Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
File: Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft (raw, json)
Hash identifier: XVZ53FIWYju0gNHeI/+kSu+I9pIYbaujI8WdQZedG7A=
Subject key identifier: EE:82:3C:CB:DF:CC:FC:FF:36:71:AC:5A:4F:50:5B:35:CA:D8:AC:C5
Authority key identifier: 67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
Certificate issuer: /CN=6765a21b561ba8665cf79fbf44c31959de28f216
Certificate serial: 019653803DEA754A1B1957FB26B0A8688019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
Manifest number: 0646
Signing time: Sun 20 Apr 2025 14:00:35 +0000
Manifest this update: Sun 20 Apr 2025 14:00:35 +0000
Manifest next update: Mon 21 Apr 2025 14:00:35 +0000
Files and hashes: 1: 0v4Q3A_w9M1p1YcV4-7Pe389fdU.roa (hash: WhKTFW0tZdeh1NFz5izqlimm3sG/vP+EpF9M2Z10RmY=)
2: Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl (hash: w4/JGP+xGAnfjROxawLQfo8ANJgpa1chtOPiZPaRw1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:3d:ea:75:4a:1b:19:57:fb:26:b0:a8:68:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6765a21b561ba8665cf79fbf44c31959de28f216
Validity
Not Before: Apr 20 14:00:35 2025 GMT
Not After : Apr 21 14:00:35 2025 GMT
Subject: CN=ee823ccbdfccfcff3671ac5a4f505b35cad8acc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:bb:79:5c:e7:21:71:4a:35:c5:a7:2b:7e:
e7:d8:9c:4e:5a:65:7e:d1:49:70:70:32:9b:b0:e4:
2c:7a:7a:38:2f:af:5c:04:02:2c:65:85:3c:b8:11:
a0:1e:69:9d:16:03:cf:22:b1:89:22:7b:f3:04:d4:
4d:74:23:99:25:af:66:81:d6:c0:f5:29:98:5a:3a:
96:bb:12:3f:83:db:af:a0:df:ac:9d:48:4e:ff:57:
34:7f:61:ca:ee:83:6c:a5:4f:2a:a4:5d:8d:66:70:
f3:b9:8b:17:20:ce:9a:c8:01:0b:21:d1:f9:5c:69:
14:19:87:92:6f:b8:65:8d:27:02:1d:66:7d:11:3c:
44:c2:26:35:09:88:83:80:06:61:38:a1:5c:98:69:
72:e8:5c:bd:f4:a0:65:2c:11:a5:ee:47:8c:35:48:
4e:74:56:c2:8d:da:f7:c7:2a:9f:83:6b:ea:d3:4d:
10:23:7d:78:69:a3:b6:19:65:d3:6b:4a:3a:82:d1:
ac:dc:17:82:5f:8a:22:bd:90:c0:be:6f:18:14:0b:
38:4c:56:44:2a:01:af:c9:3e:46:1c:11:99:d4:21:
a0:04:a2:9f:dd:e7:ed:c8:44:9c:6b:56:d7:57:38:
1b:9b:0c:ec:28:df:37:e3:44:bd:d2:17:ae:f4:5c:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:3C:CB:DF:CC:FC:FF:36:71:AC:5A:4F:50:5B:35:CA:D8:AC:C5
X509v3 Authority Key Identifier:
keyid:67:65:A2:1B:56:1B:A8:66:5C:F7:9F:BF:44:C3:19:59:DE:28:F2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2WiG1YbqGZc95-_RMMZWd4o8hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/e8b89c-8268-402b-aa26-ead041774e07/1/Z2WiG1YbqGZc95-_RMMZWd4o8hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ca:88:24:78:b2:23:bf:a2:f2:a9:fd:74:7a:8c:95:5f:8b:
23:42:e4:19:39:6b:e2:92:b5:4a:f8:79:91:19:4e:0d:c2:62:
f0:43:29:c6:72:5a:06:3b:d7:26:2e:22:b8:b7:d8:b1:66:aa:
ca:ac:c7:5f:9d:ff:69:12:ea:fa:ab:f1:c3:4c:16:2c:46:e1:
aa:7f:be:f4:f0:42:df:db:36:30:b5:6e:85:a6:df:c1:89:88:
03:33:38:f0:08:0f:b6:89:d3:31:de:1f:f7:ea:b1:1b:99:1e:
1c:05:23:35:70:74:ae:4a:93:cd:40:64:07:56:35:1a:d7:ce:
cb:cb:9b:be:6e:09:07:91:4a:25:fd:2b:bd:18:86:45:ce:7b:
c0:b5:64:2c:ac:ea:0d:1e:6d:c4:c0:4a:13:2c:f7:c0:7c:da:
7a:2c:93:1f:0f:a9:8b:57:81:ef:30:91:e1:43:1d:bd:0a:68:
25:cf:1f:88:e5:68:30:b1:2a:41:a4:ee:3d:d2:95:78:b4:9e:
67:c7:14:be:92:a9:90:46:b2:64:53:02:0a:03:38:31:dc:ff:
02:3b:0a:58:69:57:aa:e5:43:dd:9a:af:c7:41:c5:0f:3f:03:
e2:b1:2c:cd:c8:05:b8:21:58:12:9e:03:f6:2d:dc:cd:83:09:
06:8e:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:57:48 2025 by rpki-client