Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: xq1J0bjL8yONrQirDEeL6RbeIwcXmWc5JzPLEeksGcM=
Subject key identifier: DF:A7:F9:42:7B:C6:68:38:0E:CA:43:8D:87:65:8C:09:8D:7D:BF:33
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 019652DB47E3430437CFAE5C297C16CF4D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 04DF
Signing time: Sun 20 Apr 2025 11:00:24 +0000
Manifest this update: Sun 20 Apr 2025 11:00:24 +0000
Manifest next update: Mon 21 Apr 2025 11:00:24 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: 99LWjHYt8xQQ86yQ5YKfOR0iTPqH0vu7H2NGdxwZ0w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:47:e3:43:04:37:cf:ae:5c:29:7c:16:cf:4d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Apr 20 11:00:24 2025 GMT
Not After : Apr 21 11:00:24 2025 GMT
Subject: CN=dfa7f9427bc668380eca438d87658c098d7dbf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bf:f6:67:ec:35:52:05:94:75:94:58:fb:37:
f7:68:ae:13:b8:01:b1:e9:d2:93:5f:e3:ae:e9:55:
76:e0:50:22:d7:40:b4:68:45:91:cc:e4:98:b2:9e:
15:da:b8:13:20:f8:29:4c:bf:9a:ec:d6:61:bf:d4:
57:4e:88:ad:b4:f1:34:20:ee:58:f7:2a:85:c8:6c:
b3:7b:02:1c:8a:10:36:bf:74:ff:ef:8b:c6:a8:f1:
f6:56:04:52:76:1c:cc:9f:80:72:4b:94:ca:7b:ad:
72:b4:f7:18:a3:0f:5a:df:bb:a8:47:48:48:12:6c:
f9:66:9b:c6:b9:8e:0f:4b:9c:17:56:8b:c5:a7:68:
e8:fe:c1:53:3f:78:e0:a1:1c:40:3a:53:df:cc:3b:
d2:54:6f:e5:45:cc:ba:ad:c9:b3:b5:b6:f7:91:b1:
61:b6:8f:83:34:24:33:ca:8f:c2:f9:07:b1:45:ca:
94:92:b8:2f:bf:9f:7f:a2:89:1c:bd:9f:d5:22:be:
80:34:e1:df:3d:85:24:a8:00:ca:18:fb:e0:7d:96:
04:57:2f:5b:ec:76:47:68:ca:70:a3:e7:fc:5f:dd:
79:a3:78:0f:89:5d:d3:6b:13:cf:bb:1d:94:98:5a:
90:ed:b4:c6:0d:86:bc:94:be:b3:84:ef:44:07:89:
d9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A7:F9:42:7B:C6:68:38:0E:CA:43:8D:87:65:8C:09:8D:7D:BF:33
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:36:1f:ed:0d:b4:00:6f:bc:8f:53:3d:a7:14:da:d7:01:ba:
23:49:2a:37:b0:0f:90:08:be:0a:c2:b0:2a:1a:7d:cc:c5:32:
80:9c:49:bc:94:47:30:20:ef:9f:8b:fc:f0:77:cc:f2:b6:45:
e3:5b:23:b7:49:2d:3e:39:19:9f:5d:0e:1f:c6:1d:82:16:d0:
a1:4d:8b:07:b4:6b:87:a6:16:19:4e:e3:72:3a:b0:df:72:25:
bf:79:0f:19:be:29:ad:b1:9f:da:af:04:7e:f6:29:78:6c:d8:
18:cc:a5:31:79:83:e0:4a:39:0b:1f:ad:f1:ac:b8:4f:43:6c:
59:22:f4:29:18:12:9f:18:39:d1:48:b0:6b:d5:0d:cf:11:48:
5e:38:32:58:9d:c7:6c:eb:3d:89:ef:4d:e3:71:71:bb:75:7b:
5c:7a:a8:06:05:7f:55:75:c7:2f:ec:31:db:d2:68:de:cf:d9:
35:88:68:71:ac:ed:fe:ed:09:af:4a:ce:4d:84:25:56:cc:d7:
98:7a:d0:bc:2a:c9:a3:be:ae:da:c1:bf:72:de:15:c6:c0:0e:
92:f3:d1:e7:34:01:34:31:a1:13:91:d4:68:c1:6c:65:ff:c4:
e7:21:af:69:c9:11:4b:ff:05:b3:0b:c3:fa:68:fb:16:c6:e4:
5c:38:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:33:56 2025 by rpki-client