Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
File: zK1o9-irrfRHJiM0OjJWFQciQYk.mft (raw, json)
Hash identifier: pEK1G3qcEd+IrRcCyqTZ612kOVmdunK7PghkZaxWmPs=
Subject key identifier: 53:96:AE:87:44:51:93:FF:1B:96:30:65:BE:FA:09:5E:7B:C1:73:BE
Authority key identifier: CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
Certificate issuer: /CN=ccad68f7e8abadf4472623343a32561507224189
Certificate serial: 019677C3AB3605B7929AD6AB89680AD577C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
Manifest number: 0680
Signing time: Sun 27 Apr 2025 15:00:34 +0000
Manifest this update: Sun 27 Apr 2025 15:00:34 +0000
Manifest next update: Mon 28 Apr 2025 15:00:34 +0000
Files and hashes: 1: UD4cQq7SyCABLCZHHC1Ou_EeL6M.roa (hash: tfgZKXi2rZuQqy6q4ZM+ZUGFDVqdyYkcUnUVHT5tgpI=)
2: zK1o9-irrfRHJiM0OjJWFQciQYk.crl (hash: AWfKNd3nGq3e+9GdN0jP4fGLN31TSZRwZ+zRdV/OLjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:ab:36:05:b7:92:9a:d6:ab:89:68:0a:d5:77:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccad68f7e8abadf4472623343a32561507224189
Validity
Not Before: Apr 27 15:00:34 2025 GMT
Not After : Apr 28 15:00:34 2025 GMT
Subject: CN=5396ae87445193ff1b963065befa095e7bc173be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:98:f4:83:ae:68:58:de:bf:dc:e7:fb:6f:
47:5c:ea:a7:e4:46:b8:50:61:47:69:6e:26:a0:57:
22:37:fb:bc:83:63:dd:e2:33:df:fa:86:3a:1b:83:
8e:68:46:88:0e:cf:ae:6f:f8:37:ce:2c:c6:4c:cd:
b0:1b:f3:24:5f:9c:8a:c3:97:3e:ab:c0:63:5d:54:
47:01:20:12:4c:87:d4:fc:10:a9:10:70:15:a0:5c:
65:38:21:ca:25:df:96:07:30:a5:dc:13:e1:37:86:
68:15:60:eb:7b:b8:fc:19:61:c9:55:f6:5a:cb:74:
e8:2e:67:79:a2:aa:cd:1d:7e:e1:c5:d5:fc:9d:35:
88:fb:f5:a0:94:6e:4e:2b:46:05:e5:c7:6e:54:e1:
18:73:06:9f:5a:19:9e:c8:f3:cc:5d:ef:c8:b4:05:
37:71:86:9b:e2:7b:5b:7a:ed:5d:54:ea:8f:5d:53:
1d:c3:cb:ba:e4:75:29:53:11:3a:85:c4:2e:26:07:
1c:1a:d4:c8:4d:5c:d2:f2:f9:05:db:36:a9:ce:43:
cd:38:44:75:6b:eb:27:5f:b4:7d:ea:05:f3:87:41:
b7:1b:d3:81:fd:7e:48:c3:bc:12:16:8a:fb:c2:50:
37:b5:f5:52:3f:2e:fa:3a:e1:73:09:97:d6:d5:38:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:96:AE:87:44:51:93:FF:1B:96:30:65:BE:FA:09:5E:7B:C1:73:BE
X509v3 Authority Key Identifier:
keyid:CC:AD:68:F7:E8:AB:AD:F4:47:26:23:34:3A:32:56:15:07:22:41:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zK1o9-irrfRHJiM0OjJWFQciQYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bba08-be36-47eb-ab2c-6359f92e1d2f/1/zK1o9-irrfRHJiM0OjJWFQciQYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9a:cf:60:67:84:08:f7:24:2e:04:98:df:6f:48:38:1b:6b:
7a:e7:6a:db:e1:76:c3:9d:47:39:d2:8d:34:d4:fa:b3:6e:b8:
f3:01:22:86:dd:db:12:bf:81:da:46:71:a5:ff:fc:50:64:ec:
1f:f7:b6:0b:ab:73:57:b4:ee:3c:72:a2:a4:8a:11:f4:b1:59:
24:fd:9f:ad:f3:b7:c8:54:76:77:7c:33:14:40:b8:f5:9e:d7:
89:6f:73:b9:ac:3f:c0:77:1d:a7:1a:b2:f1:fd:ce:67:49:60:
db:90:61:1b:11:ec:6a:ca:f4:5c:27:57:68:38:ad:9d:2e:ab:
a7:f6:38:cb:ab:88:b7:80:e0:22:1a:08:c3:17:1f:25:b8:76:
ac:4d:39:fc:37:da:a6:c6:e4:45:6b:ff:30:25:c8:a4:75:67:
3b:fd:2d:ae:03:80:cf:52:eb:bf:6e:f8:d7:6e:b7:d9:8a:87:
64:22:3a:24:20:a5:c6:fd:59:8d:de:8c:21:5e:32:40:ec:75:
c0:05:1e:fd:65:ad:35:60:43:48:f7:86:13:e5:e0:e6:81:04:
61:90:84:44:29:a8:2f:53:c1:bb:81:57:c3:22:4c:a0:a2:c2:
e6:7c:44:87:30:d2:4c:57:06:b6:93:f1:f6:e9:d6:9b:c1:95:
40:7f:81:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:29:21 2025 by rpki-client