Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File: zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier: k0j3Z9EuJ8ejyYH+IBWn9G+6AxQkGL8+kVnAXhzZwc0=
Subject key identifier: 5A:8C:82:D1:98:6E:A7:0E:6B:3E:49:47:10:97:E0:67:AA:44:8F:49
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 01962972305EE5212405AEB103926DA917C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number: 150F
Signing time: Sat 12 Apr 2025 10:01:11 +0000
Manifest this update: Sat 12 Apr 2025 10:01:11 +0000
Manifest next update: Sun 13 Apr 2025 10:01:11 +0000
Files and hashes: 1: 8NlM0Eh21zAG-7ltjEmP58d0YPg.roa (hash: PQRwffU62WEskkTT7FaZAKFEazLHbNjwJxxiFSD+b+o=)
2: BhPT9ct0QQhlS6BTxHGKvPWfHxs.roa (hash: tck+K1FVcy2vP5iiS6BlAFqWfmvUmMWsdXvC/gdh9iQ=)
3: Ove3y5qjQ6KJduHbyBUEf3crDrU.roa (hash: Yg8G2jPObXRRMkd9TbBnulOGLBdfFwyyifHYbJD+bvI=)
4: U_xhzHfeoz3UECSz77CSeBreJSw.roa (hash: lqFJXg3vKAvQ4xE2hhrJv1eYOgDHS/MO2VODnSDgN6o=)
5: aGKbrC-2TFRuIRSo1mubaaBlJwo.roa (hash: q6Z4oiV5clUVLrYMvRMuNkNUlVbH7YullaT3MBgUCzY=)
6: sdklJRyXBMo5vnAMtJAE76-VseA.roa (hash: PMzYVxP4SD61xcc+iiMJiAjcEetP/Z1JcExC2sCVIX4=)
7: xoh9FTAHs_hmP4K1CkQuj-ry8Ko.roa (hash: VOMsRj+nLvAw+FZepArV/G+EZzcMGSLvjHlntZp93WA=)
8: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: ILGGAINb3bSZL9LNogPfxO7YCt5PS3IIm6uDzvFNaZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:30:5e:e5:21:24:05:ae:b1:03:92:6d:a9:17:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Apr 12 10:01:11 2025 GMT
Not After : Apr 13 10:01:11 2025 GMT
Subject: CN=5a8c82d1986ea70e6b3e49471097e067aa448f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:e8:ea:6a:04:2f:5b:30:11:74:42:1c:fa:
8c:b2:c3:9e:99:d3:5e:d8:1a:de:eb:60:74:d3:6b:
a6:c3:91:f5:e3:60:79:80:57:4c:ac:73:8c:df:a1:
f2:f5:3f:b0:1b:82:9f:09:cd:ba:80:d0:8e:f4:5f:
b8:f3:a3:9f:06:9c:c8:13:83:aa:81:a2:d1:98:3c:
4a:3f:83:67:b9:06:35:d4:1f:9f:fe:c9:a3:79:ea:
ce:dd:cf:87:a4:b1:4d:fd:d7:ce:e6:87:91:d4:48:
bd:2e:66:ea:49:a1:ad:f2:9f:d8:9d:99:5b:2a:8f:
aa:31:af:d0:bd:f3:d2:07:35:ba:e2:e1:5a:0a:7f:
89:fb:d8:b4:ce:ca:4f:45:62:87:75:5b:47:10:1f:
46:3f:d5:76:2f:54:28:7b:03:f1:8c:c5:20:f2:e0:
8a:63:94:47:ff:25:30:d5:ed:72:1f:c3:07:36:39:
b7:3d:f1:f9:e3:00:31:ea:17:87:f8:4d:1f:88:29:
1e:0d:8b:fd:49:bd:bc:66:eb:0e:50:7b:74:c8:0d:
96:51:cc:f2:89:7a:4d:92:9d:cb:3a:65:93:d0:38:
f9:ae:04:94:46:c1:c0:33:da:5a:6f:d4:26:65:b4:
c0:9c:13:18:d6:f7:b9:f1:3e:d8:89:47:ad:31:f8:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:82:D1:98:6E:A7:0E:6B:3E:49:47:10:97:E0:67:AA:44:8F:49
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:dd:41:ab:b1:b9:30:24:62:b4:84:87:5b:b5:2c:b2:df:af:
30:a5:db:4c:99:99:a6:ca:ae:4a:50:24:34:72:4a:54:15:36:
af:87:a0:1d:ff:a3:81:4e:02:35:75:9e:fe:70:28:ad:24:49:
c4:e6:b2:77:4c:30:8c:22:9a:19:28:62:f5:a5:96:35:e4:a8:
44:ed:68:2f:6a:b8:62:d9:31:24:27:20:72:34:c5:a4:e4:92:
b3:68:b9:67:80:3c:cb:34:ca:3e:fa:09:b0:64:c2:f0:42:36:
12:98:4b:2a:0b:73:ec:a0:9a:54:1d:dc:c1:b4:c9:92:0d:6e:
75:f0:58:d8:33:c8:78:03:0d:58:66:8b:fc:61:c3:83:56:10:
46:da:05:a4:6d:e2:ad:eb:d1:bc:e5:5d:85:d3:5b:a2:d7:11:
5c:2a:00:f4:b9:78:6e:0c:75:ae:85:c1:e5:5c:1b:8e:f8:00:
72:6d:fa:db:33:52:76:a0:3e:01:6e:c7:29:21:9f:5e:21:5d:
17:42:30:0b:23:b9:91:9a:97:63:9a:c0:2f:72:d0:a3:52:da:
63:df:f9:c2:58:b9:eb:1d:64:1a:1b:18:0b:76:c6:c2:36:ad:
bc:ef:af:36:87:4c:cd:e8:64:85:26:78:17:c4:ab:48:f4:71:
82:17:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:36:54 2025 by rpki-client