Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
File: zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft (raw, json)
Hash identifier: Qz77CIsGJgkxVxSidRqdACNdZOsuO8ylRbAbo1QDmRs=
Subject key identifier: 85:9D:C9:1B:40:93:08:EB:B0:42:15:51:45:F4:9A:48:3B:11:52:02
Authority key identifier: CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
Certificate issuer: /CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Certificate serial: 01964C3520E0B80C02AF7A8A4ACB2E1F050A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
Manifest number: 0531
Signing time: Sat 19 Apr 2025 04:01:12 +0000
Manifest this update: Sat 19 Apr 2025 04:01:12 +0000
Manifest next update: Sun 20 Apr 2025 04:01:12 +0000
Files and hashes: 1: 0QIFKfV7XQ0j_NX645lYUUtY2-o.roa (hash: 7LNZ2ckLWt9kDraFIFwQN/kugVtMuC1qB6bNkP46hLY=)
2: tkPBYkbqHBQBIn0BHV-X-SO1suM.roa (hash: UbAqMwZmfegZ1hqELkSkDP8x8h7o/IponAOjYN5W65Y=)
3: zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl (hash: ZgC/FLAxFHDXiW1d97qRQVX+bGD52m2Hup3XbSv6pH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:20:e0:b8:0c:02:af:7a:8a:4a:cb:2e:1f:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccefffc15a83a38bdda8cfe120c335267dce50f3
Validity
Not Before: Apr 19 04:01:12 2025 GMT
Not After : Apr 20 04:01:12 2025 GMT
Subject: CN=859dc91b409308ebb042155145f49a483b115202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:06:03:92:ad:34:e6:f6:39:1b:29:7a:c1:
79:56:94:b9:21:1b:e9:8f:c1:1c:62:e1:28:9c:72:
f7:eb:37:ef:55:81:a3:0b:9a:c2:dd:19:4e:36:c9:
2a:2e:92:fb:ed:e1:9f:53:44:0a:72:5d:46:48:73:
0c:3b:72:5d:0b:c9:f0:0d:a3:6a:ba:b9:b8:bc:a7:
e5:1a:71:02:66:09:14:e6:c7:84:e5:e4:5c:37:cc:
e1:a5:f1:6a:a0:86:e1:79:e5:a0:26:cc:ba:4c:72:
9e:14:c7:61:9a:c2:7c:56:ec:17:2c:e9:7d:fc:9d:
0f:e2:0c:7a:50:86:6b:f6:fc:1b:d8:80:cb:84:00:
a5:2f:0a:92:23:1e:de:88:cc:80:fe:cf:ab:ca:64:
da:67:e9:87:50:94:ff:d4:fb:f2:2f:c2:c7:4b:92:
2b:96:01:fb:db:c6:7c:f2:34:98:36:8b:c4:03:ec:
c2:1f:1f:98:81:60:9d:c4:1a:1f:d3:8e:51:21:9a:
aa:da:87:b2:3b:95:df:19:67:cb:67:71:82:12:59:
c7:42:79:75:f2:41:58:3a:14:0c:38:2b:00:7b:6e:
89:9c:73:8f:dc:d7:46:ce:7c:88:d8:b0:23:43:59:
fe:0e:26:b0:26:9a:10:6f:3e:52:53:b6:b8:e6:c2:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9D:C9:1B:40:93:08:EB:B0:42:15:51:45:F4:9A:48:3B:11:52:02
X509v3 Authority Key Identifier:
keyid:CC:EF:FF:C1:5A:83:A3:8B:DD:A8:CF:E1:20:C3:35:26:7D:CE:50:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zO__wVqDo4vdqM_hIMM1Jn3OUPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/cfd488-a25d-439a-bd17-4beb5dff1701/1/zO__wVqDo4vdqM_hIMM1Jn3OUPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1f:47:f3:54:96:0a:21:5c:9d:fd:09:f8:ff:96:4a:d3:1a:
f6:8b:6e:04:54:ce:f2:17:01:50:de:21:28:b4:35:e9:bd:30:
24:f3:59:ba:c1:77:e3:a3:85:dc:d8:9d:44:dc:50:60:54:b7:
7c:8b:ba:ef:b0:5b:93:3a:25:60:ae:5d:de:08:ef:39:19:5d:
65:de:07:aa:dc:fb:8b:b0:84:f5:b6:b6:0e:4c:fc:45:4b:1e:
10:5a:e5:45:ce:4d:3a:d7:f6:74:11:08:4a:de:2d:88:1b:84:
ea:b7:d8:9c:79:33:c9:1d:91:4a:b4:93:c1:c6:88:50:7b:c7:
8d:92:b5:ce:66:38:68:ec:97:41:1a:63:2e:be:7b:e3:c4:80:
6c:77:48:0a:15:f5:b6:46:a6:74:69:20:9d:9f:e2:ac:e3:14:
63:af:13:18:1f:2d:d6:83:97:25:9f:72:5c:ac:16:c9:d3:07:
83:20:fa:c4:02:40:32:94:a6:d3:ff:84:34:f7:fd:23:36:13:
6f:6c:bc:92:f3:b0:71:43:41:ff:89:35:95:3b:5b:1b:45:2d:
b8:8e:f3:ea:91:6f:f9:7e:b6:18:dd:bf:31:ec:4c:c3:44:f4:
a4:36:9f:2f:98:e1:60:d5:fe:93:1c:de:9d:c0:79:b7:25:bf:
cf:c0:dc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:26 2025 by rpki-client