Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
File: zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft (raw, json)
Hash identifier: GJhvcbTyiAyOM6z8ZmLTMrn0UTK8lQP2ZqdteO6lt6E=
Subject key identifier: 31:0E:33:E2:64:57:33:90:94:0F:2F:25:3A:FF:80:49:33:CC:BA:AB
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 01960C4414026537191E5BB1A6C6DE3942F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
Manifest number: 0C69
Signing time: Sun 06 Apr 2025 18:01:50 +0000
Manifest this update: Sun 06 Apr 2025 18:01:50 +0000
Manifest next update: Mon 07 Apr 2025 18:01:50 +0000
Files and hashes: 1: TvLjh2HZ_d_rU4Q7CUAOZ93ZHYk.roa (hash: UVHQPQPEMrt8FraIptsGKJQLRzbjMltNPf+IrL/aqn4=)
2: _51jX_RgZUWiVEK-S_q11tdiAsw.roa (hash: ojYxEEbJ9SvKIYoya6or2Wh9tzHv7tWRka6iaB4zigM=)
3: bvBCOOZR_53uuydhAIJbHOE_y50.roa (hash: O8HiOtyZpJTxAkEZvvlqiB0vlYICj10yBc68YG6rua0=)
4: zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl (hash: AcRMY+K3eBs1rRe6jhxiRVuO11XaN7G3MwvhHMAghTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0c:44:14:02:65:37:19:1e:5b:b1:a6:c6:de:39:42:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Apr 6 18:01:50 2025 GMT
Not After : Apr 7 18:01:50 2025 GMT
Subject: CN=310e33e264573390940f2f253aff804933ccbaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:4a:8b:e9:a3:ad:37:f6:4e:75:53:15:e1:
4b:37:55:7b:11:0f:34:63:52:71:c3:50:09:7f:b7:
70:2f:8d:74:59:2f:68:5d:0f:a7:4b:f0:71:aa:d8:
88:95:da:78:81:a5:d3:d9:56:35:81:9a:c5:1c:d8:
1f:24:d2:2c:b8:05:ff:73:46:f5:3a:8f:47:7c:3e:
c8:b0:25:bd:1e:cd:b1:53:0b:57:ee:7c:0d:bd:04:
95:5a:d7:a2:e6:e1:f1:0f:10:33:a3:23:ca:88:d7:
1d:f8:60:c2:f4:3f:61:c0:6c:9b:19:ed:d6:59:38:
61:06:7f:89:d6:74:de:09:e9:f2:3c:7c:a9:9c:b1:
ab:cf:5d:f1:ac:bb:d0:ba:86:ef:6b:45:d2:60:e9:
39:c8:86:61:f8:a7:4c:b2:e7:fb:5f:7f:b3:6e:01:
c7:af:7b:68:d5:b2:99:ba:0c:cb:f3:df:27:6d:44:
87:7b:99:a1:62:2e:62:17:84:ca:75:88:08:d5:f9:
7b:a5:66:da:f0:4b:88:f4:23:72:78:c9:18:87:61:
5f:a1:ea:1e:b1:ae:0b:12:ec:de:f3:0f:4a:e0:e2:
3f:1a:a4:40:dc:f6:ea:95:82:c0:b6:d3:4b:17:ce:
4f:77:3e:0c:b8:1c:4f:55:17:7b:54:fc:03:c3:d0:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0E:33:E2:64:57:33:90:94:0F:2F:25:3A:FF:80:49:33:CC:BA:AB
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5a:a6:6a:f9:a1:18:d5:db:b4:ee:dc:ba:e5:ef:f6:22:42:
a1:84:a9:2b:d7:40:04:7e:84:26:fd:40:e0:7d:56:15:67:fc:
35:1f:d7:75:f3:f9:40:b4:1b:71:a7:ef:23:8d:ef:7f:48:10:
17:b9:3c:17:d4:6d:01:70:76:45:67:b9:3d:46:34:93:b5:6b:
18:6a:cb:e2:85:7a:6a:f3:13:1b:7b:4f:fa:55:35:c7:7f:45:
f1:99:12:9b:95:6c:21:fd:25:fb:ea:1d:38:b7:94:40:e8:65:
bb:27:47:fb:ef:a6:be:fe:94:ea:3c:db:81:8b:73:d9:2f:39:
19:eb:5c:1a:16:f7:fc:01:87:7b:7b:56:f8:1d:2a:1c:9d:c5:
b8:50:97:83:eb:63:e9:d5:60:f3:55:40:38:98:1c:d1:7a:be:
83:a4:25:36:b4:52:3a:9a:80:bd:20:26:0a:d9:d3:da:be:1b:
d7:1c:10:63:49:0c:ca:34:a9:96:4b:4f:e5:50:9d:fd:fc:b4:
8a:d5:1c:85:6a:75:87:8f:33:fe:1b:88:9a:1f:5a:d4:41:ea:
07:62:ff:e8:81:19:da:c3:58:9a:b0:ad:e8:ad:2e:e6:cb:e1:
51:60:6a:d7:8c:34:cc:5e:87:d0:30:af:99:56:75:46:ed:97:
d3:3b:e6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:54 2025 by rpki-client