Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
File: ZjokSA8E0TGL8acNq_-ksn7zLaI.mft (raw, json)
Hash identifier: 7Xy650u7oA5WjXIqkf8+VWcqDiW8mhGWV+uPCJjydRg=
Subject key identifier: E8:2E:0E:9C:7B:CD:82:36:87:C0:B8:63:64:81:99:A7:BE:F2:FE:EE
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 019579469B9F1F03F3B9490F1DD748ABB57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
Manifest number: A2
Signing time: Sun 09 Mar 2025 05:00:25 +0000
Manifest this update: Sun 09 Mar 2025 05:00:25 +0000
Manifest next update: Mon 10 Mar 2025 05:00:25 +0000
Files and hashes: 1: G8N3qTa4VczFzinJ5WzomATxm3g.roa (hash: 9nI91Hj8CyleS8L7CFcjCsRKa59524cSRX5eWMKZBYE=)
2: ZjokSA8E0TGL8acNq_-ksn7zLaI.crl (hash: dw1hJfTFoK6nyMP80V66Nx2nfPFQ0UgXD/yyXShdu9o=)
3: lh0Ymr_ga0779X3_Cx26imTai5c.roa (hash: KAwIiW82rtUV/DIsKOEYKgQfn7noiC8wAVVTIRXrLCk=)
4: sQVxZ_lbDcaGAO6GQ4Uax3TrnbA.roa (hash: NBxjFtKEwZR8bN/MCO3rMHIc0Pkb+5FRotafl/NdAVw=)
5: ySpicQatPy5iHCLP1veD0rDhvRU.roa (hash: y3lstPEKv9L5HhDFlk02HVUCo0C3eJ06Z+uYgaJZhhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:46:9b:9f:1f:03:f3:b9:49:0f:1d:d7:48:ab:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Mar 9 05:00:25 2025 GMT
Not After : Mar 10 05:00:25 2025 GMT
Subject: CN=e82e0e9c7bcd823687c0b863648199a7bef2feee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:c3:34:fe:77:b4:b8:53:44:91:eb:38:95:
59:ba:e6:32:61:9d:66:86:10:f6:ca:f2:f5:39:47:
c1:f8:0b:aa:e0:6b:34:32:f7:1e:00:1c:f2:9a:d7:
98:90:ed:b1:32:1f:b1:b1:a4:60:fc:44:9b:59:a1:
02:6f:09:19:76:0e:4f:41:e2:17:f7:31:53:b1:ad:
59:1e:6d:5c:d4:ae:03:5c:41:92:f9:ab:55:72:2f:
6f:63:dd:47:fe:0b:07:f1:78:dc:fe:f4:f4:18:3b:
b3:d3:50:0f:98:1f:4c:2f:03:fb:0c:0d:01:3b:36:
0e:60:d3:c1:c1:6a:db:c0:96:e1:48:2a:91:f0:92:
18:4e:58:6b:f5:44:a7:a8:5b:34:7b:68:17:a7:7a:
a6:8f:0a:8a:1f:61:cb:73:93:30:52:26:a8:31:20:
cd:ce:90:df:02:8a:2f:3b:73:50:f6:73:31:1e:b2:
1f:d1:42:cd:e8:d8:d2:13:9b:ce:b4:0f:42:d7:ca:
a1:a6:f9:4e:6e:37:6b:96:43:8f:f5:8d:72:4f:c2:
71:8e:77:11:75:21:0b:8c:56:17:31:f0:ec:a9:64:
07:bc:71:3e:ef:b2:83:8b:61:0e:a1:ea:07:83:cd:
c6:52:6f:ea:7b:76:92:ee:7b:2c:0f:42:d7:ad:3a:
16:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2E:0E:9C:7B:CD:82:36:87:C0:B8:63:64:81:99:A7:BE:F2:FE:EE
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:82:be:3a:6e:92:0a:f6:9a:11:11:b7:ee:34:f1:ca:ba:7c:
c2:a4:7f:c3:82:49:27:82:04:1a:1c:4c:d6:fc:00:2f:7c:26:
90:99:e5:50:fb:ab:bd:b5:8e:50:1b:9b:5b:d0:f8:00:ac:e4:
e4:b6:9e:75:db:2a:37:33:ae:e1:18:d8:b0:b0:b0:1c:1d:df:
90:e0:fd:f5:ab:1f:cc:9c:eb:7f:b1:d3:10:e6:fe:8b:ca:67:
c0:44:b3:4a:50:d2:f5:40:b5:39:2a:f1:68:cc:d5:16:3d:10:
ca:3f:1b:01:a9:3d:77:23:68:65:95:56:db:36:3b:f1:d5:03:
91:94:39:ac:94:6f:d9:38:fa:ee:ae:d0:40:93:99:f2:58:0a:
8f:d0:13:8f:39:a9:0e:53:ba:38:38:1e:d0:c4:96:7b:6e:a5:
06:bc:a4:d1:cd:11:43:bd:db:d8:ec:23:07:62:ad:04:48:48:
cf:27:d1:2a:a6:b8:ea:78:72:93:0e:67:a9:06:fd:ff:2a:6f:
14:9d:c9:92:3c:9b:1b:bf:dc:c1:e7:0b:b7:11:c7:58:1b:21:
22:b6:85:87:e9:d3:8a:b8:63:3c:26:c5:e8:d3:cd:99:aa:95:
66:b1:0c:f1:54:a1:62:67:d8:3a:50:c3:2d:2f:c4:50:55:b1:
94:83:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:54:24 2025 by rpki-client