Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
File: ZgwymWrhJGGJciLi2cwJOTCSfd0.mft (raw, json)
Hash identifier: XG6Hh6jyEG39/a9cT02Ttjg084FIxSosOvyx2TH6C78=
Subject key identifier: 6F:F5:AF:FE:B5:0C:A7:15:E6:33:09:D2:B3:DD:62:3D:0D:8B:BD:09
Authority key identifier: 66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
Certificate issuer: /CN=660c32996ae12461897222e2d9cc093930927ddd
Certificate serial: 0196568193792D30AE39C7AC46AC067C9909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 04:00:54 +0000
Manifest this update: Mon 21 Apr 2025 04:00:54 +0000
Manifest next update: Tue 22 Apr 2025 04:00:54 +0000
Files and hashes: 1: ZgwymWrhJGGJciLi2cwJOTCSfd0.crl (hash: nmYB0W3BYczNaqR8/MdXl3DMjFNbVz6WjIIZvNdLA5c=)
2: eTKPP1Wu3aoon8pt_QrTkfCfijI.roa (hash: 40MqBGQjbWUX+1wVm2enGIIcrfvo/5OK7+JG7rETf4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:93:79:2d:30:ae:39:c7:ac:46:ac:06:7c:99:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660c32996ae12461897222e2d9cc093930927ddd
Validity
Not Before: Apr 21 04:00:54 2025 GMT
Not After : Apr 22 04:00:54 2025 GMT
Subject: CN=6ff5affeb50ca715e63309d2b3dd623d0d8bbd09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:85:60:f9:55:9f:45:92:c6:43:11:43:12:
23:57:fd:5e:e5:d1:6a:1d:e3:8a:58:3d:de:8a:ef:
f2:87:2c:73:14:49:49:49:86:8f:36:8b:14:68:ad:
a9:80:31:54:0b:cd:18:41:0a:9d:d6:d8:f8:54:5d:
01:b7:86:ff:9c:96:21:7f:7d:b1:69:3f:1e:01:ef:
41:f6:84:c8:61:4c:44:2b:3e:be:91:c3:54:d1:0a:
14:f4:28:64:ef:61:14:19:16:92:39:99:a0:58:1f:
ad:d1:1b:c7:ae:37:42:a6:3c:e4:48:83:b5:27:3f:
06:c2:fc:21:3e:2e:22:60:4c:f8:da:70:dd:2e:0f:
17:21:c0:06:c3:5e:b2:51:ed:6e:be:78:e2:73:4e:
be:f9:43:4c:47:c6:7a:78:66:93:0a:71:e5:1d:fa:
c4:93:45:29:dd:24:38:ca:80:13:7b:46:a2:26:07:
70:0b:ef:22:44:78:dc:be:e0:5f:41:5a:99:55:ab:
66:36:19:27:73:4a:f0:b9:dc:1d:57:70:fa:a8:8d:
2d:27:df:00:cb:4c:e4:e7:1b:d2:e2:27:d5:88:87:
32:ca:38:a7:d1:bc:6e:de:dc:54:85:70:93:7d:f8:
9e:ef:a8:4f:98:a4:8b:96:0d:f1:e2:07:7f:bc:97:
02:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:AF:FE:B5:0C:A7:15:E6:33:09:D2:B3:DD:62:3D:0D:8B:BD:09
X509v3 Authority Key Identifier:
keyid:66:0C:32:99:6A:E1:24:61:89:72:22:E2:D9:CC:09:39:30:92:7D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgwymWrhJGGJciLi2cwJOTCSfd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8d400-e6e8-41ef-ad24-55c3a28e62c3/1/ZgwymWrhJGGJciLi2cwJOTCSfd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:70:84:ba:29:81:66:25:2f:2b:31:8f:b3:cb:61:b8:81:0b:
00:9c:c5:26:02:9f:ef:a8:77:71:35:ea:8a:16:19:51:df:d7:
13:31:51:ad:1b:06:80:fe:ae:f3:a5:a6:34:74:04:54:dd:44:
12:3d:d9:0c:5b:86:92:d5:1a:6a:26:fc:21:55:07:0b:ba:fd:
ce:2e:98:8f:21:55:4b:2f:31:0f:8a:c8:b4:e5:6e:6e:b4:dc:
39:eb:ca:14:d1:dd:9c:70:32:bb:b7:87:f4:8d:c7:e4:db:f2:
a3:2f:46:6f:51:8f:9e:df:7a:77:bc:33:52:8e:0d:b2:86:61:
a8:51:85:a9:16:3a:12:da:f2:d8:ef:0e:b1:a7:28:0f:f3:8b:
4c:aa:79:b2:da:83:b0:d5:3f:39:f5:13:ff:62:75:23:09:18:
0f:ce:ad:58:fc:85:ba:10:2b:c7:b5:48:ed:1f:52:c1:21:6e:
d4:0f:31:d8:94:e2:ce:93:fb:cf:08:c2:0f:1b:82:8d:d0:fc:
44:e6:b0:5e:1a:cd:7b:28:27:3b:4b:15:1b:79:14:03:b9:75:
14:60:ae:eb:af:e6:af:ad:1d:b2:01:50:b6:ce:e7:b2:2b:f3:
db:42:85:18:78:3e:02:3b:99:2f:64:13:23:c3:3b:74:1c:4f:
34:08:d9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:34:32 2025 by rpki-client