Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: Txa9UlKigFExQAE12k4FWiLPME6tsmms7KZxK8iqUts=
Subject key identifier: 59:E2:72:DD:CE:F8:FE:8D:16:9C:52:55:25:49:6C:1C:42:17:FA:F3
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 01965D95E2D917832018A05B5127F33B4DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 0D05
Signing time: Tue 22 Apr 2025 13:00:26 +0000
Manifest this update: Tue 22 Apr 2025 13:00:26 +0000
Manifest next update: Wed 23 Apr 2025 13:00:26 +0000
Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: 22f/tMfyG6NnLS7hiXxi4by6dIvNK3c2vle7VEp68JM=)
2: ucScMPAy00ug2kPDuCwSp-mDl7I.roa (hash: yTozWRiWvB4IUcAYzXtU2EQoumQmSp9DrRVAnF5P3O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:95:e2:d9:17:83:20:18:a0:5b:51:27:f3:3b:4d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: Apr 22 13:00:26 2025 GMT
Not After : Apr 23 13:00:26 2025 GMT
Subject: CN=59e272ddcef8fe8d169c525525496c1c4217faf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:7d:c9:75:6f:7e:24:e8:05:09:4f:7b:7b:
a9:6d:08:2a:a7:1d:a7:34:71:aa:50:c9:31:27:52:
df:6e:4f:c0:d1:41:0f:39:c8:4c:85:06:1e:21:8a:
18:1a:b5:78:5f:66:03:72:8d:f2:d1:7c:ca:e7:68:
a4:86:52:0f:45:c7:9c:1a:e6:a1:99:74:f6:c7:05:
2c:96:a9:cb:eb:c3:9e:d5:7e:9e:f9:99:0c:1a:52:
f1:de:ba:6d:24:06:70:e0:74:06:c9:7d:67:db:cd:
22:47:5d:bf:d6:fc:86:e3:d6:5e:80:c0:d4:b5:ab:
9c:62:d5:5b:1b:8e:8f:f4:d1:61:fb:46:f2:02:47:
36:78:39:d8:96:09:38:ed:47:4e:8d:c3:f3:b8:ef:
68:ec:bd:6e:7d:4a:cc:ef:fc:e7:1b:7e:3b:f7:6a:
43:b6:f9:ea:64:df:e1:d2:fa:7e:44:7b:3c:60:92:
21:ee:4c:6a:22:15:d9:b0:97:c3:98:ea:24:2e:65:
fe:4e:9a:4f:ba:d4:8d:66:3e:43:8c:c3:69:72:73:
49:61:46:c4:9f:47:5e:18:db:c2:08:6a:ee:e7:32:
88:13:34:ce:73:e2:d3:91:e0:cf:8f:0f:3a:e7:24:
92:16:55:fb:25:43:50:dc:68:80:93:ec:00:35:85:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:72:DD:CE:F8:FE:8D:16:9C:52:55:25:49:6C:1C:42:17:FA:F3
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:60:fa:72:7e:af:32:3f:74:68:46:16:fe:84:7e:0f:80:f7:
11:b7:47:00:70:b6:bd:7f:ca:c6:07:1f:5a:89:0d:15:2b:a9:
c1:6f:e0:53:a7:56:92:24:36:d6:4a:d2:68:91:60:90:c1:15:
62:c6:e3:11:54:f3:cb:dc:99:fc:da:f6:83:0b:d4:dd:aa:f3:
a6:e8:fe:e1:32:c8:8d:b2:47:02:9f:a0:89:6c:2d:84:6b:04:
f3:70:1d:9c:84:c6:88:e7:8a:c9:3a:19:ec:8b:70:da:32:ea:
3d:f0:0f:37:e8:f3:6b:f2:41:d5:96:d6:bd:8e:85:02:35:4f:
a5:05:fd:13:11:49:7b:a4:b3:f1:2f:2c:d3:d9:bc:7c:9c:00:
33:6e:f0:2b:d5:44:ba:9f:01:6d:ab:94:e7:56:5b:60:0d:1c:
6c:1b:1e:e6:d1:d9:9b:fc:c3:2e:dc:ec:b1:ef:45:11:e1:fa:
97:90:a5:9b:8e:8c:c1:e1:74:2e:3e:18:1f:71:08:8b:3e:5d:
74:97:5c:24:ad:41:c3:f1:9d:1f:41:e8:c2:c4:27:10:58:b5:
b9:f1:8a:f4:4d:cc:6f:d0:8e:7d:d9:a0:06:a3:4f:5f:56:09:
aa:bb:02:59:3a:a0:be:fe:1d:13:e7:17:26:e4:06:ba:bd:03:
07:7d:1e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:57:29 2025 by rpki-client