Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
File: ZpPysE64W2oqbiHAPPu3coekWv8.mft (raw, json)
Hash identifier: zA/KqFDYzMAf3QTc7+X4qHdHjJ+LhN2wUJW1C/US9YA=
Subject key identifier: B9:CF:D7:A7:FA:2E:1A:C3:69:62:C8:66:02:12:78:79:C0:A5:EB:D8
Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Certificate serial: 019656EF367F06C69A4275AD6245C2D4D605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
Manifest number: 0676
Signing time: Mon 21 Apr 2025 06:00:39 +0000
Manifest this update: Mon 21 Apr 2025 06:00:39 +0000
Manifest next update: Tue 22 Apr 2025 06:00:39 +0000
Files and hashes: 1: OBgfNHwDlYtlqjjhJRFUWeZDTUY.roa (hash: 6sPRuYPKeEviFfVQ52vvMVNq0j09JkQvr2PG17VGRJU=)
2: ZpPysE64W2oqbiHAPPu3coekWv8.crl (hash: 3zodAX9fiMIB3VFZOF1nKdRLm6MiydrZz35mec/lbDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:36:7f:06:c6:9a:42:75:ad:62:45:c2:d4:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff
Validity
Not Before: Apr 21 06:00:39 2025 GMT
Not After : Apr 22 06:00:39 2025 GMT
Subject: CN=b9cfd7a7fa2e1ac36962c86602127879c0a5ebd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:62:b4:a2:a0:49:dd:11:c0:b6:4d:92:72:
4a:94:39:1d:80:c5:e8:ab:5c:88:4e:8f:ef:05:0e:
da:be:72:78:de:c8:de:9b:71:6a:bb:d1:cb:21:21:
95:3b:b0:68:6a:9d:89:0c:be:23:36:aa:2f:80:e1:
13:d5:2a:47:fd:3e:17:6a:39:91:40:b8:e9:31:89:
77:70:4d:1b:c0:aa:c0:30:ff:e7:48:e1:d7:bd:22:
fb:61:ce:fb:ba:05:26:07:88:73:75:87:c6:f9:f4:
d7:41:65:78:c8:eb:99:12:df:34:32:ad:f6:ba:37:
02:9d:44:59:62:e2:43:b7:4e:87:f0:e1:3c:5c:ef:
05:ff:43:27:87:9b:a3:96:27:8a:1b:48:d0:9b:8c:
f4:98:bf:94:41:81:5d:b2:18:4b:1c:58:58:22:c0:
bc:46:b4:81:2e:39:da:d4:d5:a6:b9:d1:61:96:6f:
a9:07:44:8b:b2:cd:c9:69:0d:2d:7b:e2:1d:19:2f:
55:32:1e:86:78:1d:a7:4a:e8:01:53:ca:2c:a6:83:
7b:86:87:c4:91:f4:a3:13:9c:d0:93:91:e8:d4:ed:
0a:f4:5a:f0:24:4a:a4:86:69:17:08:10:78:4c:78:
f8:cd:69:f9:b5:a3:35:47:b0:a7:e0:45:fb:9c:78:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CF:D7:A7:FA:2E:1A:C3:69:62:C8:66:02:12:78:79:C0:A5:EB:D8
X509v3 Authority Key Identifier:
keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:88:ea:a5:f2:93:96:b9:a3:5e:48:74:75:3d:67:17:32:95:
96:dd:47:f0:e4:b1:e6:dc:38:08:ea:1f:e5:65:34:3f:2d:62:
f6:e8:3a:a9:99:44:20:b1:5d:0b:d2:4b:c4:19:91:ce:1a:03:
de:3e:8f:60:82:78:2d:1b:b9:2d:74:cf:1a:96:50:35:a3:47:
3a:3c:76:d6:85:ac:35:9e:57:24:fc:fc:d2:17:22:4d:89:c4:
a9:ce:b9:04:6d:83:d6:69:cf:71:b3:ac:83:d9:b2:78:05:9b:
11:12:07:16:e1:c0:e8:45:98:e7:25:4a:e3:1c:4e:22:66:ed:
27:6d:27:02:e3:66:a2:2c:e3:91:27:90:6f:43:ba:fc:39:e7:
cd:9f:0b:43:ca:b2:0a:dc:39:9e:c2:8a:b4:74:8a:4e:3d:d1:
08:10:c1:7c:da:07:65:62:87:fb:58:14:a4:ab:c3:7f:a6:41:
fb:c9:70:b2:cc:46:00:ec:7e:86:88:ef:b8:13:b3:fd:25:6c:
01:ee:8d:22:d3:c1:be:aa:87:2b:70:fa:9b:04:f7:02:b7:fe:
da:56:43:51:ca:99:9a:c2:af:48:90:16:3b:33:c3:9d:1e:97:
89:18:7e:f5:84:ba:b9:49:aa:7a:e2:62:e1:7b:cd:84:1b:0a:
a7:a2:a1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:09 2025 by rpki-client