Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
File: ZctPbNhIn93Rc5cKDvRNThVHpAU.mft (raw, json)
Hash identifier: 5UVGj1hm0HQ3WpX+4+Zg+GdW68emgbsiZQkXbsUPCMo=
Subject key identifier: 0D:90:82:56:DF:64:ED:29:6A:71:96:79:90:64:EC:5A:71:88:0A:C3
Authority key identifier: 65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
Certificate issuer: /CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Certificate serial: 0196561346B5CF06D3F3072A1250036ACEAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
Manifest number: 0C65
Signing time: Mon 21 Apr 2025 02:00:25 +0000
Manifest this update: Mon 21 Apr 2025 02:00:25 +0000
Manifest next update: Tue 22 Apr 2025 02:00:25 +0000
Files and hashes: 1: 23ACakt78guGwZL3RTi3BKpWsN0.roa (hash: ghjCo7Sw3s2bis0gLmZ8QzY5m7KOd3dJNA0mX218fws=)
2: ZctPbNhIn93Rc5cKDvRNThVHpAU.crl (hash: m4a1JUN60m1I9bJipjqnSoG6SEMcMT7HK2i0x5bSkcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:46:b5:cf:06:d3:f3:07:2a:12:50:03:6a:ce:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65cb4f6cd8489fddd173970a0ef44d4e1547a405
Validity
Not Before: Apr 21 02:00:25 2025 GMT
Not After : Apr 22 02:00:25 2025 GMT
Subject: CN=0d908256df64ed296a7196799064ec5a71880ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:8a:f3:31:90:55:dd:4c:5b:df:8b:e8:05:
ed:86:38:72:ba:dc:12:17:58:a9:42:58:f3:04:91:
0a:8f:d8:0a:70:d6:21:8a:e4:03:c5:b9:ae:68:f2:
64:b1:d6:ad:df:2e:70:b2:3f:87:e8:f7:3a:d8:89:
40:e0:c7:f3:9a:57:06:d9:c5:ca:6e:61:e1:4a:b6:
5f:b5:7c:e5:ff:32:7f:59:6f:21:77:f9:1f:03:da:
85:46:f8:55:ec:98:2e:34:58:2c:a3:11:44:99:fe:
c6:fb:52:a9:f4:d7:18:4b:d7:29:d8:fd:63:10:a1:
a7:06:b8:e1:7a:b2:6b:f8:87:cb:03:67:62:2e:34:
70:08:fa:97:f4:9b:88:5a:8c:40:25:0b:91:31:b7:
a7:f2:ae:9f:6d:31:62:28:34:4a:5e:c6:09:22:46:
19:94:16:8d:62:82:5a:99:35:48:6b:36:84:72:d3:
23:45:bc:d2:e0:94:b7:36:1c:15:5f:22:0f:48:75:
bb:7a:59:39:aa:e6:4b:24:2c:fe:36:1e:70:cf:83:
bd:3a:cb:84:a3:be:08:c1:4b:ff:cd:40:e8:2d:e7:
83:35:6d:b9:2f:72:3e:37:f1:af:94:32:52:ce:a2:
bd:6e:82:69:cb:d1:ce:fe:7b:a3:71:fc:59:11:2f:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:82:56:DF:64:ED:29:6A:71:96:79:90:64:EC:5A:71:88:0A:C3
X509v3 Authority Key Identifier:
keyid:65:CB:4F:6C:D8:48:9F:DD:D1:73:97:0A:0E:F4:4D:4E:15:47:A4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZctPbNhIn93Rc5cKDvRNThVHpAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/736a4a-39e0-4119-b4cb-082d924c2f33/1/ZctPbNhIn93Rc5cKDvRNThVHpAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c8:37:13:ea:e7:72:19:3e:fa:4e:c8:a3:53:09:f6:44:09:
ce:bf:17:84:d7:58:24:ef:c9:a9:bd:1f:05:d0:cd:28:d8:62:
0f:75:9d:09:84:1f:a4:d9:cf:d6:08:85:33:ac:ab:97:97:35:
a6:9b:44:75:8d:b5:56:08:e0:e7:7c:2b:28:c3:6d:61:56:f3:
c7:b3:37:94:6b:a7:4c:b9:7d:7f:9f:47:40:77:0d:d1:51:b5:
dc:46:0b:c5:4c:f6:eb:b0:45:97:42:36:59:d3:d7:94:3a:c9:
ca:f7:96:b3:35:17:15:a4:29:00:a5:93:45:85:ea:95:99:f3:
5b:9d:d8:80:cc:42:1e:27:ff:29:d1:1f:94:36:03:40:de:27:
50:31:5d:38:26:14:0e:68:de:8f:a3:b6:d8:9d:d5:73:c9:2a:
ad:b7:6c:ca:f6:a4:3b:06:ca:76:7b:c7:7b:d1:a7:22:cd:93:
19:3f:eb:08:8c:56:38:55:3e:01:53:3c:39:09:cf:80:f1:83:
c5:d1:79:02:d5:df:90:f2:87:4e:87:db:ec:80:50:9b:f1:24:
a7:01:d3:57:bc:8e:20:24:04:6d:53:d4:d1:cc:2c:89:b1:3a:
3d:8a:e7:4b:62:28:43:ba:7f:5a:d9:7c:d2:88:64:e2:c1:4a:
76:09:89:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:30 2025 by rpki-client