Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
File: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft (raw, json)
Hash identifier: 93YmCnovBlC1r8R/YofZdllXzyMfLLPCRMAHvM4mKJg=
Subject key identifier: 1F:16:9E:F3:30:D7:DA:56:E8:F1:11:CC:77:2A:86:64:E2:E5:6A:02
Authority key identifier: 65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
Certificate issuer: /CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Certificate serial: 0196865B3D8F109E87B56AE350C11459349B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
Manifest number: 026E
Signing time: Wed 30 Apr 2025 11:00:48 +0000
Manifest this update: Wed 30 Apr 2025 11:00:48 +0000
Manifest next update: Thu 01 May 2025 11:00:48 +0000
Files and hashes: 1: 9JlOX8sBl__Qf5ZEztj3xRoWT0w.roa (hash: yFMJTSvXNN5G3iWxcUQycJKuWi+/CwtiHhA9xSKG2JY=)
2: ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl (hash: coWpq6Lg9Q/x/029lmcbLThY5PuS3NNb62TPMVo9kMA=)
3: uJJnjUiM_NZxiukKj0SMAuEZu9s.roa (hash: rKuDWrBp0PYOBRz7NFxaGHHnL+VoADNHakfLXL6TQaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:3d:8f:10:9e:87:b5:6a:e3:50:c1:14:59:34:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6559cf34d4cfc59640862d1e4b79d48d9e4d8e7b
Validity
Not Before: Apr 30 11:00:48 2025 GMT
Not After : May 1 11:00:48 2025 GMT
Subject: CN=1f169ef330d7da56e8f111cc772a8664e2e56a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:46:a3:4f:87:9d:71:a7:1c:c8:86:a0:3a:
c6:b6:64:09:9c:ad:02:59:41:49:99:57:d1:e4:1e:
49:c1:70:69:96:30:fb:a6:84:a8:2e:5b:da:78:30:
4f:3b:70:da:0f:c2:90:df:86:6b:8a:ea:fd:41:fe:
03:c6:9a:ad:8c:16:91:ba:e7:68:af:15:18:09:cb:
de:ac:5e:2d:27:28:39:12:ef:4a:e2:41:49:13:66:
6a:be:32:39:5d:19:d5:0a:4f:65:72:b6:08:40:8a:
f3:e6:1c:af:6d:42:64:ac:66:27:f3:64:36:dd:96:
b2:1f:78:01:54:20:09:28:da:49:c3:8d:a5:8d:57:
ea:c4:a7:81:fd:df:60:96:ed:1a:30:42:aa:3d:20:
47:43:5f:d6:89:ad:07:26:60:5a:26:32:63:19:47:
dc:9c:40:bf:e0:75:b6:cf:53:82:6d:d9:fb:5a:6b:
99:3c:87:5a:d0:c7:ca:90:22:da:c0:2a:a5:36:bf:
d9:fd:db:cd:b1:8a:e0:09:b7:90:58:2f:88:87:29:
74:fa:c1:63:09:5c:36:fa:a4:25:9e:fd:20:d3:26:
2b:c6:f1:de:c0:46:80:f1:e8:4c:55:e5:38:2f:51:
46:1a:ed:de:fe:28:6f:7d:04:f3:a2:fb:e8:39:b9:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:9E:F3:30:D7:DA:56:E8:F1:11:CC:77:2A:86:64:E2:E5:6A:02
X509v3 Authority Key Identifier:
keyid:65:59:CF:34:D4:CF:C5:96:40:86:2D:1E:4B:79:D4:8D:9E:4D:8E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6a8607-a33a-44af-b2c0-1341de8abe51/1/ZVnPNNTPxZZAhi0eS3nUjZ5Njns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:1e:80:8b:d8:d0:05:f5:d9:3f:51:b0:5f:43:0e:c1:6c:
0b:6c:40:07:58:f6:d7:26:c5:96:4c:ee:d5:09:32:63:26:cb:
95:47:8b:3c:4b:2e:a7:a2:a7:44:60:6a:53:dd:c5:1e:fb:3b:
f7:76:0e:e0:6e:87:a2:ed:42:ad:e5:e3:c4:0e:d7:2d:3e:41:
f5:4f:81:4e:d9:90:cf:e8:32:c6:14:c1:3e:7f:7e:ed:b2:25:
76:8a:4a:cc:38:af:8d:67:29:d4:23:8d:07:85:5e:73:6e:0d:
a4:43:02:b2:23:88:31:39:f2:72:00:9d:8c:ba:1b:8a:f7:9b:
51:99:ca:2c:87:02:18:f2:8d:a2:36:f9:7d:12:1e:2f:b0:5e:
a4:85:31:24:5c:e3:c6:bb:19:45:23:d3:12:71:93:2b:fd:fe:
34:55:03:d0:9f:a0:11:42:1f:ec:75:84:c9:e3:7c:11:f2:c4:
a7:bc:e2:38:49:12:83:7b:dc:ad:6a:0b:75:ee:19:e4:96:33:
d3:37:85:55:a6:03:61:c3:8f:89:c4:11:12:e2:bc:ed:95:d1:
06:dc:9b:7f:4f:49:5e:b8:96:07:f1:98:dd:86:2f:77:75:d7:
ce:db:a1:30:2b:68:d2:a2:4a:6f:8e:a7:49:dd:b7:6e:30:08:
db:b9:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:06:58 2025 by rpki-client