Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File: zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier: ywYdjnJjR1mD53XT9lPxu/7R1tPbyNJNIY0nFmckbxM=
Subject key identifier: 73:DC:A2:70:EF:EA:08:78:CE:65:49:E0:26:E9:26:D6:ED:19:97:7D
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer: /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial: 01960BD6041255FAEE5F8BC6E1375ADD91BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number: 1023
Signing time: Sun 06 Apr 2025 16:01:37 +0000
Manifest this update: Sun 06 Apr 2025 16:01:37 +0000
Manifest next update: Mon 07 Apr 2025 16:01:37 +0000
Files and hashes: 1: DSsF2EpdJres9UlSYZ8ho9OJx-0.roa (hash: kpJLPq3xhLOXcci/pP8gkCb0kvLBcDaZioz977+8mg0=)
2: G9TzS_JKF-xrHisLyJoTKAn4mdM.roa (hash: MxwBJUCTUR/t3ggoItSIruyTquvVzIW04TVN5/t6tE4=)
3: kAtcjeL4q23GFCUbpg4QtXInyEI.roa (hash: 5K8wPb3jbiUlLft+liX8W5eEXe9eE+pHlH9nNwzDSk4=)
4: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: S2CPvM9j783qKlCa0DPIe7HKV9mOym1abH8syREfG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0b:d6:04:12:55:fa:ee:5f:8b:c6:e1:37:5a:dd:91:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Validity
Not Before: Apr 6 16:01:37 2025 GMT
Not After : Apr 7 16:01:37 2025 GMT
Subject: CN=73dca270efea0878ce6549e026e926d6ed19977d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:33:2c:61:79:89:41:0c:f6:dc:de:8c:5a:
af:7e:31:6e:0a:d9:7e:eb:47:01:f7:7d:00:a0:12:
b5:71:f9:4d:e5:77:99:81:60:82:8d:de:23:26:86:
3e:2c:04:94:82:83:eb:1d:0b:37:c7:6a:95:7f:86:
bf:06:9d:bb:fa:90:c5:97:48:5b:ce:d4:f5:20:01:
e2:5b:df:a2:00:01:3b:09:f5:d4:63:18:eb:4f:aa:
71:89:b3:44:59:ab:e4:bf:9f:8c:21:11:ab:2e:ad:
f1:9c:05:cb:66:0e:0f:1e:5e:ee:87:f9:88:3b:28:
60:ba:59:f1:67:58:66:d7:4f:37:91:49:e2:bd:75:
15:58:30:e9:f6:db:11:f9:3a:08:81:64:27:7f:8e:
29:69:c3:c5:a5:50:f8:29:b8:c2:cf:79:2e:c5:61:
c8:0a:1e:58:15:f6:e5:f5:47:a9:9a:44:eb:81:56:
c5:20:13:01:3d:bf:9d:09:02:64:d7:49:f5:00:1c:
d1:22:d2:41:e1:86:ce:a0:65:31:ba:b2:ff:33:d8:
d2:58:cf:7d:b4:d9:df:5f:0d:49:f8:f4:bb:6d:29:
df:39:cc:19:c5:c3:ba:a6:39:98:d3:a4:80:3d:d7:
5e:c9:f5:50:1c:85:45:2f:a0:ce:b5:e9:9a:c7:32:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DC:A2:70:EF:EA:08:78:CE:65:49:E0:26:E9:26:D6:ED:19:97:7D
X509v3 Authority Key Identifier:
keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:27:46:c1:1e:c8:6b:02:74:75:20:61:37:8f:a6:7e:35:b1:
a4:13:53:31:35:29:54:ee:de:64:58:2d:3a:b5:5f:06:98:fb:
03:6f:84:ad:7c:e5:f7:e7:b7:65:18:c8:6a:a7:ca:2b:aa:45:
86:81:76:66:4c:58:84:56:1f:09:20:25:6f:7c:fc:ee:ea:21:
78:27:88:82:86:ab:5a:fd:26:94:25:94:83:60:70:fb:7d:aa:
5f:e7:5f:b8:39:fb:2f:f5:8a:7a:6a:41:24:10:03:0b:1c:81:
f7:d0:8c:3f:b0:06:88:6c:30:54:ca:67:bb:75:9c:df:d9:35:
9e:75:53:45:a0:aa:4e:44:44:8e:73:ad:1f:30:22:dd:7b:6f:
64:1f:6f:98:a2:82:22:36:f9:84:fd:f0:db:87:14:65:65:ce:
86:bb:8e:61:a8:23:43:ae:ad:86:3f:e8:17:5c:b4:c7:42:02:
37:b7:7d:d5:27:3b:7f:c7:56:e6:a8:c2:a6:00:ee:11:b5:3e:
aa:ef:fd:4c:af:d1:2f:08:99:e1:79:17:e8:de:5c:40:b8:2a:
e4:36:4c:7b:d8:0e:3d:4c:c1:df:0a:5a:94:90:ff:c4:04:27:
07:b0:1e:0e:6b:0b:a9:a4:43:67:c4:f4:94:d5:ef:a2:43:e9:
94:cf:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:23 2025 by rpki-client