Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: c5tUDD82I4m6+zdAThp/X5GN6kyGZOMRZKnLb5Hvc5E=
Subject key identifier: F1:66:CE:73:22:B2:CD:2A:18:25:75:3E:EF:8D:E7:8C:6D:78:61:7B
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 01964E90DC14FED18A373B302407D9BF9641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 15:00:38 +0000
Manifest this update: Sat 19 Apr 2025 15:00:38 +0000
Manifest next update: Sun 20 Apr 2025 15:00:38 +0000
Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: ra4J/Klp/++9YFO+461ygQEY3uD2SXREQZPmVGozkRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:dc:14:fe:d1:8a:37:3b:30:24:07:d9:bf:96:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: Apr 19 15:00:38 2025 GMT
Not After : Apr 20 15:00:38 2025 GMT
Subject: CN=f166ce7322b2cd2a1825753eef8de78c6d78617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:d6:97:34:7d:8b:51:03:ec:8e:5a:48:9e:
d0:b4:9b:96:21:c2:ce:44:ad:ba:8b:21:99:26:2a:
1c:d6:30:34:10:95:40:52:9a:01:50:c6:19:11:04:
32:aa:e5:f7:f9:66:ce:44:68:3c:68:83:ec:0b:bc:
38:47:c3:cb:11:d7:74:af:ff:d2:d7:77:18:3f:55:
36:68:be:11:8d:7d:00:05:a3:89:64:86:0e:30:aa:
2e:73:7e:fb:f4:91:95:3a:8b:ed:84:38:0d:ce:bf:
3e:d5:b5:4b:fe:ef:d9:98:5d:d9:b1:9a:4f:bf:a5:
35:76:2c:2e:72:1e:d0:18:00:0f:d5:12:26:dd:eb:
61:fd:54:da:5a:a0:3b:34:15:8b:91:37:70:04:28:
c9:3c:15:11:a1:88:e5:c8:59:f8:96:8e:6c:43:0e:
76:91:16:c7:2b:21:c5:a5:11:a8:40:f6:af:16:0f:
62:81:6c:42:45:b2:20:6f:ca:6a:e6:cb:b0:87:91:
1d:32:0f:33:17:f7:1c:a3:2f:c5:bf:89:f1:ff:e6:
d3:f9:c9:88:86:39:4a:8e:4f:c9:47:1c:7f:f9:fb:
51:9d:f6:39:e3:f9:1f:01:06:bc:34:40:b9:51:4e:
e4:54:4b:dc:87:76:cb:59:ec:ea:0c:6e:51:1e:7f:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:66:CE:73:22:B2:CD:2A:18:25:75:3E:EF:8D:E7:8C:6D:78:61:7B
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:15:a0:34:d1:40:3d:1e:7b:a5:10:fc:a7:dd:9f:e4:ee:e6:
e4:a2:fc:29:4a:02:4a:e4:34:75:cc:ed:86:1b:e1:ed:1f:fd:
03:d1:43:e3:f9:d1:b8:15:87:a1:c1:ee:8c:e4:e0:42:bf:bc:
1b:d3:ec:4e:0b:67:0d:39:00:b8:ee:d4:2e:19:46:21:13:65:
65:ed:9f:24:b2:1f:10:60:b2:70:fe:d3:c3:c8:9a:73:97:ad:
29:02:ba:89:12:1c:d2:96:82:b8:b2:1e:6a:75:fc:de:62:f3:
4f:ab:24:c9:c3:65:57:0e:20:93:3c:f8:12:9b:b9:86:3c:f4:
8e:79:bd:bf:2f:7c:fb:af:bb:b6:ce:c5:dc:14:1d:43:82:b3:
e7:fc:c9:b9:9d:0b:ca:e8:cc:66:8b:8d:f1:42:d8:51:3c:85:
96:b4:51:4a:23:39:d3:29:b1:9d:75:cc:07:34:80:5e:4c:c6:
19:e3:a2:7e:9a:82:ed:6b:94:bc:fe:73:7d:09:9b:32:8f:68:
9a:83:99:61:fe:5a:80:a1:2a:30:90:6a:ef:71:c0:71:da:d4:
ea:e6:89:b8:be:60:6e:d6:d1:be:cc:12:82:ae:d0:74:78:a0:
c8:ed:c2:c1:da:51:48:41:90:ca:94:14:c4:d2:85:69:6d:08:
90:0f:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:05 2025 by rpki-client