Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
File: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft (raw, json)
Hash identifier: 8hS2HvGxhPwvgIPUE+XA4biMVUMByGcKkirJaKaPwLo=
Subject key identifier: 4E:F9:78:3A:E1:9E:AF:DF:29:55:55:54:8F:77:D5:28:57:88:2E:FD
Authority key identifier: 64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
Certificate issuer: /CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Certificate serial: 01964F35D9B9CE2BFF9849C1DF403E868FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
Manifest number: 11B5
Signing time: Sat 19 Apr 2025 18:00:51 +0000
Manifest this update: Sat 19 Apr 2025 18:00:51 +0000
Manifest next update: Sun 20 Apr 2025 18:00:51 +0000
Files and hashes: 1: TnfRZZa2DEP319r9F-J1M2uX-bg.roa (hash: 96MJ1Ftk1CjXiFA2P/QFgrE4MRV/eyv9dtWF5pRgqI0=)
2: ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl (hash: wP2HKE9cRN5pAclR0i2c7PmT5MST144bDCzKnYwoQg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:d9:b9:ce:2b:ff:98:49:c1:df:40:3e:86:8f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6465ecd615f3a6c5639c51e9e3197673152078b8
Validity
Not Before: Apr 19 18:00:51 2025 GMT
Not After : Apr 20 18:00:51 2025 GMT
Subject: CN=4ef9783ae19eafdf295555548f77d52857882efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e6:16:63:59:d8:e7:7c:c3:e5:97:40:b8:fb:
6b:00:02:ab:33:e2:74:71:fd:8c:cb:af:32:5c:73:
42:91:45:90:37:98:8c:0b:da:4f:a0:e1:84:55:f9:
d9:af:4f:91:4a:3d:c7:a1:51:34:58:43:22:5c:b5:
91:5b:ca:6c:c4:28:e2:8b:48:bc:3e:15:ec:3c:19:
b6:2e:4a:90:c6:b2:52:38:d4:ff:c3:98:3e:aa:8d:
7b:e1:11:02:73:fe:00:2b:cd:ac:80:ce:af:f0:e6:
43:f4:64:b2:b3:0b:0e:e1:9b:17:a7:15:f7:54:c4:
62:87:10:40:91:d3:6a:dc:6b:4a:e4:73:84:ff:57:
04:8b:2d:ff:69:e5:8c:8c:3b:a4:5b:30:ac:70:18:
3c:44:d3:33:35:b6:d9:7c:df:12:c9:e4:c3:78:99:
3b:9e:b2:cd:12:33:3e:25:2b:22:87:0d:94:71:ee:
ed:e2:ef:d8:58:2f:71:ca:31:4c:42:ec:f8:1d:9b:
1a:76:9f:08:a1:d4:64:96:55:49:74:bf:79:ca:0d:
00:ba:61:1d:30:f6:c4:53:e0:8e:d8:7c:e2:35:1b:
ea:36:51:6b:58:2d:66:44:97:8f:91:2b:43:d4:a4:
01:45:ae:a5:ef:1f:f9:8e:fd:24:20:52:e4:af:a4:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F9:78:3A:E1:9E:AF:DF:29:55:55:54:8F:77:D5:28:57:88:2E:FD
X509v3 Authority Key Identifier:
keyid:64:65:EC:D6:15:F3:A6:C5:63:9C:51:E9:E3:19:76:73:15:20:78:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/960404-b664-40cc-9cac-54c7c4ee5bb5/1/ZGXs1hXzpsVjnFHp4xl2cxUgeLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e3:a3:e1:c3:6d:85:fb:16:43:6c:82:b3:42:49:bc:52:76:
35:da:e0:d7:36:b5:12:cc:f1:5a:c0:79:45:9f:b8:08:c1:d4:
d4:9a:76:55:82:ea:0b:16:df:0d:84:7e:74:27:08:0f:03:d1:
ad:89:ab:ba:ba:43:ac:48:92:67:2d:9a:ee:a8:86:81:af:92:
29:0f:49:7b:75:8b:b0:e9:3b:d3:27:a4:ca:8e:13:2b:1a:14:
03:c9:54:cd:e5:d4:b2:a6:8f:51:5c:33:3c:d4:d9:ea:ff:6c:
50:ef:68:bc:e3:6d:6e:88:78:24:f7:49:84:ff:7c:02:fc:51:
39:3f:8b:24:aa:3e:87:74:8b:fb:79:46:33:88:6e:b5:e6:9d:
bf:1a:64:bd:75:e7:51:a0:55:ca:a0:c1:28:60:d4:d7:8e:c1:
b3:b5:09:0c:08:c7:87:6a:ca:ce:b7:3e:87:95:02:b4:ac:d8:
ac:b0:79:81:75:37:3a:08:24:b6:1b:33:84:d8:45:72:25:05:
e7:b3:45:71:e7:21:04:06:20:c0:ff:65:80:4d:37:fd:f4:31:
80:7e:b2:5f:b9:f8:76:52:6c:62:fe:d2:84:b2:3d:f4:63:d1:
36:ce:e5:81:0a:d5:9d:28:b1:13:16:31:e8:7a:9d:f7:25:7f:
ec:57:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:29:40 2025 by rpki-client