Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: nO07Fx8w+/l5noDhOXxLws7NnriPAvYHQboCoAKoP4I=
Subject key identifier: 66:AD:FB:01:EB:50:82:59:A6:EF:50:90:4E:CB:48:AF:A2:5B:D6:88
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 019655381B60526CED47D34B1D0520A3403D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 0C88
Signing time: Sun 20 Apr 2025 22:01:02 +0000
Manifest this update: Sun 20 Apr 2025 22:01:02 +0000
Manifest next update: Mon 21 Apr 2025 22:01:02 +0000
Files and hashes: 1: Hetd0acGcft4F4TkCZSRchEWHjU.roa (hash: DfxL/5EFMBfWrjWF+bprxAQN9pcVeRj5qm/6i9xfMgQ=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: KhP3vpwgHlV5OOH57D3FMVE0pg9DdqOgx5mMcSxqREs=)
3: zBgovtm1ad-0i6Hlr99dwqaZZ8A.roa (hash: zlvsRotYH5pOPVXr3W3IYM5PD6gCr9N8XLSfPQUKoN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:1b:60:52:6c:ed:47:d3:4b:1d:05:20:a3:40:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: Apr 20 22:01:02 2025 GMT
Not After : Apr 21 22:01:02 2025 GMT
Subject: CN=66adfb01eb508259a6ef50904ecb48afa25bd688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:f0:01:cd:9d:ae:e4:74:d2:43:c1:da:f0:
4d:60:51:d8:d3:29:61:ec:8f:dc:64:00:7e:58:c1:
f5:6d:f6:e5:20:60:0b:c0:83:5f:66:73:ae:3a:40:
4e:cd:6e:d9:d0:cf:2f:7c:df:0e:c6:3b:0f:10:f2:
a7:ac:10:85:27:5a:1e:31:17:c0:96:7f:0a:82:76:
ea:fb:6c:21:7d:43:b4:e9:ed:8b:3a:68:b1:53:8f:
68:f5:9d:66:03:8f:9b:3b:95:6d:a0:f9:a6:15:61:
50:61:05:04:98:96:68:af:94:84:2f:68:09:e0:23:
ba:e5:d5:77:f7:92:be:51:56:55:3a:b8:8c:69:c3:
b5:f7:c5:8c:cd:42:5f:bd:d1:74:3d:c9:be:c4:e0:
ef:6f:65:36:c1:d5:04:9d:a1:41:a6:dd:44:cd:56:
7b:13:77:a5:53:e8:b9:2a:c1:37:1d:a4:37:88:4b:
c0:01:f3:21:23:58:84:12:f0:66:9b:ba:a4:77:2a:
c0:62:19:a8:0b:f1:8a:8f:5c:f2:8d:2f:95:1d:1c:
d3:e8:0d:20:21:4d:ec:17:8d:a6:10:7b:61:7f:2b:
91:98:cd:d8:3a:7a:df:57:d5:c1:f5:8e:7a:50:09:
ff:ae:da:30:a7:ef:51:46:69:8d:f3:e3:ba:2e:cd:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:FB:01:EB:50:82:59:A6:EF:50:90:4E:CB:48:AF:A2:5B:D6:88
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d3:42:66:9d:37:13:01:f8:42:6b:87:00:d7:7f:4e:37:56:
c3:0e:ce:4f:a8:35:cb:c6:18:09:24:08:28:c1:09:91:60:99:
40:83:2f:c5:80:c5:ed:92:80:20:28:11:14:e1:84:0d:cd:6c:
8a:d2:6d:f6:a3:7e:da:38:ea:66:8c:b3:2f:98:ae:5a:23:84:
ba:26:16:99:66:99:a9:b4:f9:8c:fd:04:35:57:bf:8c:97:15:
ff:d0:90:42:a0:d1:61:f2:df:7e:c8:bc:7b:dd:1e:bc:89:3a:
68:52:cc:4b:a7:a4:25:63:fb:7a:11:a8:57:22:1c:a7:5d:fc:
d3:0b:5f:ca:a0:8c:bd:45:75:8a:94:a6:23:db:e3:ac:15:64:
ab:80:a6:fb:63:02:2e:07:dd:71:41:07:78:5e:8a:f7:b7:43:
93:18:c0:5b:c4:47:12:49:57:52:70:c5:8e:77:9e:ba:53:92:
6d:52:6c:3d:98:54:f1:1c:5a:58:ed:84:37:d0:07:e3:3d:aa:
1d:54:e9:52:18:2f:b7:9d:ea:f7:ea:ec:45:d5:1e:f5:62:12:
00:e4:f6:cf:a5:61:d2:b0:0a:84:d0:10:5b:d6:28:51:99:32:
9d:d4:2a:bc:4d:32:91:66:16:c2:34:7d:89:28:d0:c3:3b:e4:
b8:05:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:17 2025 by rpki-client