Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
File: ZPpm-4SngaBYT9DRwt85vaR2BRk.mft (raw, json)
Hash identifier: 2EtHJzkL5TxuKAR5y/Ih0oBZGycbwWrjHOwG8O4VZ0A=
Subject key identifier: 30:3E:0C:8E:79:AA:B3:E8:50:62:CE:B8:E7:5E:AD:A9:B1:73:6B:AB
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019613FD08B918EE5A1F4C4D4E8899A1D150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
Manifest number: 150B
Signing time: Tue 08 Apr 2025 06:01:11 +0000
Manifest this update: Tue 08 Apr 2025 06:01:11 +0000
Manifest next update: Wed 09 Apr 2025 06:01:11 +0000
Files and hashes: 1: GaKfTqsXTBbzB0l6PPjCOtbieE8.roa (hash: bGjsSkVxtFTtg2bHcJH2NQE4duud/iaOMe/znbQ8Z78=)
2: ZPpm-4SngaBYT9DRwt85vaR2BRk.crl (hash: hLy/PtGiAjfDAg8sDLBBI8OBm6C4zKGlO3JlhVU2de0=)
3: eN0YwTsvKhVj4VK2vqfdGdQuG6c.roa (hash: 0pMOohyPI4AU8urMbNdYs9eGhiIKMo2+HPTFBCTefiE=)
4: vZCiwKajLAj94g_r1KS02gxe_XQ.roa (hash: /9FsroII+PnZV3EcII02TBLCdlztOBLTex1BPR/WLFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:fd:08:b9:18:ee:5a:1f:4c:4d:4e:88:99:a1:d1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Apr 8 06:01:11 2025 GMT
Not After : Apr 9 06:01:11 2025 GMT
Subject: CN=303e0c8e79aab3e85062ceb8e75eada9b1736bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:09:84:a3:a2:a4:1a:d6:9f:f9:45:de:07:1b:
b3:c0:fa:9e:82:c6:0e:34:e0:35:df:c2:9c:1a:d5:
75:7e:17:f5:bf:9c:b3:25:d4:cd:77:f0:cd:d1:a7:
96:57:6d:1f:ca:19:e7:7a:35:c5:ce:8e:1b:f0:00:
6e:81:ec:eb:06:9a:13:97:61:99:e6:76:45:8f:10:
13:78:ee:40:02:94:c7:25:ad:8e:70:c4:cc:3a:00:
c0:04:1b:0e:24:96:b1:64:33:1d:bd:85:92:81:28:
fa:51:25:3d:cc:58:3c:aa:ed:e1:d2:00:b6:b4:58:
11:ae:e1:8e:c5:c4:1a:ce:c7:81:51:f0:b4:15:84:
e6:3a:eb:de:7f:03:6d:06:28:6a:b3:ff:0d:0d:81:
3e:ac:01:a1:b9:63:45:3d:a8:55:b5:8c:52:25:71:
db:15:58:4b:38:49:57:fd:fd:f8:c1:e7:83:39:ac:
58:37:42:0e:d9:4f:c8:87:5a:03:7c:b5:a4:4c:88:
ca:9e:02:fc:d9:90:6e:65:fa:18:8c:d0:bc:ce:e4:
83:67:cd:9c:68:c6:20:61:c0:88:8b:83:ba:5c:f6:
02:1f:ce:fe:55:b9:08:cd:95:bd:5a:1e:65:0b:2e:
10:88:f6:cb:0b:df:32:9c:67:4f:87:e3:cb:dd:9d:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3E:0C:8E:79:AA:B3:E8:50:62:CE:B8:E7:5E:AD:A9:B1:73:6B:AB
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:db:0e:bd:5e:27:d3:07:c5:7d:9d:72:df:ee:79:f0:06:02:
84:c4:47:f9:01:49:a1:a6:b7:d5:0a:77:f5:57:4f:1d:ab:1b:
19:88:39:6b:5a:42:4b:c8:da:e1:0e:fc:6d:ff:74:d7:12:d0:
e0:30:33:54:a1:64:35:44:ed:d1:fb:57:42:c8:f2:3f:18:0b:
43:db:29:4f:b7:e1:ae:db:f4:bb:12:07:3c:90:e7:b4:97:02:
4c:c2:8b:38:eb:87:9f:7e:0e:8d:ca:19:53:6e:22:45:60:89:
9d:4a:c8:62:26:02:f6:ba:02:5d:c7:8a:e0:e6:df:78:24:e7:
15:a6:98:ec:8c:28:75:62:30:9c:6f:7f:90:15:ca:4c:01:d3:
77:e9:35:3a:69:22:75:0f:53:a0:b2:58:d0:1b:3e:c2:f4:fd:
a7:e5:0e:d7:83:ba:ba:35:4d:de:00:9e:cd:cb:a1:ed:b9:0f:
00:a3:7f:ab:cc:f1:a4:f4:3b:3f:2e:cc:c8:22:b7:45:2c:6d:
2f:03:18:70:ab:e7:d1:f6:f1:27:50:ac:31:08:ed:e3:ef:f0:
b8:d4:76:a2:45:da:2d:38:e0:cb:1f:bc:42:c7:4b:eb:b4:6b:
f1:fd:f3:ee:e5:90:d2:1c:75:64:17:1a:5c:32:36:94:3f:d8:
3f:25:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:22:10 2025 by rpki-client