Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
File: zGQrH13XOvfTrQVIfghgAd_5suc.mft (raw, json)
Hash identifier: eNJmAiWtKRm+cU+FJlYPaLJnsAGPwAkQiJvM8VGX9vE=
Subject key identifier: C4:47:A9:3E:1E:4B:66:6B:6B:3C:05:AD:C2:DF:B1:E2:29:66:79:0C
Authority key identifier: CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
Certificate issuer: /CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Certificate serial: 01965C1586FDBFA0A6E65E2D623AF162B1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
Manifest number: 02C7
Signing time: Tue 22 Apr 2025 06:00:36 +0000
Manifest this update: Tue 22 Apr 2025 06:00:36 +0000
Manifest next update: Wed 23 Apr 2025 06:00:36 +0000
Files and hashes: 1: BBmeL_y8dFZnZVsyof-5HOdh9rM.roa (hash: l+ylGzhBzhl0JipTi0n6QhNTnBVAyKKM7zWtPfY+z3s=)
2: zGQrH13XOvfTrQVIfghgAd_5suc.crl (hash: CfP1C6kaIXcP1clGHpugFqA+iqPh7NSWN/LhN8//M1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:15:86:fd:bf:a0:a6:e6:5e:2d:62:3a:f1:62:b1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc642b1f5dd73af7d3ad05487e086001dff9b2e7
Validity
Not Before: Apr 22 06:00:36 2025 GMT
Not After : Apr 23 06:00:36 2025 GMT
Subject: CN=c447a93e1e4b666b6b3c05adc2dfb1e22966790c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:aa:da:1b:c4:48:19:c5:5f:17:9b:f3:f4:
cb:c3:70:a6:06:ae:e1:a4:7d:16:90:1c:9f:4a:cb:
6f:8c:17:97:4a:63:55:a6:b1:3e:ed:c7:48:30:61:
3b:fc:a8:0d:c5:03:3f:7d:2d:3b:e6:4a:c5:82:3c:
68:30:09:e1:25:0b:e7:a9:d1:40:29:0b:07:cc:8e:
02:2e:91:f1:40:68:66:a0:15:96:58:c7:51:7f:99:
f3:12:66:ae:6c:18:57:e0:cb:56:04:31:7c:3e:40:
f7:87:8b:b6:05:52:12:a8:56:6d:27:07:e6:04:05:
af:2a:ce:25:a4:55:a0:9f:41:07:4a:71:27:26:c9:
a5:2a:5c:86:b1:23:03:ef:51:db:33:a0:29:f3:30:
52:f5:00:37:3f:12:48:ed:a1:d8:04:e6:46:5a:e5:
97:46:b5:59:2e:3f:41:c5:fc:82:d1:15:1e:33:d2:
0a:03:f8:a2:96:12:57:69:71:05:a2:02:3a:cc:7c:
86:f3:47:6f:ea:39:01:0b:3c:a5:97:9b:a2:17:32:
44:b8:91:84:03:a8:df:6f:be:ce:58:3f:a8:9b:c5:
10:39:40:ae:5b:fd:ed:18:6c:94:eb:90:8d:90:24:
88:2e:3c:d6:31:0d:0f:5a:d5:61:62:60:63:d4:b0:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:47:A9:3E:1E:4B:66:6B:6B:3C:05:AD:C2:DF:B1:E2:29:66:79:0C
X509v3 Authority Key Identifier:
keyid:CC:64:2B:1F:5D:D7:3A:F7:D3:AD:05:48:7E:08:60:01:DF:F9:B2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGQrH13XOvfTrQVIfghgAd_5suc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1e4a1c-b14c-46b5-87cc-5d14a0ff6dee/1/zGQrH13XOvfTrQVIfghgAd_5suc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1e:35:d1:34:73:50:64:84:af:ee:fb:f2:0a:d7:93:c5:ef:
df:bd:9d:c2:1c:ac:71:5f:fb:c3:7c:b9:33:45:87:38:9b:c2:
94:f7:4e:4f:36:71:6b:88:df:8d:e4:1c:ce:c7:c5:46:a4:f8:
6c:20:31:ca:d5:e6:19:cc:8a:b8:46:87:ac:ac:c4:cc:fc:b2:
ca:f6:16:97:49:78:bd:e4:a2:f1:bf:9e:2d:3d:f7:bb:e6:79:
1c:6e:e6:ae:bc:87:ca:06:b6:01:84:96:73:d2:17:03:80:ba:
06:8c:da:ca:e5:a6:00:ff:b8:85:c5:b9:ea:d7:29:4c:bb:5a:
8e:cc:0a:ec:c2:77:54:b9:c4:ee:9d:0c:4a:6f:03:76:04:67:
9d:3a:be:3f:31:f5:b2:58:71:3a:88:d3:16:e1:e4:8c:d3:bf:
d4:7c:c2:d2:ae:e6:b1:77:fc:db:79:1c:5d:77:b5:bd:6e:1b:
48:88:11:61:01:34:78:b2:df:9c:6e:47:8e:01:cd:e2:14:20:
77:81:da:4b:bb:04:9e:09:d3:7a:c7:7b:31:ca:65:e8:45:37:
8a:53:08:0c:bc:c1:a0:c1:22:37:15:7c:72:60:14:58:de:91:
26:8c:1a:36:bb:98:fb:82:e5:6d:28:87:ad:26:c0:b9:a4:56:
d7:22:61:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:12 2025 by rpki-client