Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
File: ZZprl16v0s5RRocjgUNV9WxVuvs.mft (raw, json)
Hash identifier: 3Ce6EWlSnLlwr0T7NfOcdyKo0rkldbf630Acy36WhWo=
Subject key identifier: 01:3A:6A:7D:EF:A1:CC:C0:7F:B7:5E:9A:82:D5:7F:DC:9D:68:43:D5
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019691834BD5DF278575607DAEC21D89F86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
Manifest number: 151F
Signing time: Fri 02 May 2025 15:00:23 +0000
Manifest this update: Fri 02 May 2025 15:00:23 +0000
Manifest next update: Sat 03 May 2025 15:00:23 +0000
Files and hashes: 1: ZZprl16v0s5RRocjgUNV9WxVuvs.crl (hash: RCOr04z7kxVwLxOkXDEQ4vPLzOnNerhlTlPmA55d0Mw=)
2: hN0z1_4mmxKbkIk8CqnnvzNahto.roa (hash: AI7qbHiXXWxj2c6Gw1e/W0ArXAzLidVM4yaZJ83W98E=)
3: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (hash: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=)
4: vyP9hbS_76ZrupwSMef0B1pOVPk.roa (hash: f7AZEySBA5XegD3mdK9pluMntAOS8jT+L60Mq8N3IVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:4b:d5:df:27:85:75:60:7d:ae:c2:1d:89:f8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: May 2 15:00:23 2025 GMT
Not After : May 3 15:00:23 2025 GMT
Subject: CN=013a6a7defa1ccc07fb75e9a82d57fdc9d6843d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:34:1b:ea:1a:74:93:5e:a6:d0:cb:9c:cd:
f9:d0:83:5f:34:c3:8e:7e:e4:99:58:f3:1d:de:30:
72:0c:69:ed:88:f1:7d:b7:3f:f9:68:5d:d9:cc:af:
64:56:02:c8:54:d3:a2:d1:bc:1c:be:69:fc:f6:b8:
7d:31:1c:30:b1:7b:29:1c:81:41:d8:00:c8:db:5e:
7d:a6:84:e3:c2:53:d9:a6:f2:75:4b:aa:45:13:40:
0c:65:02:cd:18:ce:3a:9d:cb:5d:d5:bb:43:11:24:
5b:ae:f3:6c:f1:a5:a4:41:11:75:52:15:bc:e9:64:
be:2c:0d:e3:9b:f1:00:e7:6f:c0:ba:0a:16:4e:d8:
a7:73:9e:ea:54:e4:9d:0d:31:bc:75:f3:f9:9c:1f:
38:5e:b9:a4:ec:23:07:b1:7f:41:19:c6:99:5f:fd:
26:43:95:ca:ff:d6:48:18:5e:ce:db:ed:d8:c7:58:
a3:e8:32:62:b4:2c:bb:87:57:8e:1f:de:61:08:ee:
54:00:33:4a:4c:a2:38:77:3d:50:f7:9a:93:4b:20:
dd:1f:73:61:99:73:83:04:47:f3:ff:62:3e:2c:b8:
7b:5e:c4:d9:18:b9:48:60:2c:2f:c0:60:10:a7:3f:
17:71:93:5f:58:48:53:18:76:f9:6f:04:9b:2e:df:
f3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3A:6A:7D:EF:A1:CC:C0:7F:B7:5E:9A:82:D5:7F:DC:9D:68:43:D5
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a6:10:a2:ae:24:2a:a5:13:e9:fe:52:ac:08:f3:05:19:74:
e0:50:93:ca:e8:34:28:f1:1e:0a:c3:a4:e8:ce:7a:53:a1:eb:
3f:8b:77:df:1b:18:02:30:6e:ee:3f:02:c9:a9:01:a6:6b:27:
52:1a:76:f1:29:04:27:27:da:44:25:ba:c2:a0:98:f9:62:a9:
b7:ae:a9:f1:9d:46:39:49:ef:3d:04:6d:f3:6d:25:10:8f:85:
ae:dc:7d:7f:87:97:1c:fe:41:39:04:bc:ee:54:81:00:14:e5:
f4:fe:7c:d9:b6:ec:15:04:f6:81:5c:57:0e:ad:3c:fd:83:46:
25:89:e3:1f:32:39:d3:b9:0d:e0:78:6f:c4:7d:14:2e:61:28:
d1:aa:ba:68:dc:10:5c:3d:94:4a:57:ba:dd:9c:4a:fd:c2:97:
f4:aa:c3:be:fc:40:e9:8c:09:56:36:ad:29:7a:0c:b6:03:c8:
64:ca:19:67:dd:a6:46:f0:d1:9c:f5:c7:e4:42:09:31:65:d1:
1a:99:60:92:b2:34:92:5c:f1:f6:13:6b:ba:82:3c:aa:d5:aa:
c7:c2:7b:d4:2e:82:4c:53:61:75:4f:ee:96:aa:73:82:b3:9f:
77:e6:3c:5f:e6:5c:6e:75:ce:0c:93:ca:4e:37:2c:5d:ef:9c:
49:e8:ae:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:29:15 2025 by rpki-client