Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier: XM67UCF9zk3GprOnn6pfKtlriccn0utC4JQHbei+E3Q=
Subject key identifier: 7E:87:0E:A3:21:77:5A:F7:B6:1A:BC:95:7F:46:1D:9C:2A:1F:2A:0E
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 01960E327480D6B5FE72DC4EE287010E7BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number: 0311
Signing time: Mon 07 Apr 2025 03:01:49 +0000
Manifest this update: Mon 07 Apr 2025 03:01:49 +0000
Manifest next update: Tue 08 Apr 2025 03:01:49 +0000
Files and hashes: 1: TP9gFKgxBg6Q0nRcWGidlz7qFCE.roa (hash: jhQI7t+AgP6hvPj91hzIOl0xoOYJULkePtGE660/ydE=)
2: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
3: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: CgO2qapYsSbb51ULxIyfZG8JY/W5VFWGzZPKFdO2tP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:32:74:80:d6:b5:fe:72:dc:4e:e2:87:01:0e:7b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: Apr 7 03:01:49 2025 GMT
Not After : Apr 8 03:01:49 2025 GMT
Subject: CN=7e870ea321775af7b61abc957f461d9c2a1f2a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9c:5b:f5:8f:98:d2:6b:f2:6d:30:4d:0d:f8:
e8:4e:34:bc:a0:4e:53:b2:46:83:ef:2b:58:49:19:
f6:3e:bd:7f:b2:6a:df:a4:31:ce:39:95:3e:43:23:
9d:88:e7:3e:ee:13:ba:31:02:cc:2d:13:af:3a:81:
e1:76:2e:25:90:1a:4c:6f:f0:42:59:35:a6:a5:3f:
b4:45:d8:a9:c9:7d:10:6e:d8:65:ad:ec:2e:df:d3:
f2:92:55:42:0b:1b:b3:5a:cd:e0:3c:7f:f1:5d:7e:
60:18:7a:1a:2b:c5:53:62:0a:2e:75:fb:4a:56:9b:
5c:fe:a6:e4:3e:92:3c:d2:5a:83:ed:1e:a7:2e:79:
38:9d:57:dc:8a:53:d5:4e:b1:54:4a:5e:c1:91:bb:
0d:a8:69:7d:66:b2:37:82:68:8b:ac:3e:65:b6:3d:
44:3f:66:0e:89:aa:bf:68:b7:3b:45:e4:a6:f6:76:
9c:3f:e3:42:f9:24:d3:d3:29:7c:74:7d:a2:e8:54:
c2:38:ad:d0:d6:10:99:f7:a9:24:60:0a:e0:94:d1:
ff:80:b7:f1:3d:ae:57:5c:ca:7a:eb:3e:09:49:c1:
d4:05:5d:23:4b:11:e4:dd:06:56:f9:5d:c0:73:73:
92:6c:9b:52:b2:83:85:e2:a6:ad:b7:22:59:39:ab:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:87:0E:A3:21:77:5A:F7:B6:1A:BC:95:7F:46:1D:9C:2A:1F:2A:0E
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b0:09:74:ee:e7:48:49:2e:62:2c:f7:8f:38:ae:0a:6d:d7:
a5:36:06:17:2f:04:43:2b:8f:8f:78:22:97:b5:01:a3:db:a9:
f3:87:f7:e4:1c:52:1e:23:0e:5a:29:b2:a8:6e:a0:c6:e2:55:
a7:32:c1:b3:3e:e2:0b:e0:be:6f:07:0e:7f:ce:e5:c0:10:30:
3b:99:ab:c6:d1:4a:f7:83:10:0b:41:3f:0a:9f:f4:67:6a:b2:
42:81:df:90:44:ee:b6:cb:cc:e6:d4:3f:22:30:48:5f:a8:93:
0f:82:15:62:8a:a5:ec:93:8d:67:d3:05:f1:16:dc:bc:a4:2e:
ba:13:a3:7e:72:9b:8d:44:ab:ce:d6:dd:4d:07:7a:6d:10:b9:
d8:e0:53:2b:53:5c:82:32:cb:51:44:8f:dc:2f:a7:fb:08:c8:
e0:3d:64:0b:d8:03:ec:1f:f0:92:0e:52:d6:db:d2:4e:5c:54:
1d:b0:d1:1b:ca:42:8b:c3:2c:03:f4:5b:51:7e:8a:87:29:a4:
df:8a:24:64:87:86:c4:65:60:1e:0e:b0:0e:de:92:f0:49:71:
9b:b3:8b:43:a0:f0:af:f7:26:88:11:f5:3a:dc:79:3a:74:74:
31:0f:6f:9e:0e:f8:78:b0:c4:48:98:10:97:1c:f2:e3:f7:8d:
3f:0a:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:09 2025 by rpki-client