Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: HrBI1W7Z1rKIwHSdGfsqyhIjgOB6XWSNMaDOtevUwzo=
Subject key identifier: B9:81:E3:F8:AB:4F:E0:26:FF:C6:21:79:61:84:70:A2:D7:D4:B3:E1
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 019685486E02555349DFD3DE81E585E18F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 1060
Signing time: Wed 30 Apr 2025 06:00:38 +0000
Manifest this update: Wed 30 Apr 2025 06:00:38 +0000
Manifest next update: Thu 01 May 2025 06:00:38 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: VWyjGyRjZnsvQAMxfEnoEJXEoXxKOPp4UZVvMVgiuQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:6e:02:55:53:49:df:d3:de:81:e5:85:e1:8f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Apr 30 06:00:38 2025 GMT
Not After : May 1 06:00:38 2025 GMT
Subject: CN=b981e3f8ab4fe026ffc62179618470a2d7d4b3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:82:15:26:5d:ff:9a:53:11:6f:e8:05:3a:
ef:45:e3:77:ba:b3:8a:03:f5:a0:0e:e3:5b:26:c8:
ad:28:60:bd:fd:35:5f:22:d1:09:74:c0:c6:f1:a9:
54:6b:11:63:37:65:78:77:f3:47:98:4f:a1:98:98:
b4:58:15:24:29:0d:c7:19:bc:00:80:76:b4:6c:d3:
95:7b:3d:dd:61:43:8b:ae:13:f9:ac:b2:66:3d:1e:
d2:69:22:69:07:4a:b8:d0:70:9f:d3:7a:19:e4:ff:
eb:23:6f:eb:8b:0e:d0:99:ec:c5:67:da:d8:f7:08:
b2:fe:fb:7c:97:59:75:a3:dc:e0:1b:07:be:ad:3c:
ad:6e:95:44:cb:c7:d5:02:e5:42:87:7b:3a:fd:c7:
ae:1b:cf:56:0a:4e:7d:e4:31:f7:a7:f8:f0:33:5c:
d8:04:7e:07:e2:97:f3:75:62:85:1c:f3:20:c8:5c:
31:2f:88:7b:e3:e8:29:ea:da:08:9c:ee:15:ee:42:
00:f3:83:1b:a3:1f:de:37:3a:bd:22:ee:7c:d5:80:
91:6e:b3:03:ff:77:0f:8e:2f:01:cd:ea:c1:3d:37:
9c:48:20:1d:91:b7:08:68:c6:2a:91:51:b9:f0:67:
04:c5:f4:dc:e0:f9:22:33:95:4c:6c:67:c8:6a:48:
de:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:E3:F8:AB:4F:E0:26:FF:C6:21:79:61:84:70:A2:D7:D4:B3:E1
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:51:b1:cf:e8:1e:c5:0d:6d:33:ba:d0:9a:87:36:9a:75:c2:
8e:e7:8c:e2:b8:41:97:c9:33:c0:2a:f9:bf:d5:f4:e1:f4:3e:
a4:07:6c:d0:c8:fa:89:87:40:f0:60:89:25:b9:45:2f:9c:13:
ab:23:d5:5b:64:b5:db:7d:5f:31:3a:fb:d1:cb:21:b8:9c:01:
63:ae:1e:af:71:a5:01:c8:56:42:ac:4e:28:1f:6b:bb:b2:d4:
2b:20:e0:a1:b4:66:07:81:7a:c1:d4:22:39:f6:61:81:82:51:
45:80:6c:20:4f:11:25:95:c6:9c:56:c8:ac:0e:7f:51:0c:84:
93:e8:10:ec:3f:8c:a0:8e:4e:3b:6e:98:09:34:54:1c:7a:2c:
39:46:fb:f9:43:d9:33:c0:ca:fc:6f:b0:fc:08:81:15:0d:c8:
f1:69:a6:9a:7f:d0:1a:db:3c:d4:64:e8:07:8f:e2:8b:97:f4:
26:8b:81:e1:26:ff:63:4d:9d:a9:dd:dd:47:9d:4e:f5:8d:66:
2e:4d:88:ff:72:de:ad:ce:f0:18:30:3f:af:9f:a3:60:bc:f5:
91:dc:23:88:20:75:4d:e3:a6:9f:37:81:79:3b:26:cc:38:29:
c7:81:43:9c:63:8c:3f:28:1b:62:07:b1:37:8c:ca:15:57:e1:
a9:83:1f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:39:14 2025 by rpki-client