0000
Manifest this update: Mon 21 Apr 2025 19:00:58 +0000
Manifest next update: Tue 22 Apr 2025 19:00:58 +0000
Files and hashes: 1: 5y54voFpQemaWdhJdL3R6I-ZfdY.roa (hash: 0q0hdM7ItmEN9aXgu0xUxeLxjebZjyz7UrwOiAMpRFI=)
2: ZD2vEi46h6yqb9tiw1olKhmaWNk.crl (hash: KfujiSNcoyT8mVGLopLDsvXEQtipb4QLRBU5M5IXGuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:9a:f2:34:fc:a2:71:14:89:0c:9d:20:cb:b7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643daf122e3a87acaa6fdb62c35a252a199a58d9
Validity
Not Before: Apr 21 19:00:58 2025 GMT
Not After : Apr 22 19:00:58 2025 GMT
Subject: CN=662c804b229519a9abc4da2df5a58604141e8838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7b:f8:ff:ae:88:00:38:ee:73:51:e1:58:64:
82:a4:52:03:15:53:60:18:52:7e:28:8b:9b:4b:60:
44:f4:f6:24:fa:ef:f6:f8:93:8c:31:f8:72:71:0d:
ae:75:e8:c5:c1:ad:c5:5d:a2:fb:cb:73:a0:c3:09:
58:08:21:92:1e:d8:6b:18:2a:60:33:d4:34:3e:fe:
d6:11:2b:6f:e8:0d:97:de:d9:3f:ea:22:27:7b:1a:
dd:b4:97:54:9b:f3:bf:14:bd:ad:66:a7:a5:ca:dd:
86:29:4d:e7:c7:85:17:0c:d1:fd:c3:a4:ce:8f:ae:
80:f8:3b:2d:28:2c:27:33:01:18:e0:e7:31:4f:55:
9a:66:e7:ac:2a:bc:e0:68:e4:b9:83:0c:bd:80:c8:
73:a5:5b:20:2f:55:a0:eb:38:cf:b3:72:bd:5a:da:
93:06:4b:8d:0a:c5:dd:5f:e8:1e:ae:5b:b4:5d:9c:
23:2a:a7:3d:f2:fb:34:5e:ca:4b:76:c4:20:86:4a:
78:39:91:59:4a:97:4c:87:3c:27:7d:19:b5:e7:4d:
6e:7a:ca:4d:22:57:a0:f6:12:f9:4d:92:57:3f:48:
77:70:ca:42:d7:e4:06:ad:4c:e9:ce:b3:88:8d:55:
7f:c3:11:0a:7a:95:13:77:5b:a2:47:01:0d:2d:18:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:80:4B:22:95:19:A9:AB:C4:DA:2D:F5:A5:86:04:14:1E:88:38
X509v3 Authority Key Identifier:
keyid:64:3D:AF:12:2E:3A:87:AC:AA:6F:DB:62:C3:5A:25:2A:19:9A:58:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD2vEi46h6yqb9tiw1olKhmaWNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/ed3d4a-704f-4aa4-821f-dcd5e9478084/1/ZD2vEi46h6yqb9tiw1olKhmaWNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:76:2a:ea:65:2c:e6:2e:bb:d6:61:56:01:0e:2f:65:17:17:
de:35:06:bd:44:0e:83:9a:9d:b8:27:65:df:4b:53:75:62:bb:
fb:d6:1b:ac:1a:90:99:5d:4d:0a:b4:2b:54:26:ba:aa:35:2c:
0d:2d:aa:06:5e:9a:1c:10:9c:51:50:c3:70:65:1b:c0:02:7a:
4e:03:4f:14:40:ee:a2:55:c1:4c:1c:91:99:92:9d:cb:4c:9a:
d6:8a:85:18:d5:97:6f:67:de:31:f3:53:a2:df:45:c0:20:f9:
72:e7:9e:bc:7a:b3:92:68:bd:ac:78:17:ba:3f:b1:96:48:44:
18:db:6d:90:bb:6d:4a:99:e2:d2:bb:42:ad:27:92:ff:d4:29:
88:59:ec:11:d6:51:1b:e7:83:e7:c8:0d:a0:81:23:3f:5e:5b:
38:eb:00:b0:f2:e4:d9:a7:6f:31:80:5e:eb:84:cb:9f:f1:a4:
54:7c:df:32:52:da:b4:a3:74:5a:05:53:0f:be:8d:5a:ed:df:
eb:ac:d4:04:d2:bd:c4:0c:83:46:62:5b:11:93:dc:07:b0:1f:
7a:7e:de:0c:71:c8:8f:15:d1:44:83:ea:e1:65:59:73:b2:a7:
b2:44:e1:16:91:da:3f:e0:d6:c9:90:d5:ef:20:fb:d7:61:fc:
00:37:fc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:36 2025 by rpki-client