Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: 01Pd16D8L8p1zkyMKQlpV2jLZCQ8EE5t5UYZMimpQM8=
Subject key identifier: 16:7F:19:44:EB:40:44:52:24:30:EF:39:65:8C:71:13:FB:32:77:77
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 01958C295F9341B895DD2745A6E5B7A7EF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 21:01:16 +0000
Manifest this update: Wed 12 Mar 2025 21:01:16 +0000
Manifest next update: Thu 13 Mar 2025 21:01:16 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: itdu9eJJpmiYPyEoskwJ1Q/7MzPralcYyIMpRIZ1fe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:5f:93:41:b8:95:dd:27:45:a6:e5:b7:a7:ef:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Mar 12 21:01:16 2025 GMT
Not After : Mar 13 21:01:16 2025 GMT
Subject: CN=167f1944eb4044522430ef39658c7113fb327777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:e6:b5:fa:ed:29:74:80:b0:a9:8d:2e:4e:
f9:7a:23:d2:58:c2:e2:7c:82:b8:a5:6a:b3:9b:20:
4d:a4:f3:4f:aa:d3:ea:ba:45:f8:1c:f0:04:db:c1:
05:74:4d:cc:5f:db:11:38:74:42:0f:34:66:9a:d8:
ac:a0:83:84:1a:31:c6:93:52:4a:b9:f7:a7:4d:66:
06:4a:f1:78:8a:d0:fe:82:17:77:f9:7d:6e:bc:a3:
0e:24:d6:23:94:44:49:4b:24:69:ef:a3:de:a9:04:
0d:40:b2:ba:2a:3c:ac:60:61:cf:01:a7:00:4b:b2:
d3:0a:a6:9e:ba:a6:bc:43:ac:00:eb:b9:48:ac:99:
2f:01:95:a8:83:97:54:5c:20:98:15:e4:59:c3:c1:
a3:8b:f7:c9:8d:16:40:9c:ae:cd:5d:b3:e1:82:93:
7b:18:a6:00:c1:5b:b2:57:d3:fa:25:2f:89:6a:f2:
d0:5e:4e:5b:e8:16:be:88:78:2f:25:d5:9a:ad:74:
b5:0f:f7:50:86:ca:ae:4b:76:0d:ad:7a:13:f2:f5:
8b:fa:af:39:d0:51:11:0c:77:4c:c6:fc:5a:45:df:
5e:55:53:2f:35:6e:af:d6:46:cf:9b:98:fe:cb:7a:
c9:9b:77:a9:dc:0d:ff:5f:0a:5c:a7:da:f1:28:c9:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7F:19:44:EB:40:44:52:24:30:EF:39:65:8C:71:13:FB:32:77:77
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5f:66:b6:13:40:62:50:c5:00:ff:9f:2e:c0:92:84:02:1c:
15:c3:5b:7f:bb:90:41:19:a6:90:3e:12:f2:64:d2:1c:a7:d5:
a3:70:64:68:fe:96:69:f3:ee:7c:54:b4:04:ab:09:3f:83:10:
66:4e:73:ec:f4:94:ae:a3:6f:95:cf:80:41:74:8e:19:a6:74:
da:70:04:bb:06:f2:21:80:81:0e:27:3c:ec:f2:71:c7:16:b6:
21:5b:c0:5e:20:d4:0c:a1:f1:ff:a0:d5:ba:f8:19:a8:ad:c1:
c6:8d:5f:4e:fd:3b:d1:d5:61:29:8a:ea:ed:87:8e:f3:8a:54:
1e:63:fa:00:4e:b9:18:b8:b5:f5:5e:fd:3a:32:9f:da:87:13:
7e:66:53:2f:61:13:eb:f9:06:20:aa:4e:46:7c:9e:ac:65:72:
ff:0b:e0:6e:23:d7:46:cc:da:56:00:8b:19:1f:cb:85:1d:15:
21:66:22:95:94:2e:17:ff:d6:4f:cb:45:c1:2b:56:5d:36:04:
5f:be:c7:43:e7:ee:d8:46:eb:16:cb:0a:8f:da:83:37:9f:39:
d5:52:b0:7e:7e:fd:a4:5f:b0:ad:73:ea:34:99:ed:a4:65:33:
7d:0a:16:9c:3b:5e:88:e7:29:79:11:de:81:9f:94:28:e5:16:
99:38:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:02 2025 by rpki-client