Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: vpxto/Do8bLU9df3ivVWUpID17bYG+EE/AIuWB+uzfM=
Subject key identifier: A9:D1:32:14:A5:6E:EA:AF:F0:9B:4E:FA:C5:62:03:3B:EA:35:40:6A
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 019644444FB39AB3FDAB90C95EC28E73B2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 09A3
Signing time: Thu 17 Apr 2025 15:00:49 +0000
Manifest this update: Thu 17 Apr 2025 15:00:49 +0000
Manifest next update: Fri 18 Apr 2025 15:00:49 +0000
Files and hashes: 1: GTkSynOSR7JJ8hFIh874atQ2kys.roa (hash: WFZgsIYIpZf3qUaXsQ6Bchk/4++gg/bi1AspWX+Djq8=)
2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: Tuc6yc/i3m6Pyeb2QRUhzhibzUkQu9DLNk/+x9bXnOM=)
3: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
4: qLBwfOuFs3K7TRJtu9mhTqn2oCI.roa (hash: t1+dGuENDhf8xhcNT9hdJi3ibea4hMiZnxDqhvWQ4xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:4f:b3:9a:b3:fd:ab:90:c9:5e:c2:8e:73:b2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Apr 17 15:00:49 2025 GMT
Not After : Apr 18 15:00:49 2025 GMT
Subject: CN=a9d13214a56eeaaff09b4efac562033bea35406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:f4:d1:2f:6c:d3:f4:52:aa:54:67:dc:7a:
c9:f6:26:9d:d9:48:91:9c:bd:ea:c0:c2:fe:b3:9a:
e4:0c:10:93:4a:4e:24:d6:61:88:2a:d1:50:72:91:
67:18:ca:69:cc:3c:0b:98:33:f5:48:78:de:5e:e9:
27:62:e3:22:5a:c3:2d:5c:a4:df:d4:d8:c5:4f:b8:
dd:40:e0:a8:3a:93:60:00:3f:48:77:40:c2:1c:82:
18:4e:31:f1:b6:2e:96:46:fa:1b:d4:38:ac:b9:ac:
3b:0c:91:82:55:92:3f:9e:7e:b0:82:47:de:22:36:
33:0c:37:9d:ab:1e:8c:43:91:07:69:8b:00:f9:9c:
b0:22:3e:ba:9c:59:ae:65:cf:cf:9f:8f:b0:85:f4:
60:c0:39:4d:e8:7a:e7:7b:80:a6:0b:63:f9:75:6f:
a7:fc:cc:35:fb:74:5d:7d:50:e2:a4:7c:d9:21:43:
11:2e:09:a9:ad:ab:0f:fd:a4:e5:e2:41:bb:47:d4:
65:9c:c3:27:56:a0:62:89:4b:a8:0d:c7:69:12:e6:
5d:70:74:a4:d1:f8:db:68:d9:23:1b:33:48:22:b2:
01:0f:d9:64:3f:cf:9a:02:a2:01:07:79:84:bc:26:
61:b0:39:75:51:d7:3e:f7:78:ab:06:f7:eb:74:a7:
50:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D1:32:14:A5:6E:EA:AF:F0:9B:4E:FA:C5:62:03:3B:EA:35:40:6A
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:76:cf:2f:e3:d5:20:a2:ab:7a:a2:4c:3b:fd:80:57:1a:ef:
76:82:ee:5d:1c:c6:2d:cc:cb:2c:d4:72:2f:c4:a1:26:22:12:
b2:40:17:de:fd:3b:0c:e3:ae:5f:07:60:8d:20:e2:02:39:fa:
04:e1:09:b0:09:f0:c5:d6:ae:3f:96:b0:54:25:fe:5f:a3:36:
60:00:d2:e1:69:d1:54:f3:a8:87:b3:22:f5:34:93:e3:e5:1f:
11:60:09:bd:ff:18:9c:80:8b:bd:2f:21:9b:00:c8:ae:f9:5d:
85:1a:58:83:74:bb:a6:7e:b1:52:66:05:d9:aa:2b:0e:2e:2c:
d4:45:ca:e7:ba:da:cd:b2:30:1e:15:7f:3f:a8:16:03:ac:b6:
e5:40:d7:35:a7:53:1e:ad:6e:6b:0a:06:15:a9:24:f5:01:31:
2e:b6:9a:ca:20:71:cb:be:33:fa:7a:18:02:1b:ff:99:47:c8:
67:01:96:9d:65:ca:59:b2:0a:87:46:95:a8:6a:7c:84:03:b9:
1c:42:e1:6a:9b:89:e5:42:c6:f2:b5:c0:04:54:58:02:28:1f:
e5:8d:b7:15:99:e4:e9:10:8c:d9:14:a6:47:7b:9b:d9:ed:65:
ec:e3:dc:2d:b5:7b:08:46:dd:15:9b:9d:4c:21:f8:1e:c9:36:
c5:d6:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:58:29 2025 by rpki-client