Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File: zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier: TAvRrEStmEXoQy/t1fqngwqmSJnY1sbCcDiMGelxPLg=
Subject key identifier: C9:ED:34:89:32:44:DE:75:E1:91:81:B0:6B:75:D6:99:7F:B1:F6:C3
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer: /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial: 01960AF9B859675FB1ADC34EB6BD73BE0685
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number: 0490
Signing time: Sun 06 Apr 2025 12:00:59 +0000
Manifest this update: Sun 06 Apr 2025 12:00:59 +0000
Manifest next update: Mon 07 Apr 2025 12:00:59 +0000
Files and hashes: 1: BvxwicsH1ZVfBk6Q4DoBq1qq_Cg.roa (hash: 4jEtLdDvLytqaDFqVfLMjurgO3/mhXlRnfALOClKcPM=)
2: IaQkr4wJmPFX7MlGIC068T5SLas.roa (hash: LZsKSu9vsLm4Oqz5UZoGBpM3ebW0TaSiuaWmenP7SS0=)
3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: hf2hLl3scj9AVZZgReWJx4g7Q9h3uTc+nbTPYggV3wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:f9:b8:59:67:5f:b1:ad:c3:4e:b6:bd:73:be:06:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Validity
Not Before: Apr 6 12:00:59 2025 GMT
Not After : Apr 7 12:00:59 2025 GMT
Subject: CN=c9ed34893244de75e19181b06b75d6997fb1f6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:b8:da:17:72:e5:41:19:26:fc:c0:d6:21:
e7:98:15:1c:cf:3c:61:46:9a:4a:a0:d4:9e:4a:b5:
87:f5:5a:e4:62:9b:88:80:ac:5d:09:e2:9d:27:8c:
08:37:cf:ed:ac:50:22:ab:2e:3e:d2:bf:5a:05:36:
42:ec:18:26:e6:40:dd:b8:09:89:f1:41:03:2d:68:
69:fe:7f:04:55:38:7c:0e:81:f1:71:32:a1:ef:2d:
9e:fc:b7:17:7c:80:14:86:ea:81:6d:4a:c2:16:e7:
a2:00:da:4d:a9:52:17:af:2a:96:61:64:82:c2:eb:
7b:e1:4e:30:52:c7:53:27:6b:ce:df:ef:f7:b1:6f:
bd:4b:87:43:39:43:9a:dc:7e:fc:ee:91:84:ec:03:
14:14:41:e4:d5:70:fb:e7:58:ad:fc:ef:d5:04:af:
aa:b4:ba:f8:7f:bc:8b:01:04:ba:99:5e:a8:6e:c2:
8b:eb:18:6c:18:aa:d4:07:37:5e:93:52:35:5c:05:
46:36:a7:ff:e9:0b:9a:46:0e:ba:a3:c9:d3:56:a5:
4d:5b:89:04:47:1d:c3:7d:30:0e:b4:ed:e3:91:32:
0c:c5:56:0e:3f:cc:0c:37:73:ec:96:d3:a3:f3:34:
be:02:8b:e8:ea:4d:ff:b1:83:65:12:cd:ff:ee:62:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:ED:34:89:32:44:DE:75:E1:91:81:B0:6B:75:D6:99:7F:B1:F6:C3
X509v3 Authority Key Identifier:
keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9b:c9:a6:82:67:77:16:d1:25:51:c9:5a:eb:0d:2e:43:e7:
43:7e:8c:00:ce:a0:70:88:50:59:69:df:d6:34:c9:60:bb:a3:
47:67:a2:8c:43:c1:47:3a:50:60:c5:68:68:8e:88:dc:3c:df:
b1:47:1d:3b:a2:5d:4e:64:8b:67:67:a6:9b:59:a1:52:80:14:
0e:4b:77:b9:df:8e:44:c4:6e:78:39:6f:a9:7e:9c:56:9b:7d:
3b:0a:2c:b3:38:33:8c:c2:6e:04:dc:65:9e:c6:b5:6e:5a:eb:
05:1b:61:aa:6e:7b:0f:f8:31:11:82:50:ba:64:12:66:9e:32:
68:88:ae:25:cb:a9:0a:ab:b2:bc:7e:9a:bd:32:7d:4f:35:42:
11:97:2f:4b:f2:6d:3d:91:95:2f:60:c9:4a:6c:5f:11:42:d0:
1d:bf:a9:05:db:2c:2b:8f:43:94:b4:1f:92:6e:83:8a:bc:8c:
40:e0:7e:91:2d:2e:cd:20:ee:6d:d3:ac:2e:a8:34:84:97:16:
c5:31:1a:ac:19:c4:3c:8b:00:3a:13:02:2e:8d:d6:13:a4:bf:
74:c8:c1:d1:86:84:77:55:fc:a4:bc:3c:40:b0:25:1a:a9:ba:
e7:4e:57:7d:93:76:32:2f:51:b7:17:09:a7:d8:35:56:a4:df:
4f:53:b0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:06:51 2025 by rpki-client