Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
File: zZY90B7IDenhOMneRKNtSPBrk_0.mft (raw, json)
Hash identifier: fNY4jfwiPl7dBg4JRcYMTjp5i11fVT0os4Z2zahU388=
Subject key identifier: 60:5F:D4:EB:77:C2:D9:DD:52:1F:95:72:B0:DF:F8:95:CB:7C:F5:0D
Authority key identifier: CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
Certificate issuer: /CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Certificate serial: 019646322CA81ED23B28CA92E988CCE87AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
Manifest number: 0B22
Signing time: Fri 18 Apr 2025 00:00:15 +0000
Manifest this update: Fri 18 Apr 2025 00:00:15 +0000
Manifest next update: Sat 19 Apr 2025 00:00:15 +0000
Files and hashes: 1: 1-WPhVRlAA6jPCwspck6vC93076I.roa (hash: kfO6p65RVm3Nr0Sh6nB6DU3tpOzF9iRvjAt+cnDEkzQ=)
2: zZY90B7IDenhOMneRKNtSPBrk_0.crl (hash: 6lTy5/RCtcFXD7QHKZeFXtkdFBW3fa1B2MQcGk4i6fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:2c:a8:1e:d2:3b:28:ca:92:e9:88:cc:e8:7a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd963dd01ec80de9e138c9de44a36d48f06b93fd
Validity
Not Before: Apr 18 00:00:15 2025 GMT
Not After : Apr 19 00:00:15 2025 GMT
Subject: CN=605fd4eb77c2d9dd521f9572b0dff895cb7cf50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:d5:45:11:cb:5c:a4:bb:1c:d0:5b:e5:f3:
81:56:b8:ca:b4:97:4c:8c:4d:a5:79:99:89:c4:4b:
3d:c2:a8:a4:6d:84:92:8c:fd:4f:4c:e1:0d:67:93:
46:51:18:85:4c:3c:fc:3e:d0:5f:fa:d3:c9:82:aa:
66:3c:2c:eb:bd:95:fd:c5:06:eb:38:a8:ad:ae:33:
90:5c:63:07:13:02:a6:7c:fa:eb:98:80:cf:86:f6:
f9:53:12:7a:42:91:a9:19:4c:00:37:93:17:ae:88:
ae:a6:64:53:37:3e:cb:8d:5b:79:b5:c6:4e:c7:63:
13:92:d2:cb:02:00:cb:6b:ae:d0:c6:91:26:9c:80:
60:b1:6c:3c:2d:bd:6d:6a:27:d9:3c:00:02:ac:4d:
05:83:29:9d:7e:0a:cd:0c:0d:2b:8c:52:55:47:25:
42:1e:22:08:00:f3:07:dc:0b:f3:55:38:19:9d:ab:
a0:81:ef:d3:79:7c:ac:d9:c1:e4:70:a4:8c:4c:c5:
31:16:92:6b:bd:3e:41:7a:dd:7e:23:ed:09:a1:97:
b6:5f:47:be:9a:57:56:ad:80:33:84:cd:77:9d:b3:
86:b9:ff:4a:31:27:55:dc:49:40:c9:2f:6e:37:2b:
37:b7:7c:c0:75:1c:69:c1:13:6e:e6:d1:07:d0:2f:
41:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:D4:EB:77:C2:D9:DD:52:1F:95:72:B0:DF:F8:95:CB:7C:F5:0D
X509v3 Authority Key Identifier:
keyid:CD:96:3D:D0:1E:C8:0D:E9:E1:38:C9:DE:44:A3:6D:48:F0:6B:93:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZY90B7IDenhOMneRKNtSPBrk_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e403aa-7fa5-4d96-b49f-6cf165239bd9/1/zZY90B7IDenhOMneRKNtSPBrk_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a0:f9:77:24:b2:24:1f:d8:71:79:36:f9:14:fa:1c:03:d8:
fe:3b:0b:11:e5:6b:a8:8c:37:73:49:f7:32:0b:1b:cf:ca:b4:
f2:e9:57:86:fa:18:29:8a:53:b8:a2:35:b4:42:a0:a2:5d:77:
3f:e5:09:96:23:4a:a8:f8:b4:17:7f:27:16:fe:96:3d:16:29:
bd:ac:a7:a4:3c:c6:74:36:32:61:8f:40:51:02:05:ef:3b:e1:
7b:bc:33:6a:69:f3:ee:b5:8d:7d:61:0f:6d:09:67:cf:89:f8:
85:a4:e8:0c:23:f3:52:99:0a:92:a5:77:d0:75:4f:86:71:33:
69:c1:fb:c6:79:a9:7e:03:6e:81:c9:35:d0:72:15:df:da:48:
1c:40:ee:92:d2:20:1d:64:db:a6:0d:28:fb:ba:c4:9f:87:89:
86:a8:2d:c3:9d:77:fd:58:52:37:7c:b9:1e:e5:f0:f6:57:35:
db:69:c4:c8:77:77:45:0d:4c:f8:7c:9c:4f:9f:82:76:70:29:
b6:0c:61:ea:69:38:b1:37:cd:bb:40:5b:96:2c:47:ba:9a:5f:
5d:2f:51:15:bc:9b:91:29:9f:62:3b:63:05:82:f2:d9:1d:e3:
1b:c6:b1:51:3c:bd:ed:cf:48:c1:54:23:4a:55:5c:9f:87:36:
75:43:e0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:02:02 2025 by rpki-client