Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: NCDMV2L7CiErXt7SA2GFD4ebWlNlNCw/qeLpsR2UL2Y=
Subject key identifier: E6:58:47:EA:30:74:3D:73:35:C3:C9:B3:BC:39:0F:8B:44:AE:97:F7
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 0196545C4D8FC9C1BCBF99F533664751BA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 1505
Signing time: Sun 20 Apr 2025 18:00:57 +0000
Manifest this update: Sun 20 Apr 2025 18:00:57 +0000
Manifest next update: Mon 21 Apr 2025 18:00:57 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: CAlB4wes1mTsNsLAAv2uuSzZsReEo97MGdKKhAJS2tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:4d:8f:c9:c1:bc:bf:99:f5:33:66:47:51:ba:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Apr 20 18:00:57 2025 GMT
Not After : Apr 21 18:00:57 2025 GMT
Subject: CN=e65847ea30743d7335c3c9b3bc390f8b44ae97f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:b0:1c:7d:78:9d:13:3e:b9:80:36:cc:9f:
89:20:d2:c8:9b:21:78:ff:f6:a1:29:2c:cb:2f:c3:
0f:83:17:51:3e:b6:64:db:9f:0e:12:80:f5:bf:39:
14:e8:e8:b3:6b:a3:25:2e:05:3e:ed:7d:b5:30:97:
ef:fc:ff:5b:66:f5:c0:3e:5d:8f:3c:d7:01:ce:f9:
fe:1e:a4:f9:c8:df:2a:14:e6:43:20:46:8d:36:0f:
f7:d1:3c:e2:f2:b9:02:33:27:44:ef:f7:74:60:06:
86:68:eb:91:c1:e9:c6:03:0e:ae:2b:4e:b0:f0:24:
1f:70:8b:f5:d9:2f:c3:7f:0f:33:db:79:d1:43:bc:
50:78:6a:e5:d4:10:bc:a9:f7:6b:2b:6f:61:f8:d3:
78:0b:8b:a4:b9:da:61:63:b9:82:a0:f4:4e:de:be:
75:9f:f1:3a:55:02:88:2c:5c:a8:a6:c6:26:90:82:
e2:74:2d:64:48:8b:98:d0:86:d7:9c:31:59:82:22:
fd:0b:c7:39:42:8e:00:99:5d:10:bf:ff:08:8c:b7:
6c:57:3b:b6:d2:fd:9c:80:86:52:57:82:22:29:c0:
1e:44:99:90:6c:0b:29:b8:2a:57:47:2f:b1:76:44:
77:a7:cb:36:dc:32:9b:1d:bf:16:70:2d:d6:3c:14:
9d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:58:47:EA:30:74:3D:73:35:C3:C9:B3:BC:39:0F:8B:44:AE:97:F7
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9b:45:66:e0:70:e7:f2:18:55:c6:79:f7:99:5c:b5:77:e5:
47:ec:ca:c3:40:70:ee:ad:62:3f:28:0a:03:01:64:76:60:f3:
80:c4:36:47:8e:a3:f2:7b:02:6f:14:af:2c:3d:8a:1e:ef:82:
39:c1:21:2c:21:ef:86:52:d7:1a:4a:ed:27:4f:d3:1b:5e:22:
c2:21:94:18:6e:f6:2a:79:e6:4e:76:9c:9b:76:f0:b9:75:6a:
55:e9:6c:9b:c3:56:f8:48:dc:40:60:92:ae:95:43:f7:36:b2:
48:36:43:e9:04:5d:03:82:3a:07:2e:ec:50:d2:4b:78:f1:e5:
7c:58:78:42:6d:e5:49:f5:94:9e:82:be:64:10:be:0b:6b:20:
d7:e2:cf:9c:57:a6:b9:eb:f3:d1:4d:d1:c3:3e:32:cb:0d:83:
2b:c8:1a:52:53:e9:a7:f5:4c:b1:f9:ac:e6:d1:0b:0e:01:a3:
00:9a:f4:96:87:85:12:f2:f8:f5:e6:7c:47:87:c8:a6:2d:d8:
31:45:db:05:40:74:99:c0:ce:a4:53:27:fb:54:13:09:25:6e:
29:c8:dc:72:82:a6:b0:2b:0d:52:bc:78:2a:59:ea:12:ed:74:
67:84:f7:b7:9d:07:2a:54:61:ff:44:fa:18:87:b1:5e:f1:23:
f2:46:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:47 2025 by rpki-client