Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: AxfdNyCGsZTp31nWMrCWcJ/hZuhx8qOOVgCXL0u/Uh0=
Subject key identifier: 0D:55:5C:C7:D9:20:82:52:EA:28:CB:F9:EB:08:D3:30:7A:47:EA:70
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 01963F1D5A39AAF352E11812C890771B4D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 14F1
Signing time: Wed 16 Apr 2025 15:00:10 +0000
Manifest this update: Wed 16 Apr 2025 15:00:10 +0000
Manifest next update: Thu 17 Apr 2025 15:00:10 +0000
Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: 0SdSEKfoQBvn79fWIfmn7iwQ69Wx6KA1J1KmStDf6Ag=)
3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:5a:39:aa:f3:52:e1:18:12:c8:90:77:1b:4d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Apr 16 15:00:10 2025 GMT
Not After : Apr 17 15:00:10 2025 GMT
Subject: CN=0d555cc7d9208252ea28cbf9eb08d3307a47ea70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:11:e6:d3:b9:cd:2c:c4:d6:d8:65:12:8a:
66:c3:16:3f:23:eb:92:9d:f0:f2:6c:7c:d7:6e:90:
b1:b3:e9:8a:fb:a8:cf:4c:f3:55:2d:bc:77:47:ce:
75:9d:13:d3:65:91:05:81:6e:5c:b6:6e:c2:55:e7:
82:3f:f0:6b:43:4e:96:58:7e:2a:94:c1:e4:ce:ea:
93:6c:59:ef:b9:4a:67:6d:72:cd:c8:1e:6e:36:4c:
83:7f:4a:41:6b:a6:b4:65:c7:d2:ea:99:c2:d6:e0:
21:b8:89:b7:c3:21:c8:4a:cc:dc:d9:c2:51:57:b1:
5a:d1:60:3f:73:8c:2e:ce:c5:79:28:d4:42:4a:66:
c4:04:ce:4c:77:84:e3:6b:42:93:16:b0:39:cc:e4:
d4:83:e7:d2:af:2a:cf:5e:12:37:a7:1e:78:10:68:
cf:71:41:93:03:cd:dd:7f:a1:cc:d3:97:74:8c:de:
38:3c:c7:95:53:75:eb:6e:c6:1c:33:08:9f:90:8a:
bf:3b:dd:ad:c6:b6:0c:56:ec:1b:a8:c9:b6:65:0e:
3d:aa:3d:80:c6:7a:a7:a8:b6:f8:55:e2:5f:2b:eb:
c3:e4:ce:b5:f7:16:b8:2f:63:b4:a3:46:f8:b4:98:
ff:af:7f:97:4b:b6:8f:10:5e:d1:05:d0:ac:32:89:
f5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:55:5C:C7:D9:20:82:52:EA:28:CB:F9:EB:08:D3:30:7A:47:EA:70
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1d:88:9b:92:74:77:0c:38:cf:56:71:ab:73:c5:9b:cd:c5:
02:1f:a1:83:d0:63:ba:10:58:66:f5:e9:3a:6a:c5:b6:de:c6:
f9:2e:18:44:4b:e7:08:b2:1d:79:2c:6e:87:63:e2:19:a4:6f:
19:e7:36:85:bc:b1:d2:ab:08:d7:02:de:95:8e:89:94:78:d2:
79:67:89:75:87:a4:db:5f:e2:5b:0a:bd:76:e4:ad:e0:86:5e:
57:cd:22:c5:a9:fc:9f:89:df:22:f2:ce:4b:c6:db:ad:09:3f:
91:68:87:75:6e:0a:48:b4:b1:0b:be:22:03:fa:ac:52:7d:7a:
b8:c2:d4:8e:3b:0a:44:0d:72:de:a9:49:84:d0:f0:33:eb:65:
6b:bf:a5:44:15:c3:00:2e:54:e1:4a:f4:9d:03:9c:82:1d:50:
0a:51:9e:31:45:9e:6d:f0:21:d3:72:53:e2:ef:e7:24:4f:70:
ea:46:70:8e:58:17:97:2d:fa:35:ec:b3:30:f5:33:b8:7d:a3:
37:5e:14:77:9f:53:c5:cd:30:a6:90:71:37:11:a0:4f:b0:71:
5d:36:d7:7b:e8:36:2c:6e:98:d3:c1:2a:79:65:a2:96:d6:40:
62:51:e0:fe:49:fa:0c:eb:bc:c3:d7:87:7f:fa:11:1f:da:c9:
cc:ba:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:17:15 2025 by rpki-client