Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: BOaQh1Hgyd5zMVx+mY5MEUG/qCxBXVDZERWZcyI1GVM=
Subject key identifier: FA:6A:2F:AF:AD:BB:06:C6:CB:DB:62:08:CD:07:86:71:5E:52:E0:B7
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 019688804C80FA1FC4D2E6E491DFA7D0C200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 02A1
Signing time: Wed 30 Apr 2025 21:00:31 +0000
Manifest this update: Wed 30 Apr 2025 21:00:31 +0000
Manifest next update: Thu 01 May 2025 21:00:31 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: KI7ThUoekZUjfar+f897FT1cRIgc0v8Ys31onQVqngQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:80:4c:80:fa:1f:c4:d2:e6:e4:91:df:a7:d0:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: Apr 30 21:00:31 2025 GMT
Not After : May 1 21:00:31 2025 GMT
Subject: CN=fa6a2fafadbb06c6cbdb6208cd0786715e52e0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c1:db:10:99:9d:fa:d7:e4:84:2c:49:ca:76:
ac:1d:b8:d7:68:f4:ee:10:42:ec:5d:63:57:f8:76:
5b:2d:e4:e6:83:a5:0e:37:be:0c:4c:16:34:8d:5a:
b1:fd:54:2d:96:e5:a3:46:fa:d0:da:84:07:20:e8:
b9:97:f7:56:b9:99:f0:28:b9:47:f0:3a:b1:79:21:
e5:23:e6:0b:ab:0f:d5:b5:5c:e7:a0:98:a2:99:c4:
ef:24:61:e4:3f:12:3d:d1:03:d2:00:3d:80:be:af:
30:2e:4a:fc:8e:e7:a0:aa:c8:cb:63:a8:b2:d5:91:
95:39:b0:34:51:61:9c:fd:46:52:bf:c2:eb:11:10:
be:51:cc:8b:4b:72:d1:60:d3:16:fa:f3:c0:e1:0c:
78:79:66:b7:0d:78:c2:b0:21:bd:93:d7:d6:1f:6b:
38:f9:7a:df:ab:7d:a5:23:90:d1:07:05:ff:58:92:
43:4b:48:18:4c:fc:2c:37:b6:e8:ca:6e:01:8b:0c:
6b:83:db:bd:f3:ae:5f:3c:1f:43:90:36:77:20:2a:
dd:ca:eb:16:ce:56:00:62:3a:8a:69:6e:f4:0e:93:
9b:af:a6:fe:98:f9:1b:42:da:2f:44:71:8c:ce:6a:
4d:1f:03:f8:b2:b9:1d:f0:a7:b3:d3:dd:ce:c7:76:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6A:2F:AF:AD:BB:06:C6:CB:DB:62:08:CD:07:86:71:5E:52:E0:B7
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:87:ba:b1:bc:d7:9c:13:71:a8:b4:74:06:3e:57:88:ef:3c:
0e:7f:8d:2c:96:0c:37:12:ab:46:be:a0:b5:92:5f:1a:3d:81:
fc:d2:be:f9:0f:51:bb:5b:f8:58:4a:5c:f7:b3:e2:20:ef:af:
31:41:ca:06:a6:20:d4:63:3f:9a:21:a2:1c:57:d0:69:51:16:
1c:43:a4:80:97:70:6a:80:3f:f8:d9:a5:aa:ba:94:68:54:b0:
2d:cb:39:76:78:fe:46:f2:b7:11:ef:31:74:bb:58:b7:54:cf:
2d:c6:14:2d:42:76:08:bd:36:0c:6a:a3:fc:27:e3:9b:31:0c:
59:37:34:a9:16:04:89:84:53:68:1a:2a:13:9e:5a:d3:9a:a6:
a2:9c:a9:48:c6:42:55:e2:a1:45:65:e7:7f:1e:6a:44:4b:0c:
85:f2:47:c6:e9:a1:79:49:52:c9:0f:5f:8e:0e:c0:d0:dc:7f:
ef:45:38:af:87:b0:b2:b5:53:28:9b:7c:25:7f:fb:9a:26:4d:
4b:5b:eb:cb:25:e7:29:54:d7:d6:56:0c:d5:b0:08:f9:96:eb:
45:46:30:13:23:e1:57:a6:69:ff:ed:c6:d4:e4:b6:5c:03:91:
80:9c:ab:c6:db:85:fe:dd:fc:24:f3:bb:99:9d:39:bd:8d:0e:
f9:5c:3e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:49:18 2025 by rpki-client