Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: CmRdNCUny27k0mRaUofUHLY/vGVFNuQuWloTOWnQmII=
Subject key identifier: 48:22:FE:0A:09:D1:03:4B:F8:15:91:E3:16:17:97:BA:EA:8A:D2:D2
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 01965B3985107BC5DF833140ACA171474921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0AAF
Signing time: Tue 22 Apr 2025 02:00:18 +0000
Manifest this update: Tue 22 Apr 2025 02:00:18 +0000
Manifest next update: Wed 23 Apr 2025 02:00:18 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: LjisD4tCvQ2bf8v5n3w2cm7UU5FCwxvqodwHH888qZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:39:85:10:7b:c5:df:83:31:40:ac:a1:71:47:49:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Apr 22 02:00:18 2025 GMT
Not After : Apr 23 02:00:18 2025 GMT
Subject: CN=4822fe0a09d1034bf81591e3161797baea8ad2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:0e:b3:22:7d:3d:48:19:29:4c:93:66:59:
da:90:c1:81:fe:af:5f:bd:de:e0:d2:ba:6e:6c:2b:
04:30:dc:a2:e1:a2:c9:89:48:99:13:f3:bc:a5:2b:
fe:8c:fc:9e:e1:fb:a8:17:e4:43:1c:01:40:45:09:
ab:33:bd:58:11:e4:7b:a3:65:00:7a:3b:a6:03:4a:
49:13:23:97:ee:39:0c:e9:44:c3:b1:4c:19:a1:3e:
9b:d3:4b:5c:49:ea:9f:73:00:a2:09:e9:04:8d:b6:
46:8c:a3:41:76:8e:74:a7:a4:d1:bf:13:67:3e:2e:
f4:28:dc:e5:5d:be:9e:fb:79:86:a6:01:de:dd:70:
28:25:02:d0:f7:be:12:5f:7e:6c:44:2a:57:b2:0f:
cf:0b:15:92:08:2a:bf:37:ab:3c:03:17:1f:e9:fd:
1b:c4:28:b0:21:63:84:f7:24:08:e8:3b:00:a7:d3:
db:2a:81:26:a9:27:ac:2e:63:c1:ff:36:01:67:c0:
3f:8c:b8:56:21:1f:dd:55:91:fc:d8:c8:ff:65:81:
3a:3e:8d:da:26:c2:50:d9:63:cc:50:ad:f4:3b:85:
c5:ed:17:5e:83:d2:2f:fb:cb:96:e0:b4:70:50:f9:
77:ae:52:9b:aa:21:12:d5:35:5b:e7:b3:51:46:05:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:22:FE:0A:09:D1:03:4B:F8:15:91:E3:16:17:97:BA:EA:8A:D2:D2
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:68:58:63:60:a8:4c:f5:58:c7:69:d6:a7:91:74:be:a4:49:
68:1e:38:9d:55:dc:9b:6f:40:10:28:aa:bb:ed:c3:de:a9:fe:
a8:cb:8b:78:32:52:55:cb:c1:2e:c6:e4:d6:4e:be:4e:62:d0:
cf:88:fe:10:97:71:8d:c7:a2:7a:88:84:d1:19:7e:dd:06:d9:
f6:b8:33:fa:e8:f0:05:e7:9a:94:5e:b1:61:f1:8d:67:9f:8a:
e3:77:32:90:34:85:92:d4:f7:6a:a2:23:76:6a:c1:10:8e:4d:
b7:08:fa:f7:67:67:4e:da:9e:09:21:db:93:20:3b:8b:38:b8:
4d:11:be:69:01:8c:90:8b:16:94:c1:08:50:14:db:3c:96:c2:
ae:8c:61:71:20:b9:48:c8:79:c1:e1:d0:7a:9b:92:4d:24:54:
a0:29:eb:1b:4a:ee:66:b7:bc:c1:c8:69:f3:49:d5:cf:4f:71:
10:33:e5:bd:4a:fc:fb:34:d3:dd:12:ad:b2:0c:19:6a:a7:00:
40:65:1c:56:19:47:18:4c:95:0e:0e:07:f9:99:e4:d9:ef:46:
50:e0:a5:d9:cf:7b:1d:48:1b:d2:bc:68:2d:70:fb:a0:fd:e4:
d6:9f:d3:0b:8d:00:85:38:44:0c:8f:68:89:21:2f:b6:45:87:
04:5e:33:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:05:25 2025 by rpki-client