Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: 2rHKCAXGfPOfAHmXYpYoHockMVX1YYtBY5A1T4xTYeE=
Subject key identifier: 90:12:42:99:53:02:15:49:74:A3:BF:1D:6F:5D:F4:26:3E:EE:9D:7E
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 019652365B2AA7154B4F3929587E12E8179F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 0253
Signing time: Sun 20 Apr 2025 08:00:16 +0000
Manifest this update: Sun 20 Apr 2025 08:00:16 +0000
Manifest next update: Mon 21 Apr 2025 08:00:16 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: RsGEtX9xMP1h30CKn9ALrxxZp61q4lyisM2+NGRoeRI=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:5b:2a:a7:15:4b:4f:39:29:58:7e:12:e8:17:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Apr 20 08:00:16 2025 GMT
Not After : Apr 21 08:00:16 2025 GMT
Subject: CN=901242995302154974a3bf1d6f5df4263eee9d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f1:31:93:83:46:e3:82:a8:d3:06:9b:36:25:
b7:87:15:a2:4b:3e:29:14:b0:dd:87:b3:97:c9:71:
70:be:3e:79:78:22:94:2a:37:1a:e1:5b:ae:f6:d7:
7f:75:3e:2c:70:c6:bf:89:97:15:39:51:95:6b:ac:
57:5c:6b:16:6d:fc:92:f3:22:bf:17:b2:dd:dc:22:
a7:0c:11:e8:28:b7:ad:d4:d5:24:30:1d:0f:61:68:
ac:ba:1b:f5:e1:91:92:0a:61:7b:05:5b:83:93:86:
6f:bd:75:a2:c2:17:c8:f9:a2:6a:ae:61:ae:68:5e:
7a:a0:41:17:dc:16:05:67:b0:a4:e7:3e:4b:7a:09:
88:10:a2:c6:56:5e:4d:9b:fd:d2:5f:eb:c7:90:36:
69:42:b1:1e:ee:93:b2:03:bf:d4:27:19:1c:7a:27:
e2:04:43:83:14:f5:af:c3:7c:d5:0c:17:51:b1:bc:
22:5e:d0:00:d1:68:a6:0f:aa:4a:03:a6:78:b4:ec:
d4:86:cc:7b:7f:7a:4b:1c:11:a9:32:19:59:80:a9:
9f:ad:39:0b:a6:69:06:f5:e1:b4:10:2c:b7:b9:ae:
ad:79:12:51:ca:0d:59:47:af:59:7d:0a:94:30:16:
7a:a4:19:bf:23:25:f1:99:52:bc:2c:5c:7f:7f:41:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:42:99:53:02:15:49:74:A3:BF:1D:6F:5D:F4:26:3E:EE:9D:7E
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:bf:38:61:0c:6e:89:81:f5:42:1b:3b:c9:ec:1c:df:9f:c8:
35:ad:eb:fa:c3:83:d9:b9:26:73:92:86:2a:20:5e:f3:34:30:
40:7d:ac:ec:ea:79:18:54:f4:c0:97:a0:ff:45:66:19:fc:ac:
a8:12:ff:44:62:11:3b:ae:21:c7:14:70:c5:84:e7:0e:0b:fb:
d1:7e:7d:19:80:06:ee:e9:37:39:bd:29:02:8e:93:ef:8b:c9:
ac:de:7b:e2:84:b8:f2:63:73:dd:96:c1:88:3c:c2:c0:d8:b7:
73:7f:69:32:74:f3:7c:de:b1:d9:a9:9b:43:25:f7:58:89:36:
ab:da:6e:c1:74:fc:43:51:2e:2e:4b:e2:62:14:88:d3:cb:94:
a2:b6:85:bc:e3:77:e4:66:22:e3:f5:6a:69:e7:09:1b:56:fe:
06:b1:75:a7:c9:fa:33:8a:f3:bb:c4:a4:ba:ac:8b:20:88:c2:
c8:16:12:dc:44:d6:83:37:19:c8:95:65:d0:ce:cf:b6:42:c7:
e2:56:dd:cb:47:89:72:98:8b:46:13:08:59:04:62:ae:5c:1a:
2e:06:5f:6e:88:26:8b:72:55:e4:08:d3:95:90:59:e4:c5:19:
87:41:83:42:d9:af:60:a5:f3:4b:30:4a:a3:9d:35:f1:a5:c9:
b9:40:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:14:34 2025 by rpki-client