Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
File: Zw5gd5881NA9XlB4QPX6KjGmq40.mft (raw, json)
Hash identifier: R5U06iwpKq7ymG3qNX/syy9Gad6eysRg1/1/DzWLgFs=
Subject key identifier: 1A:29:54:FE:C7:2F:8C:26:EC:43:2B:58:29:55:04:1A:81:58:38:0D
Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Certificate serial: 019606AF31355F3636CD757C26393F96C089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
Manifest number: 0334
Signing time: Sat 05 Apr 2025 16:01:06 +0000
Manifest this update: Sat 05 Apr 2025 16:01:06 +0000
Manifest next update: Sun 06 Apr 2025 16:01:06 +0000
Files and hashes: 1: Zw5gd5881NA9XlB4QPX6KjGmq40.crl (hash: Cam6v+WY5i6mb3Ocjt4yijX1r43z6sPSeNgZue4nvzI=)
2: diLkZSNmSkA_P0E8XAQuJwLRalg.roa (hash: vX3W6kxo/WtwtkGg1PtHgNO/NmZd0a0bM+F9+jjmaok=)
3: hy_b_CLF0gjwTvb480me2nPqxL8.roa (hash: EAu5vgl/03EK2B5mmRo4ew+mHmc1IziDDQ2bL2kVt9M=)
4: uY__ejrV3u-AYFNveYDrJ-C2JUI.roa (hash: emJilGek+vVhrXzYGkdx6N/7HgCKTKlozt7sgU5B478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:af:31:35:5f:36:36:cd:75:7c:26:39:3f:96:c0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d
Validity
Not Before: Apr 5 16:01:06 2025 GMT
Not After : Apr 6 16:01:06 2025 GMT
Subject: CN=1a2954fec72f8c26ec432b582955041a8158380d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:85:e6:40:6f:2b:83:f5:3a:93:7f:c1:0e:5d:
44:44:c1:30:89:29:d2:f3:b9:7d:48:2a:c7:6f:94:
ce:5f:b0:93:b2:38:3d:48:22:eb:9f:f7:29:02:89:
4d:40:cf:f1:c1:21:ee:80:1c:25:a4:e5:c9:22:1a:
b3:9c:47:2c:88:13:7a:b1:10:52:2e:10:2f:4d:dc:
55:72:6a:13:f5:72:59:5d:a8:c6:de:48:52:22:8c:
f0:fe:28:40:9b:50:bb:d0:27:21:a8:5d:b4:50:38:
d3:63:19:91:c7:65:25:f6:a7:48:5f:8f:96:5a:18:
77:b5:03:c8:5b:d5:79:0c:0b:36:ea:00:38:14:0c:
20:2a:28:81:92:37:99:ef:9c:38:79:80:5c:ba:62:
a7:d5:5e:2c:9c:fa:3e:a4:ca:9e:c6:a1:d0:5f:02:
94:6a:d5:15:7a:81:37:2c:11:b5:0b:98:7e:10:53:
39:2f:f4:3b:eb:c5:1b:df:ec:48:d9:42:f1:e0:4d:
7d:61:7a:49:96:91:3c:07:e3:41:fc:cb:f9:8e:19:
98:ec:88:81:01:f1:23:b7:15:0d:11:86:80:34:5a:
21:52:48:37:43:fd:84:ba:16:be:41:46:ab:2a:fd:
f9:00:50:79:6f:c6:49:d0:8a:00:5a:d3:13:e2:e1:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:29:54:FE:C7:2F:8C:26:EC:43:2B:58:29:55:04:1A:81:58:38:0D
X509v3 Authority Key Identifier:
keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b9:4c:39:41:46:fd:32:fa:78:0b:90:cb:e0:94:7d:7b:6d:
0b:15:72:37:ca:bc:77:a8:e6:9b:6f:1f:2a:12:a0:ce:99:53:
56:68:b9:9b:79:e0:bb:2e:2a:b6:d9:49:02:7f:f5:2a:1f:28:
43:91:78:75:9a:17:94:3c:73:42:2c:5c:d0:0b:78:8b:80:90:
14:2a:e7:45:64:02:77:f9:89:be:f2:39:2c:7d:4f:be:de:74:
e0:10:80:9a:5c:6e:aa:01:ad:50:4d:7e:53:19:ad:39:93:83:
40:6c:52:e5:44:b3:37:0e:f9:90:73:3f:89:3d:e4:2c:7d:86:
e1:69:74:0a:6a:0d:5c:d7:22:db:1c:87:8c:61:13:33:f2:0c:
37:85:35:04:a3:0f:83:e2:28:83:fb:4e:9a:01:1b:1c:fb:66:
2c:a2:f6:a5:12:07:b9:5f:93:1d:e5:0a:86:f2:6f:90:58:9e:
6d:6b:6c:e0:84:78:c7:d0:33:39:3c:37:bf:a0:3b:75:d2:92:
1d:19:24:97:58:8a:0f:d3:2d:92:6c:3c:43:ae:66:8c:a3:43:
aa:69:72:43:f1:05:7e:d7:01:16:0f:3c:00:4d:f5:02:bd:5e:
0b:71:33:99:c2:2c:49:a2:e5:24:e4:21:db:b9:c5:1c:b1:60:
a2:52:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:14:05 2025 by rpki-client