Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: dyu3sIwJA/LCfXIgDKt95KMLUv7kW34Mu8O5IoJf+bE=
Subject key identifier: 75:51:25:11:4E:18:5E:8A:13:97:BF:1E:1D:36:47:63:91:F5:77:EE
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 019578A24278B6F23E5D0AE7C5FA0A5F0110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 148A
Signing time: Sun 09 Mar 2025 02:00:54 +0000
Manifest this update: Sun 09 Mar 2025 02:00:54 +0000
Manifest next update: Mon 10 Mar 2025 02:00:54 +0000
Files and hashes: 1: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (hash: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=)
2: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (hash: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: yTNCHk8uIEeXU/YT+/7LIDaT3XyL8yt6g/ye6Rzd0bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:a2:42:78:b6:f2:3e:5d:0a:e7:c5:fa:0a:5f:01:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Mar 9 02:00:54 2025 GMT
Not After : Mar 10 02:00:54 2025 GMT
Subject: CN=755125114e185e8a1397bf1e1d36476391f577ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:1c:23:21:97:73:ff:61:f7:be:fc:c3:0d:
c1:da:58:ef:81:c0:31:5f:17:3e:12:ac:7d:71:90:
59:88:69:2f:c1:7d:c2:a4:23:a9:78:0e:2d:d5:37:
44:d6:66:80:bc:a5:7f:1d:f0:c5:2e:a7:43:4a:4b:
d6:9a:16:05:26:fe:23:78:89:a0:2f:28:e1:11:6b:
02:af:b1:5f:83:23:4b:d3:39:d6:26:e0:3c:1f:08:
7f:8d:d9:0f:d9:87:e6:a0:6a:27:db:c6:75:9e:63:
95:bf:80:38:23:e4:b6:4f:a2:f6:8d:1a:b9:78:75:
4e:c7:f4:1d:1b:6b:55:fd:3d:50:c6:d5:bf:27:bf:
5e:81:58:cd:d2:16:ba:b4:e0:36:22:4f:b0:f6:d3:
a3:05:2d:ba:e0:77:42:b4:f4:d6:86:36:a3:f4:b5:
ac:01:44:f9:e1:3e:cf:83:d6:a1:e4:9a:cc:54:a3:
23:ca:4c:3c:07:d6:1f:ba:3d:ff:28:0b:2f:71:4b:
33:0a:a6:8d:18:99:10:07:da:4b:2c:1d:72:b0:b5:
8d:19:94:63:e2:06:7d:ab:b5:f6:35:32:df:e1:0a:
8b:dc:be:88:3b:6c:01:52:fd:22:ff:b6:03:e4:ee:
02:f3:6c:98:70:f2:a0:86:ef:b5:14:90:5a:c1:12:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:51:25:11:4E:18:5E:8A:13:97:BF:1E:1D:36:47:63:91:F5:77:EE
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:45:38:91:89:88:c1:6e:72:18:52:ac:b0:9e:68:3e:61:88:
42:3b:dc:72:d2:23:eb:44:27:70:b4:33:ef:f8:b6:c2:db:d1:
05:e1:ea:4c:08:e0:f7:7d:9b:d7:32:a5:ae:9b:47:1c:c6:24:
d3:59:e5:ab:6c:00:19:89:f5:4f:ce:38:e0:a9:6a:f2:3e:a5:
49:61:97:2b:94:29:70:8a:07:10:14:81:22:1a:78:44:47:6d:
ca:4e:f8:7f:de:19:be:b2:06:2e:79:ed:58:5d:2d:bb:96:62:
95:57:15:28:a6:96:4b:24:00:f3:ee:4e:aa:b3:79:aa:1b:ac:
d4:1d:43:4a:35:37:e3:6c:29:8d:fd:06:6f:c2:12:d5:8f:b0:
7d:a1:29:b2:4b:17:f9:84:0d:f3:3d:a2:0a:86:53:be:30:d8:
ad:ee:53:1a:4b:d7:0a:c9:c3:4b:1b:4a:1b:c8:78:63:f7:fe:
f4:13:dc:77:35:ad:da:7d:82:1a:5a:69:3e:d3:3f:87:3f:03:
18:a1:92:9a:a2:a6:e1:3d:9e:52:57:43:30:21:43:50:bd:16:
8d:6c:fa:77:2d:77:c7:42:a0:4a:47:40:3c:4f:b2:b7:99:44:
d1:78:00:57:64:1a:82:2e:2f:96:2d:4a:a2:2a:9d:0e:6a:5c:
ca:31:41:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:41:42 2025 by rpki-client