Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: /H3sjdG4BxsdKHCI2th4Jevzd016pfJOlE1o/txO+Ts=
Subject key identifier: 29:68:55:96:95:14:20:04:E1:93:2E:C0:C2:78:B6:50:1D:EE:4B:9E
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 019630F5344F0B7AEE679153FE6BFF340BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 1192
Signing time: Sun 13 Apr 2025 21:01:38 +0000
Manifest this update: Sun 13 Apr 2025 21:01:38 +0000
Manifest next update: Mon 14 Apr 2025 21:01:38 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: /wb6nS4vbk2xQOAlHCAytk4ZncS9xAQnlg4PNMgkOP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:f5:34:4f:0b:7a:ee:67:91:53:fe:6b:ff:34:0b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Apr 13 21:01:38 2025 GMT
Not After : Apr 14 21:01:38 2025 GMT
Subject: CN=2968559695142004e1932ec0c278b6501dee4b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:37:09:a5:b9:2a:4a:8b:e2:ac:a3:bf:f8:
29:45:c5:60:75:9b:85:0e:d9:68:b5:fc:81:81:8b:
ea:d0:9d:70:f9:d0:b6:27:9f:98:53:9d:99:38:7e:
7e:29:d3:a7:16:17:a5:5b:a7:95:38:1b:cf:82:7b:
55:11:96:4e:0d:a9:7a:d4:a9:0c:bb:6d:57:a9:99:
53:cd:6c:0a:3a:d8:e1:79:e3:e8:71:28:56:19:c6:
65:31:83:85:bf:1c:b5:00:41:1b:3c:12:af:47:99:
8a:06:43:e8:61:e0:57:e1:4f:d9:96:fb:0d:51:16:
cc:74:5d:d7:f7:54:23:48:a6:4d:9b:54:23:a6:00:
5e:9b:5a:53:9b:41:2e:05:31:74:63:50:43:e0:27:
bd:75:73:35:6c:2f:c2:ac:ae:f7:57:72:e7:30:bb:
55:61:af:ef:b6:95:8a:9b:2a:03:19:5f:e5:e5:0b:
a5:c5:be:26:49:e7:c4:98:ad:d7:41:fe:f0:c1:de:
46:f8:60:56:63:a0:58:57:07:99:51:79:b5:b3:b4:
bf:4e:5b:36:51:4f:6c:26:4b:92:2b:d1:dd:bc:3c:
8f:8d:ba:a3:10:79:e8:69:92:b8:fc:b4:70:25:72:
3e:e5:f4:fd:8b:39:23:61:9e:f5:5a:01:ac:e6:4f:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:55:96:95:14:20:04:E1:93:2E:C0:C2:78:B6:50:1D:EE:4B:9E
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:66:ee:2b:62:85:99:4e:54:57:0f:2c:7f:1a:8d:de:90:bf:
4d:6d:b2:1f:f9:09:97:e8:62:32:8b:d0:61:4a:c8:a5:01:fd:
fb:63:9e:d6:1d:79:e7:be:82:a3:d7:17:25:d3:30:76:18:df:
0f:63:d4:aa:28:7a:49:ff:35:8b:6e:7e:d4:1b:c8:f7:07:2f:
8f:41:80:99:90:81:2b:68:05:b7:aa:d7:9a:e9:65:d4:64:ef:
f0:40:ca:b4:e3:b1:bc:f0:a5:78:79:60:e4:d6:a4:b9:59:fd:
91:fc:58:97:43:b9:f3:27:c5:07:45:22:f2:88:db:db:bc:d9:
1b:87:0e:3c:e4:35:9f:02:ce:d6:10:0c:27:02:3b:32:48:aa:
43:67:0e:89:d0:ac:19:19:a7:43:67:93:0e:7d:fc:3b:16:4f:
40:a2:b0:99:b3:5f:0d:1f:cc:3b:c3:ba:aa:60:e2:e6:3d:af:
14:66:54:55:91:d9:a5:b7:cb:3e:7d:2e:e4:81:ac:76:77:56:
32:37:15:22:6a:70:88:6c:4b:75:6b:3d:3a:e7:d1:c6:08:2a:
6e:42:77:0e:20:8c:80:2f:d0:5a:ed:1d:11:ee:d2:4e:af:72:
eb:d7:16:90:c1:05:07:cf:d2:4d:d5:df:8c:0f:5d:94:84:2b:
f0:f6:e9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 02:34:32 2025 by rpki-client