Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: 8LMXQp4DORD0rZKjKBBNXbGujmMNBh+myyoaKPiaRnU=
Subject key identifier: AC:66:3C:00:D7:00:5B:8D:92:FC:AA:60:AA:80:7D:77:AE:B8:F1:A3
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 01964067ECA3844F815CE5C0CDAB7C583E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 1433
Signing time: Wed 16 Apr 2025 21:01:14 +0000
Manifest this update: Wed 16 Apr 2025 21:01:14 +0000
Manifest next update: Thu 17 Apr 2025 21:01:14 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: gxDlOOtv52ZG6sw6m7l9XWpnyAqhk2PyVo+iUkJRuU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:ec:a3:84:4f:81:5c:e5:c0:cd:ab:7c:58:3e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: Apr 16 21:01:14 2025 GMT
Not After : Apr 17 21:01:14 2025 GMT
Subject: CN=ac663c00d7005b8d92fcaa60aa807d77aeb8f1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:8c:39:98:ed:a0:c1:79:4f:c7:10:e4:f8:
ad:03:76:04:cb:35:da:10:6a:3b:e7:4e:79:5a:04:
57:02:85:40:87:27:bb:77:eb:be:b9:fd:bc:b5:08:
98:e6:9f:10:bf:4e:a2:62:49:c0:30:b5:bd:3d:4c:
9c:e7:3d:10:3a:86:b1:30:75:af:97:59:66:d5:dd:
b3:b8:8a:e1:95:3e:01:04:e7:00:20:05:52:54:04:
a9:c3:26:50:f9:44:ee:a3:a9:f7:8f:a3:56:6e:96:
33:80:6a:a5:78:33:85:d4:9a:28:ed:ae:19:27:b9:
28:59:32:0d:01:83:1e:fa:53:a9:10:ed:96:00:88:
5d:0b:93:c4:3a:3b:3b:79:9d:9c:d3:b1:98:41:36:
9f:2a:47:d2:f1:ac:87:7e:86:42:db:d5:78:26:d8:
47:c9:71:d5:7a:c1:4c:39:3a:97:6b:45:73:79:1f:
10:4c:8e:4e:74:a9:86:ed:b6:68:99:52:d5:47:1c:
b0:99:b9:de:78:ee:e9:5a:ae:33:22:fc:27:31:9a:
78:b3:a4:f7:fd:6b:ac:a8:53:21:ad:ca:b7:a4:01:
79:11:42:78:6a:e6:c9:a7:f6:d3:fc:81:65:5c:9f:
03:e0:a7:2e:b7:2f:f0:9e:f0:06:29:96:c5:33:8d:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:66:3C:00:D7:00:5B:8D:92:FC:AA:60:AA:80:7D:77:AE:B8:F1:A3
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0a:d4:73:67:aa:1c:27:e6:0a:59:9f:c5:bc:08:a3:f8:f7:
d5:91:a6:cb:6c:1e:70:84:6a:53:7b:fe:4e:ad:09:6c:9a:e2:
cc:c8:24:e3:99:7f:22:2a:94:99:ee:c5:24:ef:e8:37:84:e1:
ba:17:39:1c:fe:cd:87:f8:b8:62:db:db:c4:3f:39:89:68:47:
26:a2:94:f7:1c:5e:0e:24:bf:e2:1c:8c:e9:8a:e5:2e:10:83:
b4:2c:6d:d8:48:01:9a:b3:c2:44:da:15:93:29:ad:25:66:cb:
df:df:bf:ab:b6:28:e0:f0:ad:40:ae:af:e0:0f:66:74:6d:e1:
04:77:e7:dd:a1:9c:c7:41:f0:d8:74:49:a2:59:4f:09:87:c6:
6e:c6:fd:e7:f9:a2:2b:cf:3c:29:e2:6f:75:f7:62:14:66:e9:
4b:bd:51:73:1d:c0:2e:78:39:6b:43:ed:ba:27:d2:74:d7:0f:
40:f0:b9:b5:cf:a1:f8:9f:50:27:93:5b:c5:23:58:59:db:47:
64:b3:e1:f1:1d:63:f4:c0:d7:bc:f2:b2:a0:08:f8:ad:9d:8f:
13:78:c2:13:64:59:a4:96:ea:89:d9:e7:c6:86:a4:21:27:b0:
8d:ae:2d:8f:ac:df:cf:47:c4:d6:4f:c4:ea:ca:e6:62:87:43:
55:aa:a9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:23:49 2025 by rpki-client