Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: Jtl3lJSqZZ4ScgPDi04C6s67G6HeHkFL57s9hYLQleU=
Subject key identifier: 10:C8:3E:C3:D5:C4:75:8F:C6:63:BC:9F:BA:24:12:4B:8B:C2:AB:B6
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 01963FC2BBB8B350402B721351B4DA7BE81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 120F
Signing time: Wed 16 Apr 2025 18:00:48 +0000
Manifest this update: Wed 16 Apr 2025 18:00:48 +0000
Manifest next update: Thu 17 Apr 2025 18:00:48 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: LdAQUw6qNLrf5lsteyaOrf2tod6XINw3TddMPnMJN9c=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:bb:b8:b3:50:40:2b:72:13:51:b4:da:7b:e8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Apr 16 18:00:48 2025 GMT
Not After : Apr 17 18:00:48 2025 GMT
Subject: CN=10c83ec3d5c4758fc663bc9fba24124b8bc2abb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:42:f4:18:4d:69:c8:29:98:d8:59:f2:b6:
f2:06:da:59:df:1b:7e:1c:03:12:59:73:45:20:0a:
89:17:d3:62:c8:49:c1:41:5f:03:77:5e:dc:4a:c4:
7a:4f:2a:98:ce:44:6f:e2:d9:d0:3a:5f:68:0b:0b:
58:b0:86:f8:1d:08:99:20:b9:ce:78:26:70:2a:cd:
53:9c:04:cb:b9:b1:2e:65:5a:b1:5a:5e:0d:87:c3:
cf:2c:38:d0:8e:f1:71:86:3a:c0:46:78:62:58:ca:
1b:ec:3e:42:db:f5:48:77:f7:73:a5:f4:65:0d:d2:
81:42:3d:66:2b:25:8f:0c:7b:07:ed:21:fc:44:a2:
de:63:8d:12:0c:fc:0a:b8:81:2d:e9:46:c4:1b:95:
43:2f:f6:ab:f8:ad:9c:69:d6:c7:85:e3:85:5c:96:
76:f4:4c:e2:e1:b6:5b:da:c4:82:a2:8a:79:ea:30:
f1:4d:2b:fa:3c:18:94:18:b1:08:65:8e:95:5a:29:
9f:07:45:c3:2e:4d:ce:ab:7e:84:ea:6e:9a:18:c4:
0f:85:cb:1c:c6:7a:3d:0d:a8:fd:20:a2:9b:48:92:
8f:dd:b9:36:0f:23:48:6f:83:3c:80:7d:a2:21:c5:
b4:08:12:c1:a0:e7:f9:68:fc:35:c6:dc:8d:e3:8f:
5f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C8:3E:C3:D5:C4:75:8F:C6:63:BC:9F:BA:24:12:4B:8B:C2:AB:B6
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:96:dc:2a:59:83:fb:5f:18:6f:b7:69:c5:7a:f3:8d:4e:b8:
5a:f7:da:1e:29:97:3f:2e:ac:50:4d:74:e5:23:52:fc:03:f7:
6b:a2:7b:60:99:3b:78:30:8b:5d:37:6b:76:0b:87:32:06:42:
c6:b0:02:80:9b:d9:80:72:04:24:64:0b:74:90:f0:3e:f0:6b:
01:33:61:f7:28:06:ee:7f:16:2d:69:92:13:c0:87:17:f6:3c:
2a:38:b7:21:71:17:14:4d:0c:aa:d4:e7:c6:28:be:24:ba:9b:
8a:34:dd:7c:bb:c2:37:38:74:97:ce:bc:a1:e3:82:27:69:ec:
71:7d:05:75:2b:2d:7f:5a:eb:6a:be:c6:59:42:dc:5f:2f:8c:
7e:5b:6a:d5:d3:72:79:b0:9e:cd:3b:81:ab:32:e5:79:c8:dc:
69:30:cd:2a:7b:7f:80:86:dd:a8:64:38:b6:d2:d4:e5:25:1d:
43:c3:96:af:49:4a:50:36:41:95:f2:30:f1:de:4c:4c:08:41:
cc:33:54:20:86:ea:bd:54:a0:fe:76:dd:c1:38:2d:a5:12:25:
09:55:62:40:15:87:1a:d8:6f:3d:e9:20:6e:23:6f:ae:33:1c:
e1:ad:7e:17:15:d7:de:d8:76:62:dc:f1:8f:f4:c1:d0:4c:74:
c4:52:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:49:37 2025 by rpki-client