Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: gzy6Kpsa5R5M8yyTQas8EDmj2piW8u+drxaexkJ+qHc=
Subject key identifier: FF:3D:E7:F9:76:35:0E:1F:AD:39:47:6C:73:76:35:70:3F:3D:6D:9D
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 0196477BF89E4CE3D462BEF965423011AE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: ED
Signing time: Fri 18 Apr 2025 06:00:28 +0000
Manifest this update: Fri 18 Apr 2025 06:00:28 +0000
Manifest next update: Sat 19 Apr 2025 06:00:28 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: n0IMUlxMZc+XufmWrNVHxYW/Uc9LtAtbGb6kI7pVRkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:7b:f8:9e:4c:e3:d4:62:be:f9:65:42:30:11:ae:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Apr 18 06:00:28 2025 GMT
Not After : Apr 19 06:00:28 2025 GMT
Subject: CN=ff3de7f976350e1fad39476c737635703f3d6d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:c6:68:65:dd:ee:d3:28:f8:62:9d:9c:1a:
9b:db:55:3c:e6:f4:36:3f:0b:80:6e:ad:30:8b:b1:
71:2c:4e:70:7b:20:02:21:6e:68:2f:76:05:65:61:
c1:99:6d:1d:f5:95:88:71:59:e6:80:37:ef:df:8c:
27:2a:6a:d7:dd:e5:47:5f:af:ce:e0:a6:85:98:79:
8b:8a:43:51:79:8f:bb:2b:44:10:f6:96:ad:5e:24:
ba:b8:d2:4c:32:52:d4:60:79:b5:1c:34:4e:91:f1:
d9:d3:bd:fb:70:02:3e:23:3b:4d:d9:91:39:bb:e1:
e4:d2:f1:06:f8:31:f8:cc:f0:ec:ab:93:af:0c:e8:
d7:82:6d:38:b8:aa:7e:c7:33:84:8e:53:5a:5d:c7:
ad:39:08:d1:f3:55:c0:a1:47:a7:82:63:3e:62:b8:
ff:1c:d1:66:a0:96:56:d3:2a:fc:68:1a:93:f2:6a:
8b:51:65:21:b3:1c:67:73:fe:f7:8e:e0:a1:32:af:
73:99:28:6e:98:6f:f1:bb:84:87:a8:82:15:73:23:
28:10:50:a0:a8:93:03:61:82:5a:fe:b2:d1:30:6b:
73:ba:f3:86:1e:9a:8e:15:53:5d:80:c5:74:74:88:
74:3b:de:2c:6d:74:5e:11:29:e5:a2:e8:56:93:4a:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:E7:F9:76:35:0E:1F:AD:39:47:6C:73:76:35:70:3F:3D:6D:9D
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:55:6e:cc:b3:61:82:e0:5b:a0:99:55:e5:8c:dd:be:57:b0:
b8:2d:9a:14:99:f2:0e:d0:0a:34:49:0d:df:6f:bd:2c:12:4c:
0e:f2:dc:52:1b:e5:db:55:dd:63:c4:3e:4a:8b:5f:a2:3a:74:
0b:a1:ce:a2:f6:90:8a:eb:5a:16:14:c9:80:0f:6e:57:26:25:
a3:2f:af:d0:38:77:8c:9a:96:71:dc:8d:bf:34:8a:43:a1:b3:
92:82:37:2d:3c:ee:08:07:78:fe:a5:84:9d:ce:52:57:22:29:
04:6d:1c:47:79:25:ed:6f:bf:32:e4:2b:93:80:20:b9:b9:9b:
f8:b1:51:c7:8e:eb:7b:1d:7c:e8:b3:e8:d4:43:e0:b9:db:af:
e1:7b:7f:fe:8e:df:1b:1e:ba:4e:7b:fa:9d:1f:b7:18:d5:49:
8d:a8:53:14:8e:d2:e4:33:61:e9:a6:67:b1:e1:40:ef:26:e1:
b4:5e:20:23:d4:cb:b0:02:50:1d:1e:d6:03:ba:05:c4:46:12:
a9:d7:31:68:d5:db:4f:c2:4f:c5:95:98:2d:d0:d3:ae:95:41:
12:3d:a5:3f:4c:8a:20:99:fa:65:1a:fb:57:6f:19:cb:9e:5a:
f1:5c:e1:0b:6b:b2:4a:f8:b7:28:3c:cc:dc:cf:1b:49:c0:3b:
a5:98:af:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:36:28 2025 by rpki-client