Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier: oZItj7f5kIb5RrEeEeSAaqcUcj4rucS4ygz8+nnW6bg=
Subject key identifier: 7B:DC:89:BB:3C:8E:4C:67:55:DF:37:D5:70:BE:E7:EE:1D:89:5D:9F
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 019645FBBD0D0C5805D69C82B10F3560E0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number: 1225
Signing time: Thu 17 Apr 2025 23:00:47 +0000
Manifest this update: Thu 17 Apr 2025 23:00:47 +0000
Manifest next update: Fri 18 Apr 2025 23:00:47 +0000
Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: FPapZfAp1EX6l/5VPFLSuzoi2Vq7lkAhWg14EgWiqiU=)
2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:bd:0d:0c:58:05:d6:9c:82:b1:0f:35:60:e0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Apr 17 23:00:47 2025 GMT
Not After : Apr 18 23:00:47 2025 GMT
Subject: CN=7bdc89bb3c8e4c6755df37d570bee7ee1d895d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:bb:37:7c:6a:a6:7a:2b:e9:41:96:5d:0b:
16:bd:20:0b:6a:ff:c9:10:92:49:09:85:6b:1b:74:
ee:c3:ad:44:28:d1:ee:77:16:9c:1b:9b:9c:b7:f7:
a4:68:e5:e3:de:33:57:c2:0a:5e:dc:35:77:82:f0:
8e:cc:0c:99:81:76:30:65:be:03:8f:c4:1e:8d:71:
d3:b4:6f:69:4e:3e:c4:45:a9:6a:09:29:44:48:46:
ae:96:60:53:df:f7:c0:09:d1:e3:8d:e0:d8:fe:77:
27:7d:ca:a4:69:7f:2f:51:93:a0:b7:b7:c0:69:23:
76:c0:de:43:17:50:92:8d:7f:6d:ad:de:9c:04:49:
95:1a:e5:df:76:7b:83:95:a8:c1:bd:c4:af:18:63:
ac:38:9c:08:30:a5:1e:41:93:be:38:2a:93:3d:74:
71:a1:c2:54:5d:a6:59:af:b4:bd:31:f6:93:17:59:
cb:84:57:7e:dc:31:df:21:bb:25:49:3b:26:d0:59:
1c:f0:fe:ea:21:14:54:03:4f:24:7c:e9:81:db:05:
1f:ac:87:08:62:d6:58:53:73:7c:a8:0c:06:21:c6:
32:b0:e7:89:8f:f0:58:af:f0:ca:67:9a:ab:a2:69:
40:be:6c:72:2a:57:be:d2:53:8f:6b:d7:e9:a4:c4:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:89:BB:3C:8E:4C:67:55:DF:37:D5:70:BE:E7:EE:1D:89:5D:9F
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:70:c4:60:06:fc:f0:b7:88:a5:ad:58:41:00:03:26:7c:ab:
a8:18:7c:49:df:4b:d6:c7:c6:56:93:cf:b6:0e:e4:d0:78:1c:
ef:b4:d1:03:c2:1b:9b:b3:c9:45:63:b8:ca:8b:80:06:b9:47:
af:5d:35:08:df:4d:d1:41:9e:7f:7d:0b:6f:20:79:e5:4b:ed:
16:f1:dc:d0:aa:1d:02:89:98:e4:86:25:ad:b3:ef:ef:84:1f:
b6:86:b2:27:8d:4e:0c:73:89:55:73:43:b9:a8:d5:0e:a2:85:
98:0f:c9:ee:7c:f1:92:ff:2b:01:5e:80:50:42:05:2b:d6:be:
14:72:68:c5:38:eb:55:a2:0b:41:65:6d:3f:3a:ff:42:f5:91:
6b:ac:1f:be:59:9e:18:32:0e:ec:6e:33:f2:3b:4c:b2:ba:5b:
34:4d:72:e4:32:c7:5a:aa:6e:32:52:14:8e:97:d2:22:55:fc:
54:85:f0:32:ea:10:30:95:0d:bd:76:a7:e5:05:c2:24:a2:2b:
d4:e8:4c:73:61:5a:6e:df:99:7a:79:e9:06:a2:67:ab:17:d6:
2b:e8:a0:5a:8c:fd:ca:c8:ce:cf:de:6e:9c:91:93:7c:79:31:
50:97:50:17:03:2a:8d:1f:ee:0a:03:fb:2d:04:fb:61:38:46:
d0:f8:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:04:06 2025 by rpki-client