Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: aXSv9NASZpKEP0kpzaOMB/DYMghqvDfz9qDIFuxxI1o=
Subject key identifier: B4:26:7B:D7:3E:30:78:09:8D:C9:89:8F:18:24:B5:22:A4:2E:21:84
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 01958C297C52933FC37DC45323A7477EF06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 21:01:23 +0000
Manifest this update: Wed 12 Mar 2025 21:01:23 +0000
Manifest next update: Thu 13 Mar 2025 21:01:23 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: bedMElbvLa3ynuxUtl5NF0Z6MrdVXMxYC6gLcLYejaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:7c:52:93:3f:c3:7d:c4:53:23:a7:47:7e:f0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Mar 12 21:01:23 2025 GMT
Not After : Mar 13 21:01:23 2025 GMT
Subject: CN=b4267bd73e3078098dc9898f1824b522a42e2184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:1e:60:8a:4e:05:fe:01:e8:e5:71:c6:87:
0b:be:6a:93:e0:b8:3b:e4:0e:8f:c3:87:09:ab:42:
63:13:22:06:4f:a8:b2:7e:a1:04:0a:d6:59:a4:7c:
7a:c7:ac:f5:01:30:bf:68:b4:87:09:22:93:1b:59:
e1:de:4f:8a:ff:50:df:86:dd:37:b6:33:19:27:d6:
4d:cd:5c:43:31:c7:59:e8:67:71:c5:92:61:24:a1:
5c:43:7a:7a:ae:5e:16:4c:de:20:2b:b0:88:99:92:
60:93:10:f0:82:ce:eb:58:c6:66:9e:30:99:04:33:
e5:71:a7:83:a5:95:cf:af:c3:c4:a5:0f:68:85:84:
af:84:33:86:f9:30:ad:db:46:4f:c4:75:33:9c:e6:
83:65:b3:c9:e0:05:3c:35:27:bd:44:c0:c5:da:48:
ad:3b:6b:08:d0:5a:d3:49:e9:a2:50:5f:b2:88:74:
76:57:ed:a5:e1:3d:81:96:7a:b4:cd:e0:6f:70:35:
61:16:21:c0:41:28:d1:bd:43:82:96:b0:5f:84:c9:
95:a7:57:d3:2a:11:a8:48:1a:70:c7:03:e1:ea:80:
6c:62:67:69:5b:84:16:ea:55:46:07:41:a8:91:17:
77:d2:09:d8:7a:b3:d4:ea:1e:83:5a:2a:10:b0:03:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:7B:D7:3E:30:78:09:8D:C9:89:8F:18:24:B5:22:A4:2E:21:84
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fd:07:2c:b3:4c:9d:b2:0d:59:f9:9d:af:fc:f5:a2:ed:49:
56:29:3c:f9:4e:c4:2b:02:cc:aa:61:95:33:e2:8f:b0:6b:19:
55:93:92:81:75:88:60:93:9d:93:ad:ac:5a:51:36:10:93:ed:
12:ab:a5:bc:06:ab:d0:51:8c:79:8f:a6:94:fa:31:41:17:fe:
75:c6:34:23:99:88:65:95:5b:3e:8c:7b:37:d1:06:b9:51:3c:
78:df:d2:e8:60:76:33:df:8c:1c:75:d8:8c:cc:af:85:ef:fa:
54:c7:c1:83:0e:bf:d0:7c:4b:bf:23:3b:77:18:ae:04:1f:a0:
bd:1c:49:c5:fa:d5:ed:8b:1d:9f:2e:b9:62:2e:ae:17:a1:51:
77:62:71:0c:42:dc:55:bf:e7:77:70:44:d1:68:b0:56:6d:c6:
36:b1:ad:e1:4c:93:71:49:f8:08:5e:1d:2e:f7:fd:8d:a6:98:
f6:67:5f:12:3c:58:74:6d:37:dd:a4:51:77:bc:f7:c7:35:0b:
7f:06:8a:b2:60:55:8f:a0:2f:31:c6:eb:f5:c5:0b:b9:17:4f:
fc:e7:4b:ab:a7:59:73:12:cd:5e:13:bd:68:51:14:46:34:c7:
2c:63:54:74:ac:ae:57:66:d2:05:58:ac:8f:c6:5c:aa:c0:f2:
79:60:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:20:47 2025 by rpki-client