Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json)
Hash identifier: vIzEwx532HpMuvmxzRN1O5fa2smKC+Gj71sjnDo7Dsw=
Subject key identifier: A7:EF:A0:E3:C6:F8:A2:6A:F1:CC:0E:6A:BA:48:9C:FE:33:99:DC:B3
Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Certificate serial: 0196496AB0FB975D1C862FF0B90AC7D7A832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
Manifest number: 10DB
Signing time: Fri 18 Apr 2025 15:00:50 +0000
Manifest this update: Fri 18 Apr 2025 15:00:50 +0000
Manifest next update: Sat 19 Apr 2025 15:00:50 +0000
Files and hashes: 1: 8P_S0IiROCk_5OYQ6mxMJ_E_ykg.roa (hash: hKXKA4mluIkjfh1vqK/elg6N0eojlwBUTy51lDcZmFo=)
2: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: GCPVTnQ09G8DhoHSuOXREJnGn4GgEZqWO/698nr6mgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:6a:b0:fb:97:5d:1c:86:2f:f0:b9:0a:c7:d7:a8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Validity
Not Before: Apr 18 15:00:50 2025 GMT
Not After : Apr 19 15:00:50 2025 GMT
Subject: CN=a7efa0e3c6f8a26af1cc0e6aba489cfe3399dcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:d8:cb:26:d9:60:b7:c5:ff:e2:c1:64:33:
fd:28:f9:9a:9d:01:10:71:e4:1c:7b:b9:01:59:51:
9b:55:ab:64:3d:af:1b:91:45:22:81:91:20:5b:57:
85:e9:be:06:a5:3e:6f:71:89:4f:95:d6:0e:4b:38:
86:e5:07:2d:c2:b7:36:5b:12:2c:ba:51:ab:a9:2c:
61:5d:b5:74:ed:dd:2e:4c:a3:f0:fc:a3:17:1d:a1:
df:f0:c6:4f:4b:58:02:8e:d6:c0:5b:b4:ac:72:10:
c1:9d:a7:ae:bd:44:10:a4:49:a0:58:79:70:f1:70:
77:43:35:b9:35:db:ab:ae:99:2d:dc:02:b4:a0:86:
d2:6e:2b:6f:b7:8d:d6:83:9c:9b:ef:ce:26:38:ed:
fe:9d:a1:a8:1a:bb:cb:77:06:a2:86:85:6e:b4:4d:
73:75:fa:4b:fd:ee:58:91:c4:ba:e3:6e:4b:1d:04:
36:a6:9c:32:71:82:06:23:03:13:36:00:9d:60:49:
6d:07:e2:f0:8b:49:b2:d3:bb:ab:36:05:b8:f3:95:
14:8f:9c:5b:1c:9d:85:54:87:5c:37:fe:95:e7:08:
28:9a:dc:78:1d:c4:84:40:42:87:ad:2d:c0:5b:b6:
c3:8d:31:37:5d:c8:57:ee:f2:c8:88:cf:8d:66:89:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EF:A0:E3:C6:F8:A2:6A:F1:CC:0E:6A:BA:48:9C:FE:33:99:DC:B3
X509v3 Authority Key Identifier:
keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:65:80:d8:b9:56:a3:ba:b2:1c:af:64:c1:08:ff:53:84:d0:
47:91:c1:c1:ac:b5:ad:d6:c6:b2:c8:7c:7d:ca:22:21:ec:3a:
5f:b9:ca:42:a6:07:e5:7c:7e:f0:46:3c:21:24:46:6c:e7:79:
64:11:b1:42:45:4c:47:c6:d1:9a:75:22:74:e7:1d:36:ff:2a:
93:d2:1b:c2:98:b3:a2:5c:71:82:4a:94:cd:27:de:c0:a6:87:
e0:05:55:99:ca:fc:de:fb:79:1f:2f:9d:f0:c7:72:be:df:ff:
10:5a:61:3e:d8:a0:b7:0b:bb:ff:b8:b9:35:66:3f:6d:7d:87:
ce:2b:1f:28:5e:68:a4:51:d3:84:55:31:34:37:e4:86:63:09:
e1:31:e9:39:5c:f0:73:a0:a5:99:02:16:d7:01:a6:86:a9:c7:
f7:56:ca:3f:72:53:0f:1b:4c:15:6d:58:96:56:8d:67:ec:85:
45:5e:34:9f:1b:94:14:51:0d:cf:e8:05:63:07:fc:12:31:c2:
f5:d7:71:2a:13:34:e8:e2:6f:88:ea:9c:34:7a:d3:64:0e:c4:
a6:72:81:7c:bb:4f:1e:44:94:cc:8a:0b:a6:49:b7:b4:68:08:
6a:6a:7f:57:d3:cb:20:d1:2e:29:88:b0:a8:f2:99:84:38:75:
a6:62:2f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:26:58 2025 by rpki-client