Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: JvcwjLHcW86/9iaVGdZA0oPC8AbkU9F6gTNmWhwzaEc=
Subject key identifier: 4F:2F:E3:0E:20:24:AB:99:91:09:C7:40:32:FE:F9:F5:EF:8A:ED:EF
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 019652DB57C3288C3ED42AFD264DAEBBB724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 11:00:28 +0000
Manifest this update: Sun 20 Apr 2025 11:00:28 +0000
Manifest next update: Mon 21 Apr 2025 11:00:28 +0000
Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: YcTvPKfBNyJKEhjbRisvLT2Qv3YY3ZgyPkb9Np1fEu8=)
2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:57:c3:28:8c:3e:d4:2a:fd:26:4d:ae:bb:b7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Apr 20 11:00:28 2025 GMT
Not After : Apr 21 11:00:28 2025 GMT
Subject: CN=4f2fe30e2024ab999109c74032fef9f5ef8aedef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:8c:cc:14:61:3c:d1:0e:9a:2c:95:36:d1:42:
f9:7a:ad:e7:91:b7:90:16:2e:97:4a:62:73:d5:b8:
eb:3b:d1:2f:e9:53:05:5b:59:d3:b9:a9:0e:36:e0:
aa:b3:f8:87:30:1a:26:b6:57:60:19:f2:88:fc:82:
ed:44:d3:49:a9:b6:91:67:9c:83:20:a2:8e:18:7a:
3c:a0:f3:e0:a0:24:40:5e:03:af:83:6a:78:30:ba:
32:12:28:19:42:92:a5:df:e3:65:d7:63:c1:41:c7:
9b:1f:74:f1:7f:a5:d5:60:29:f7:38:4e:9c:42:00:
09:7f:a6:a3:16:16:30:59:db:d1:8d:c9:8e:35:94:
c0:02:78:51:52:89:e0:99:e6:58:6e:cf:75:1d:04:
47:b2:de:77:2a:50:74:bd:7e:22:25:37:3c:c9:15:
08:40:e5:bd:76:be:69:10:3d:7b:f4:6a:52:ba:c5:
86:4d:fb:9c:57:3a:4f:fe:d0:57:60:bf:80:0d:13:
de:18:97:c3:ba:95:32:27:bf:5f:4b:1e:da:eb:58:
8d:a3:4a:9f:4f:9a:07:03:95:6c:e0:2e:60:9b:e6:
88:7d:6b:02:91:da:48:38:ff:78:68:1a:49:72:26:
e7:50:12:2f:15:fc:46:d9:22:e2:42:db:6e:fc:15:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2F:E3:0E:20:24:AB:99:91:09:C7:40:32:FE:F9:F5:EF:8A:ED:EF
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:3e:07:53:7b:db:9c:cf:c0:06:c9:58:ff:d0:73:af:36:
8a:49:2d:81:e6:21:92:d1:f0:fc:68:be:6f:b3:b4:b5:40:ce:
e4:77:12:17:40:f0:fb:17:9e:a9:8e:71:3b:5e:23:96:ea:72:
9a:76:bc:51:e4:18:40:af:0f:38:f6:77:39:cc:39:c9:fd:b2:
b4:f2:fd:b0:29:31:12:ad:76:86:06:52:ed:40:f7:73:54:2a:
cf:4d:c9:4b:64:a4:61:39:8e:5e:f0:91:29:77:78:6c:92:c8:
52:4e:e8:03:05:85:d7:ca:43:3f:ac:8e:f3:4d:00:3e:4a:b7:
46:97:d4:04:6c:f7:0f:9c:5e:93:6e:80:54:76:6e:04:0c:3a:
11:b4:72:c0:97:17:50:dd:9b:44:92:b7:83:2c:b2:70:4d:73:
97:93:88:f0:8f:64:03:87:04:c1:30:00:8b:07:5f:73:34:65:
18:f7:4c:11:9a:6b:96:30:bb:36:e2:1a:ef:37:29:3a:1f:b8:
ef:f3:07:d8:0d:65:36:d1:63:2c:a2:f6:07:91:db:db:5e:ec:
0a:6e:6f:69:d6:81:d8:20:44:04:b0:c1:1f:f3:58:11:21:02:
c9:00:50:cf:a7:05:da:c0:68:65:0f:ed:ad:29:65:ce:ba:d2:
28:0c:d9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:04:01 2025 by rpki-client