Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
File: ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft (raw, json)
Hash identifier: 4fQPJ+qwgFMkkKs7Z1vOSGsI+tGEfmN4rzxbjP2G1+Q=
Subject key identifier: D1:C9:D3:C0:83:D5:CD:33:FB:35:A9:BE:53:22:0E:FA:02:79:24:CA
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 01965B7057091E4539502AF824CFFAB6919F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 03:00:10 +0000
Manifest this update: Tue 22 Apr 2025 03:00:10 +0000
Manifest next update: Wed 23 Apr 2025 03:00:10 +0000
Files and hashes: 1: 4GHtaL2ENr8x0dHCgzjR-2oufsc.roa (hash: SkJfNfL4xk1uCL5vaUVq92gTeEiReavJzDd3NtKKtoQ=)
2: P4Bbz81DKVf659V7Pusw5yxnCg8.roa (hash: 6mtNya9D4eJ+7094qYmfrW/oPVu6b8pgbmkAvNwldHc=)
3: ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl (hash: s8pTLuq7Z+aefmlCwSul6rixIXgTg+yTnFDmHkHC7h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:57:09:1e:45:39:50:2a:f8:24:cf:fa:b6:91:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Apr 22 03:00:10 2025 GMT
Not After : Apr 23 03:00:10 2025 GMT
Subject: CN=d1c9d3c083d5cd33fb35a9be53220efa027924ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:d1:b5:1f:c9:65:3e:6a:70:b1:72:c9:cc:
65:1e:12:81:f4:fe:00:fe:57:71:27:77:4f:b3:95:
b4:e8:1b:38:d2:d3:24:11:e2:a7:82:ce:09:9d:81:
6f:a9:47:c1:b2:fb:a7:48:02:ec:2b:b8:e6:09:0c:
1e:13:fc:6e:41:fd:06:4c:7e:a8:11:67:cf:1e:4b:
a3:26:a8:6a:db:9c:68:cf:2a:ee:bd:18:7b:05:7c:
f7:f2:9d:82:74:0e:e2:21:3d:a2:44:b8:cd:15:c2:
31:b6:f1:64:a2:a8:9f:e9:8b:0b:eb:b3:28:3a:5e:
54:93:57:08:f2:f3:54:14:c8:b1:fb:b0:7f:82:cc:
06:27:c2:a3:5b:de:43:5d:33:f0:7f:6d:f3:54:f2:
17:81:ca:91:c3:fa:1d:fe:20:02:70:30:5f:a3:f0:
49:fe:36:8c:a8:c6:70:06:4b:d8:70:d5:0c:ae:e9:
4b:74:13:e3:08:4a:2a:2d:b0:9c:56:27:2e:fd:14:
b0:54:ba:08:fe:1f:fa:2c:b7:6c:db:af:37:fb:2e:
9e:ab:30:16:f1:10:96:3d:d0:0e:f5:10:85:95:9d:
7d:33:7b:62:81:77:a0:3c:e8:3b:4d:8a:95:8e:5e:
d1:71:a1:e6:e2:fb:51:ee:78:35:46:88:d4:3d:92:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C9:D3:C0:83:D5:CD:33:FB:35:A9:BE:53:22:0E:FA:02:79:24:CA
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c3:fe:5e:37:80:e5:b1:59:88:6e:d3:70:d6:f9:a6:34:bf:
ed:25:ec:ff:e2:f5:ea:f4:e2:ae:78:a7:27:95:b1:85:35:81:
de:fe:c7:8d:eb:ab:5e:a4:eb:8e:cc:70:fb:ba:9b:fe:64:df:
d8:c9:00:46:63:e5:9e:a6:15:ef:a9:7e:0b:ee:0e:1c:58:0e:
c1:b4:57:93:3a:01:24:40:bb:b3:57:db:fe:ab:ce:64:56:a6:
39:e5:6b:8f:f7:14:6b:2b:d7:f5:a1:65:46:55:5d:89:00:83:
ac:29:20:12:3a:19:42:6b:db:0f:eb:bb:1b:e4:f2:a8:43:2d:
fe:b5:30:6f:4f:5c:af:db:41:25:12:55:4c:a2:68:6b:9e:e3:
07:cc:8c:b3:6f:4d:0c:3e:7a:30:9e:b0:11:3e:41:51:e6:83:
57:33:2a:47:06:7c:c9:bb:e9:9d:ef:f4:00:cf:d3:f6:31:32:
c6:74:ab:ad:4d:e7:14:95:92:b4:a3:d0:8b:94:65:c8:b4:92:
67:0c:52:51:56:37:79:1f:b4:97:1d:46:29:49:80:87:0e:72:
a4:63:fd:31:8f:6c:7f:08:48:2e:3d:9f:62:c5:0b:1b:10:60:
84:83:fa:e3:e2:38:44:d0:da:0c:f1:c6:ab:56:50:33:43:14:
90:37:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:18:53 2025 by rpki-client