Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
File: ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft (raw, json)
Hash identifier: jpDJUy6iM7rSBOoRVHIBkNphczcsI3Vljqxhi7NR2m0=
Subject key identifier: CE:6E:2C:C0:D0:F5:FD:52:3C:50:31:A6:DA:67:16:F9:BF:41:58:6C
Authority key identifier: 66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
Certificate issuer: /CN=66259dea3e9cae6e819588c5c913f02d4410398b
Certificate serial: 0196835A1A08EFC5F26FFBF8D989B3DDEE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
Manifest number: 1366
Signing time: Tue 29 Apr 2025 21:00:42 +0000
Manifest this update: Tue 29 Apr 2025 21:00:42 +0000
Manifest next update: Wed 30 Apr 2025 21:00:42 +0000
Files and hashes: 1: 64PcT-ttV59tp4M6SLzIc1B2y1U.roa (hash: DimP9lf8Wwvo3/homuogbrevUAd8aPNUrD6/T7BCGD0=)
2: ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl (hash: 8n7Qov9XNq4jpQn/200/h8A97uBmsUiwS3H/eUAHY1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:1a:08:ef:c5:f2:6f:fb:f8:d9:89:b3:dd:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66259dea3e9cae6e819588c5c913f02d4410398b
Validity
Not Before: Apr 29 21:00:42 2025 GMT
Not After : Apr 30 21:00:42 2025 GMT
Subject: CN=ce6e2cc0d0f5fd523c5031a6da6716f9bf41586c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:ea:86:4b:7f:64:62:64:42:19:0f:57:2a:
e4:4c:f2:2f:a9:4f:1a:02:23:2a:10:36:0f:07:31:
d6:5a:82:06:df:90:b2:e0:8d:18:25:bc:45:67:64:
fb:e8:c9:fd:2b:b0:dc:9c:0b:3c:1e:d3:77:0e:80:
ba:a0:3b:6f:b1:8b:8b:ac:93:67:c4:8d:50:16:c7:
00:08:10:42:80:bf:f8:17:8d:c2:39:eb:a0:60:8e:
98:d9:fe:8b:96:8e:79:09:fe:d3:af:34:a9:6d:c9:
31:60:ad:6e:09:32:65:5e:fd:b5:c6:5c:21:b4:7c:
f8:49:d0:1c:6c:c7:fb:22:33:a6:5b:a3:04:cc:d7:
e4:b7:88:78:95:2a:94:dd:8b:5a:98:3c:01:c9:6d:
81:e1:6f:ca:85:de:34:e1:86:6f:cc:71:0e:28:c0:
4f:c5:8c:d6:c5:3d:3b:4f:eb:a1:1f:e4:25:ce:08:
57:e1:1b:9f:94:47:1c:58:11:25:b2:5b:bb:a4:56:
4d:82:85:31:f2:d9:21:aa:10:c9:a7:a3:43:db:b6:
96:49:b9:a3:cd:6e:2e:1a:7c:a9:ed:14:ff:78:3f:
10:56:73:a2:32:bd:70:ec:91:4f:ec:51:6a:ec:2f:
de:31:37:d0:39:0d:88:66:09:39:21:2d:2f:1c:16:
13:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:2C:C0:D0:F5:FD:52:3C:50:31:A6:DA:67:16:F9:BF:41:58:6C
X509v3 Authority Key Identifier:
keyid:66:25:9D:EA:3E:9C:AE:6E:81:95:88:C5:C9:13:F0:2D:44:10:39:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZiWd6j6crm6BlYjFyRPwLUQQOYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/0b3249-fd49-4567-b36d-cbbe3242c2bd/1/ZiWd6j6crm6BlYjFyRPwLUQQOYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1c:96:da:08:98:93:82:af:2c:ed:9c:bb:a5:67:20:12:8f:
61:3f:82:bf:fa:1a:85:18:78:66:79:7b:58:e6:38:68:8f:b2:
97:1f:52:70:a8:e2:bd:4b:24:0b:58:3b:9b:c2:61:19:60:10:
b6:e3:13:d4:2b:8e:ab:d0:99:85:bb:3b:8e:6d:32:f6:45:aa:
34:b8:00:37:22:b4:13:e7:11:71:bc:f4:e2:b4:97:c3:58:d5:
49:7c:20:c9:d9:46:6b:ab:0b:ff:bb:b7:1e:ac:81:d2:a3:ad:
a7:b8:4e:bf:85:8d:4f:d2:03:96:48:4a:66:43:e8:96:c2:48:
99:88:bf:f4:92:b1:06:d3:6f:80:e2:8c:29:da:ac:8b:38:a6:
2b:d0:8a:79:b7:0e:d5:88:5d:64:ed:2f:f8:c2:6d:17:ca:97:
89:1c:5b:90:dc:73:ce:c8:82:0b:dd:17:53:7c:06:77:e9:ed:
b9:16:7e:1f:73:54:3a:3e:f8:03:d6:3d:2f:0b:02:87:fa:52:
d1:34:04:42:7f:0c:d8:d4:2c:ce:31:46:2e:ec:09:f4:89:0c:
d2:13:4f:46:da:4e:bc:d8:1f:20:43:d0:c5:96:b8:c9:07:67:
99:71:f8:96:a1:04:6a:28:83:64:88:75:f9:be:ac:62:f8:3e:
1e:34:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:42 2025 by rpki-client