Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
File: zqedzVo97kUOrz-TFS7W2oBrv3E.mft (raw, json)
Hash identifier: j71Iu9f1LG+Yr+OndoxfSSuD33A7moIhXZMW8foA6vw=
Subject key identifier: CA:DF:4F:41:7A:43:9E:A8:FB:B6:DC:03:F9:CD:06:2C:0B:39:E3:68
Authority key identifier: CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
Certificate issuer: /CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Certificate serial: 01965F16A4A6129EFAD2FCC63C2D561DF479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
Manifest number: 1C
Signing time: Tue 22 Apr 2025 20:00:41 +0000
Manifest this update: Tue 22 Apr 2025 20:00:41 +0000
Manifest next update: Wed 23 Apr 2025 20:00:41 +0000
Files and hashes: 1: I646M_btsSzN2hgU43In8XScCvM.roa (hash: XbiElIXeBAvzCXqiHxg3yiWmZinPZ2P2LAOYB8cFUtk=)
2: VEDYX_cUfJzMWRyMM4Dauca7wqY.roa (hash: emvPGd/BGNmoaOgiTJawr2YtCEYZXYHWYyhS2hE0sKg=)
3: YSMyo0r9Sisa_qEUD5bNOCn6J7k.roa (hash: 2e6jr3gF4oxshJJOD15Mpry9Shp0v5NKkIGpPv8Ct7k=)
4: lSi0kTGzn2fZQ79DDpFPyNvNhWI.roa (hash: F0jv7qe5DmHgW7kJgMByEcK9/LyeESyPvMnKoboRIjc=)
5: zqedzVo97kUOrz-TFS7W2oBrv3E.crl (hash: sMrLCK3GcdpauYq6g/dcAvmEfbST8Xg0v6ICx6YUWXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:a4:a6:12:9e:fa:d2:fc:c6:3c:2d:56:1d:f4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea79dcd5a3dee450eaf3f93152ed6da806bbf71
Validity
Not Before: Apr 22 20:00:41 2025 GMT
Not After : Apr 23 20:00:41 2025 GMT
Subject: CN=cadf4f417a439ea8fbb6dc03f9cd062c0b39e368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:7d:c5:2d:74:f7:af:c6:68:61:de:7a:a1:
55:d8:cf:73:3e:4c:37:6b:e9:3e:b8:26:3a:97:c7:
00:4b:46:43:de:a1:f0:0b:0c:ca:7a:08:b5:25:09:
70:c1:cd:c3:bc:2b:d2:68:39:01:95:63:32:33:7c:
69:f4:c2:75:2c:40:cc:86:c4:e5:bb:76:26:3c:ea:
b5:2f:53:04:33:fa:73:41:d9:7d:63:e1:e4:09:c9:
e4:f5:50:11:df:2b:e1:99:b4:56:e9:f2:f4:c8:49:
50:9b:64:09:06:4e:c7:c3:03:6d:02:ac:b6:bf:ba:
4a:1b:34:f9:3e:f5:6d:47:c7:28:e6:24:84:51:4f:
51:90:2f:8d:08:cf:57:23:91:a2:34:69:d3:01:84:
a2:a6:1a:da:7c:b3:4d:a6:a3:75:52:9f:23:08:b8:
81:58:cd:8c:8a:80:79:4a:a4:ab:e1:7e:e6:c9:99:
d8:47:0d:46:83:be:00:73:79:38:4b:be:9e:6e:b4:
3b:51:36:e2:f0:c9:5b:ab:e6:12:e5:67:a1:79:d2:
d0:91:24:70:57:48:a7:cd:91:4d:0a:3e:8e:36:47:
da:a7:25:2b:ef:0d:0b:45:70:e9:e9:54:45:2d:b6:
2d:02:32:eb:3e:0d:48:99:0e:ea:08:ff:15:83:06:
01:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:4F:41:7A:43:9E:A8:FB:B6:DC:03:F9:CD:06:2C:0B:39:E3:68
X509v3 Authority Key Identifier:
keyid:CE:A7:9D:CD:5A:3D:EE:45:0E:AF:3F:93:15:2E:D6:DA:80:6B:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqedzVo97kUOrz-TFS7W2oBrv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f819cc-b294-460e-8be4-86e24260516f/1/zqedzVo97kUOrz-TFS7W2oBrv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bd:46:3d:d4:6b:35:35:f7:66:2a:88:15:17:45:7b:4c:3f:
23:58:99:df:9b:7a:1f:fa:2a:19:57:58:c1:b3:bb:44:87:1c:
50:ca:ed:0e:1d:cc:f5:07:d7:c0:49:e1:53:ea:5d:a5:11:3e:
47:43:3e:ae:5d:61:09:39:5c:18:b1:60:85:59:6a:c5:07:13:
71:58:57:2f:76:01:ab:58:0d:57:b5:87:05:7a:a2:0a:3d:86:
cd:81:6c:13:86:e1:c2:bf:f7:47:79:67:14:aa:de:27:9e:49:
f6:50:20:57:a1:6f:93:f9:47:89:36:0f:08:aa:ad:6e:56:04:
4b:94:b6:7f:29:2b:c2:49:3f:44:8e:f2:01:77:fd:9d:75:99:
2a:2d:ff:5c:cc:14:67:18:be:93:55:57:80:ab:e8:a4:43:2f:
83:98:20:ff:25:2f:96:53:b7:c7:2b:6b:63:b2:27:80:4f:0c:
e9:e0:b5:a5:5c:cb:c2:3f:18:3c:05:c4:c1:39:2d:6c:fb:fa:
3b:d3:ef:0e:c7:63:ef:2a:7e:16:cb:8c:67:4c:87:c5:58:39:
52:42:2e:1b:6d:34:51:fb:b1:00:ff:9b:08:68:ec:8a:30:47:
ac:d2:08:0f:5f:8c:f3:f0:76:32:1d:d8:33:96:8e:1b:0c:37:
5e:01:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:29:33 2025 by rpki-client