Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: 8lIBNkp4vDvhyyMSdrqxPpzwh8qzGlq+qVZQSe5H+pI=
Subject key identifier: 94:D0:CD:D5:12:2F:6C:C6:0A:CB:F9:B3:5D:F7:0D:53:9A:17:C9:99
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 01965CBA79ACBD71FB1F2401593BBE9BBC37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0DB7
Signing time: Tue 22 Apr 2025 09:00:46 +0000
Manifest this update: Tue 22 Apr 2025 09:00:46 +0000
Manifest next update: Wed 23 Apr 2025 09:00:46 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: hRDk3FIjJos+eUUbhFqV9PzeoCQwSPsK6FBLqZR+Mjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:ba:79:ac:bd:71:fb:1f:24:01:59:3b:be:9b:bc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Apr 22 09:00:46 2025 GMT
Not After : Apr 23 09:00:46 2025 GMT
Subject: CN=94d0cdd5122f6cc60acbf9b35df70d539a17c999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:68:cd:f0:93:ae:45:43:d2:8e:8b:2d:2d:
53:79:14:89:93:b0:15:38:a9:9f:28:cd:16:ca:f6:
2f:3f:47:ae:30:b1:77:80:fc:d3:49:55:c7:82:38:
2f:70:c4:98:06:18:f0:b0:01:94:29:2d:c1:d7:95:
12:cb:54:bd:0a:16:52:83:1c:21:e1:6e:6e:f1:f3:
45:01:ee:43:13:a0:d0:27:28:32:94:a2:a2:6f:e5:
e0:ee:94:c1:fa:44:fd:77:f2:d3:a1:9b:8f:7c:fc:
fd:7d:76:8c:d7:25:1b:f7:21:a9:22:5a:57:71:f1:
cc:2c:47:44:23:30:25:d5:b6:9c:64:83:ee:4b:28:
92:18:7d:1f:19:f8:eb:b2:56:84:81:a9:95:9a:9d:
d1:2b:f8:52:7c:1b:70:95:5d:8b:c8:58:53:cb:1e:
88:ca:41:7d:b1:35:7c:90:3d:25:5a:9d:37:00:28:
cf:75:93:7d:d8:26:ab:91:13:66:94:8c:e0:59:18:
d6:f8:77:31:00:73:86:12:ca:bd:1d:64:a8:9e:1e:
fb:02:a8:33:96:b3:5a:cc:5f:06:34:ab:22:04:34:
47:42:c9:a7:df:d0:78:39:79:dd:a8:b8:e8:55:b3:
d9:a9:91:2a:81:e3:75:9f:b6:da:29:73:47:16:08:
ca:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:CD:D5:12:2F:6C:C6:0A:CB:F9:B3:5D:F7:0D:53:9A:17:C9:99
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:d6:2a:c1:72:b9:c2:72:8b:e7:80:a2:a6:3c:90:6c:bc:8b:
f8:ff:f8:10:e8:d4:95:42:81:0b:cd:64:2c:0d:c3:19:b9:e1:
db:fd:73:a4:84:90:3a:ea:e5:0e:61:4f:82:4f:b8:04:58:21:
79:d4:03:4e:1f:6b:fb:66:d5:7b:a7:31:7a:2a:5c:f4:71:5f:
a0:ac:2e:dd:0a:3e:77:8c:02:97:ef:b6:9c:c4:b3:f5:28:45:
ff:6d:b6:71:4a:ff:21:30:66:aa:02:b7:59:20:69:2e:b4:df:
a1:fd:66:e1:4d:c3:17:4e:11:61:f4:2c:48:0a:40:b4:12:aa:
4b:d2:f2:d4:d1:bb:3d:96:88:38:87:1d:3d:dd:8c:1f:bf:db:
43:0d:53:19:56:23:46:36:f4:67:33:5d:4a:17:61:c7:29:05:
01:ad:51:4e:8f:19:2c:07:21:03:16:f2:c5:df:56:94:74:7f:
95:ff:c5:52:c0:32:04:6c:9c:4e:06:1d:c9:b7:69:bd:99:ec:
79:74:9c:8b:09:f8:51:83:88:a0:da:dd:ff:c3:c7:99:88:5f:
62:d6:7a:eb:85:ad:8e:5e:a1:b8:00:6d:f6:d5:b0:3f:04:d7:
88:44:2b:81:c7:c6:c2:53:91:93:df:6e:4e:54:c6:8b:86:8e:
d6:6a:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:16 2025 by rpki-client