Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.mft (raw, json)
Hash identifier: SlPN+iLMEhzH29LN58Vn5hmIjh4dfSlKCIpXd7+yJ/s=
Subject key identifier: E1:29:63:6B:69:66:5C:D9:BD:DC:BE:A2:BE:91:7A:4F:ED:9A:A8:52
Authority key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Certificate issuer: /CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Certificate serial: 01965500816BD482DDD420C5D2EBCE71E380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
Manifest number: 09B5
Signing time: Sun 20 Apr 2025 21:00:18 +0000
Manifest this update: Sun 20 Apr 2025 21:00:18 +0000
Manifest next update: Mon 21 Apr 2025 21:00:18 +0000
Files and hashes: 1: 7Z7IzpBHNDRFWYLe_OokcTNbBnw.roa (hash: 24No6BP2DTZdRjBSm6KFYcGax0GtKenfx9uqKb2W2tw=)
2: OAC5V3ngkZFG4cbcfwTqgC0RbUw.roa (hash: amgbjuIRYLpnsd8z61aY9wLmq9odfVbwcJCZF+luhjo=)
3: ZmA0ymoWu9AUSr31zyRY-WixWJw.crl (hash: KVHL1DEGGOlaMoRgALLoIqQBNsgnkKcThECnyylziwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:81:6b:d4:82:dd:d4:20:c5:d2:eb:ce:71:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Validity
Not Before: Apr 20 21:00:18 2025 GMT
Not After : Apr 21 21:00:18 2025 GMT
Subject: CN=e129636b69665cd9bddcbea2be917a4fed9aa852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:65:66:94:dd:17:15:3e:28:46:c0:5a:d2:
44:46:23:4c:83:20:2c:59:36:d5:ef:8d:cb:db:81:
02:6b:a8:29:24:5a:cb:0f:07:ed:ff:75:90:a6:6c:
d7:f4:bc:87:27:03:9b:28:a6:e7:63:72:f3:ec:78:
bc:a0:1c:8e:4f:c5:2e:82:7d:d9:aa:0e:d9:37:ec:
a9:50:85:8a:8c:30:49:cf:d4:b8:fe:a8:4e:94:d0:
2c:3d:09:36:ba:2a:de:5e:f1:0e:97:86:c9:c2:71:
bc:7c:52:53:3b:d3:b5:16:d6:4b:75:15:c6:2f:93:
9e:85:b3:97:1f:4e:cb:27:e8:81:70:06:48:a8:2c:
ea:35:7d:03:22:32:17:8c:7a:60:a7:68:49:1d:3f:
7e:26:32:d6:10:d5:cd:dd:24:b7:68:ba:24:73:5e:
a3:3a:68:9e:e0:97:77:e8:7c:92:ac:f0:8c:6a:8f:
4b:ca:3f:44:7f:e4:93:35:b0:e2:15:cc:76:90:ad:
d1:b8:7c:2d:44:dc:1c:dc:a5:22:30:d2:6d:c1:d0:
1d:7d:f0:7b:9e:7b:af:8c:41:95:ea:70:c8:3f:f5:
f7:9d:b7:24:13:15:15:b0:6a:15:45:55:85:87:45:
e3:01:01:47:19:59:d6:cd:2c:c7:53:0c:af:ea:74:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:29:63:6B:69:66:5C:D9:BD:DC:BE:A2:BE:91:7A:4F:ED:9A:A8:52
X509v3 Authority Key Identifier:
keyid:66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:6a:9e:9f:2f:aa:90:ca:50:99:bb:6f:e3:6f:9c:d3:53:
f3:c1:cc:5a:8e:bc:15:40:46:87:82:08:a8:c8:b4:5c:cb:01:
b7:78:d8:c1:0f:5e:e3:1b:b8:fe:17:37:e0:4c:40:67:68:ba:
f8:88:00:b0:5a:f5:86:b0:e9:c1:c4:00:e7:59:74:87:5f:4f:
b4:31:af:e2:22:74:50:1a:92:1d:6c:8c:e4:6d:ff:8e:82:78:
b6:56:4d:e0:14:1c:af:54:ee:91:ac:bd:88:54:63:9f:8b:70:
0d:6a:82:d0:4c:b8:cf:41:13:bb:84:73:55:f3:d2:24:8a:e2:
ab:dc:89:72:3e:56:e0:20:64:14:81:4e:20:e7:b5:c9:c3:21:
b6:47:72:f5:e0:44:3b:f7:27:04:71:1c:3c:0a:08:51:38:1f:
82:da:c3:b6:1f:0b:74:5d:8d:a4:02:13:4a:0c:54:8a:ff:5f:
44:94:32:0f:c2:88:35:f9:b6:b4:94:aa:a8:6c:24:b5:08:c6:
db:73:b6:ad:c6:e8:ab:44:5d:45:5e:81:d5:5f:4f:90:c3:61:
4d:34:26:06:74:16:07:ec:f9:54:f9:88:c4:ee:23:6d:fb:21:
4a:b5:52:77:6e:aa:8f:e5:2b:57:2e:1e:6b:4e:d6:e1:01:3a:
06:5d:9d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:22 2025 by rpki-client