Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft (raw, json)
Hash identifier: pND3SxugJbVSuvcHl4ABX9QlKwGH20bhVZXmXzp7LAc=
Subject key identifier: 23:8B:27:FD:B3:3F:79:9E:ED:D8:F3:5F:5D:2A:56:14:06:B8:05:32
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 01967EA1AFF6EEC09B6C5D328CF910AB0F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
Manifest number: 0338
Signing time: Mon 28 Apr 2025 23:00:47 +0000
Manifest this update: Mon 28 Apr 2025 23:00:47 +0000
Manifest next update: Tue 29 Apr 2025 23:00:47 +0000
Files and hashes: 1: Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl (hash: AdpTq6ExMdL7G6LghdBmo7XPo6DD+4pQ+ygEfrS7pxU=)
2: f6tkx1veLJXtyksaflVzc1YMN2w.roa (hash: WlrwpYaQcrfGXKf9ZwidLgROLAib30SWtSAT3qSkZJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:af:f6:ee:c0:9b:6c:5d:32:8c:f9:10:ab:0f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Apr 28 23:00:47 2025 GMT
Not After : Apr 29 23:00:47 2025 GMT
Subject: CN=238b27fdb33f799eedd8f35f5d2a561406b80532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:71:ca:dc:b4:0a:93:28:6a:42:95:b0:c3:
8b:28:f1:ce:3c:96:83:be:9c:88:ec:73:ab:99:9b:
6d:26:c4:e6:69:fc:59:68:a9:5d:e8:af:72:03:77:
a4:91:a1:e4:9b:3d:bf:0a:93:dd:cb:44:61:eb:30:
ed:16:36:6f:9a:99:a9:e9:0b:4c:0d:5d:35:c5:a9:
77:2d:da:47:58:4b:67:f5:98:7b:f8:8c:f4:3e:da:
b6:d2:9a:dc:54:3b:5e:27:1d:75:9f:32:9e:0b:c2:
3e:fe:10:ef:68:96:b8:c0:2e:da:bb:21:d4:37:ba:
a7:ac:24:5e:cb:e5:1b:4e:72:9f:db:a3:2e:b9:aa:
cc:f4:21:0b:28:98:a5:61:ec:9b:7c:33:53:ba:39:
7f:bd:b9:ef:9c:8f:9e:bd:c3:b0:09:8c:3b:74:58:
57:88:88:46:8d:0f:dc:28:4e:fa:f4:b5:02:86:98:
72:f1:2b:27:0c:28:b5:ec:d0:8d:cc:0d:57:55:3b:
29:7d:4e:c9:c4:f9:3b:e0:16:bc:9f:9c:f1:e4:04:
eb:0e:bb:b5:26:94:75:de:e4:16:b8:41:f1:38:6b:
5e:6d:7b:3f:9c:05:1c:7f:c5:29:45:52:a9:82:16:
de:fb:b1:31:7f:a3:93:7e:38:85:68:1e:b5:ce:08:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8B:27:FD:B3:3F:79:9E:ED:D8:F3:5F:5D:2A:56:14:06:B8:05:32
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:87:31:ba:9d:bc:5a:70:ec:8b:b6:a7:87:66:c6:fc:a2:e5:
a9:75:5e:7b:2f:fb:26:5f:34:fd:20:8f:af:da:84:5c:36:ae:
18:42:42:9d:0b:34:2d:83:38:35:7b:90:f1:0c:70:08:f3:4c:
08:99:94:25:8e:de:61:33:65:b6:4a:48:c2:82:54:44:9f:f1:
33:3c:9d:51:b5:ff:99:23:c2:ea:c2:fa:ed:72:d4:f7:dd:0d:
9d:1b:4b:c0:62:77:dc:a5:cd:56:a9:02:1f:7d:f8:a0:34:a1:
ad:c4:64:0e:54:87:87:41:7a:ac:60:16:1f:d7:6c:58:5b:f4:
75:8b:3f:5a:19:25:59:fb:10:b6:84:96:2b:a5:e5:7e:03:e2:
d1:28:b2:2c:41:3d:4e:13:da:2c:c6:60:24:fd:f2:45:57:9b:
b8:a9:05:6c:6f:1b:ad:93:aa:bd:69:ad:9c:b7:32:4e:43:3c:
af:8e:25:31:37:70:72:9f:63:01:50:79:d8:bd:06:ab:1d:a0:
60:f1:1c:7f:d1:35:a0:0b:71:01:40:d6:e1:20:0a:83:69:73:
a3:2c:a6:1e:78:fe:80:36:b2:0a:12:10:29:cd:1b:47:5f:d8:
fd:bf:7d:56:d4:88:64:f4:8f:f6:63:4f:05:34:e1:ba:38:71:
46:11:70:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:18:50 2025 by rpki-client