Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
File: ZtioTw6M91UTepaA68xPzNIKNLI.mft (raw, json)
Hash identifier: foh7KyTDwzS2vKlQl49xd0Y3KkypN/Xu4E3CDoCO5Rg=
Subject key identifier: E1:46:55:93:A2:02:56:21:63:A4:5B:D7:6D:E7:1D:AF:73:EF:3F:2F
Authority key identifier: 66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
Certificate issuer: /CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Certificate serial: 019673793836D652DA2C9E24A48205B3AC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 19:00:46 +0000
Manifest this update: Sat 26 Apr 2025 19:00:46 +0000
Manifest next update: Sun 27 Apr 2025 19:00:46 +0000
Files and hashes: 1: P7vPWrkUt_4tI2tusoLN2OIhgCA.roa (hash: vg79/TJpONqI6MyXQJ/4Hu+xaXpkJvsU35isLPjUC8s=)
2: ZtioTw6M91UTepaA68xPzNIKNLI.crl (hash: rp1vsANgfpjeHovpmmpNEeEXmFqgZ7f+Tehnif84UKE=)
3: r6QzNtUWS8LqjO5zMkFtGGDH8lg.roa (hash: l3MXhVwlaN7WZQxmnLfdtChq7kKxEP3Qy/454Bdw0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:38:36:d6:52:da:2c:9e:24:a4:82:05:b3:ac:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d8a84f0e8cf755137a9680ebcc4fccd20a34b2
Validity
Not Before: Apr 26 19:00:46 2025 GMT
Not After : Apr 27 19:00:46 2025 GMT
Subject: CN=e1465593a202562163a45bd76de71daf73ef3f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:46:0e:b8:9f:10:22:c9:c2:31:51:86:42:ca:
5f:b4:63:c1:38:6b:6d:58:92:8b:07:69:13:ac:55:
90:cc:b5:44:0c:32:d1:d3:89:01:0c:99:2f:cf:c6:
64:7f:25:5b:a8:ee:02:08:ed:72:7a:1a:d1:a7:8e:
d2:02:4b:d6:e8:56:a6:74:97:0a:c7:d9:94:1a:83:
5a:87:d3:c7:48:c9:76:4f:be:91:83:d7:e7:c6:a1:
26:eb:6a:47:6d:b4:d0:fc:0f:58:a2:e1:c2:02:e8:
9d:2f:cf:9f:67:53:28:ce:73:ad:91:82:e5:cd:1d:
97:8f:e1:d6:6b:e8:22:18:0a:f2:54:5c:b9:b4:d5:
a9:d9:e5:ea:c9:8f:ff:17:63:71:43:b1:9d:37:2f:
2e:a9:19:17:16:1d:57:fe:5a:ab:74:f0:4f:cd:0e:
73:2b:4e:74:88:82:5a:79:c0:42:ea:eb:dd:76:25:
7f:1d:a9:15:7e:b3:e4:ed:63:58:ce:02:2c:3b:5e:
80:db:b3:60:15:60:99:29:d8:81:18:cd:bc:a4:b1:
f4:10:c6:31:f8:d0:14:f5:3d:b9:62:0b:5d:bb:df:
fd:2a:34:fb:8f:f4:2d:d5:d7:ff:7f:40:72:54:0d:
4e:0f:ef:7f:78:46:96:7e:7c:44:c2:37:8c:13:d2:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:46:55:93:A2:02:56:21:63:A4:5B:D7:6D:E7:1D:AF:73:EF:3F:2F
X509v3 Authority Key Identifier:
keyid:66:D8:A8:4F:0E:8C:F7:55:13:7A:96:80:EB:CC:4F:CC:D2:0A:34:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtioTw6M91UTepaA68xPzNIKNLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5d5cc5-9d98-415a-ab0e-aa1481f0c13a/1/ZtioTw6M91UTepaA68xPzNIKNLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1a:c9:32:a0:07:fb:a2:16:40:40:b7:5b:20:8c:f2:43:ab:
00:a0:54:ce:75:72:03:e6:99:c5:d5:78:00:be:09:72:94:4f:
41:57:b0:d1:06:10:e8:f9:45:0a:c1:43:c2:96:3b:f2:8b:58:
35:2b:15:58:58:be:18:68:bc:a5:0b:71:e8:62:9c:46:a0:10:
47:e4:f1:1d:dd:0d:55:d6:90:da:61:76:e7:96:ad:b2:40:43:
11:98:e1:1c:86:90:ff:64:7f:74:4b:06:b0:5f:3f:51:3b:a6:
53:7c:a8:27:38:ac:f2:7f:8b:74:0a:ef:c1:c5:6c:64:c4:dd:
00:86:59:8e:ca:47:1a:cd:93:20:a3:63:53:52:52:f4:da:63:
3e:7d:10:92:3a:5d:83:46:ab:c5:d4:6d:a5:49:bf:53:65:fe:
c7:69:88:a7:61:b7:fe:45:75:a4:60:bb:9b:1d:af:74:90:22:
10:8a:ae:e8:ac:2d:29:d5:f3:09:cd:2c:56:2a:ca:40:e1:10:
4b:88:08:5c:0c:52:bd:08:f1:7f:4c:a2:ec:55:e0:4a:ba:b8:
dd:7e:43:a7:04:be:18:a4:29:6b:12:77:65:59:48:9f:3e:9c:
4d:1d:d8:c3:d6:ed:67:0d:71:71:88:a6:96:21:cb:64:94:a0:
b6:fa:23:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:51 2025 by rpki-client