Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
File: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft (raw, json)
Hash identifier: FnM9ZW4slffXPQ3R+YK6ddYNMfxcTQq5iqRmtPPykEM=
Subject key identifier: 58:9B:5E:C1:E1:7B:27:24:04:C4:EA:41:18:5C:DB:41:EC:89:79:E3
Authority key identifier: 64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
Certificate issuer: /CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Certificate serial: 01968DDDB1B43B938CDF3972C97495DAD048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
Manifest number: 0D1E
Signing time: Thu 01 May 2025 22:00:38 +0000
Manifest this update: Thu 01 May 2025 22:00:38 +0000
Manifest next update: Fri 02 May 2025 22:00:38 +0000
Files and hashes: 1: ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl (hash: aYaJRsbDFzJBZa9J8LQZy/+2X0JWu+rrNQ2+fuKoWXE=)
2: ucScMPAy00ug2kPDuCwSp-mDl7I.roa (hash: yTozWRiWvB4IUcAYzXtU2EQoumQmSp9DrRVAnF5P3O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:dd:b1:b4:3b:93:8c:df:39:72:c9:74:95:da:d0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c5fd1dc0c457d9ec113d23bd4935c723e9ecf4
Validity
Not Before: May 1 22:00:38 2025 GMT
Not After : May 2 22:00:38 2025 GMT
Subject: CN=589b5ec1e17b272404c4ea41185cdb41ec8979e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:87:cd:c3:ae:73:da:57:50:38:82:d5:9d:
7e:c9:84:e5:06:1b:66:01:3c:84:f4:00:56:74:e5:
6e:e3:c3:50:29:45:e0:45:82:88:7f:6d:6f:4e:db:
82:4c:e6:91:3d:e0:c5:e4:37:7c:42:8f:b0:31:79:
2b:0d:c6:b6:86:bd:f0:48:44:c3:a2:50:a0:0f:d6:
ce:fd:56:b3:d0:0f:8c:6b:68:98:a1:5e:ca:11:69:
5b:1c:0e:4e:86:8f:83:06:25:59:aa:29:66:6c:db:
1a:15:ff:ba:52:5b:6a:0c:4e:55:60:f8:b1:88:3b:
e7:3d:94:00:f3:63:e7:25:a1:5a:c9:e5:fe:1c:5b:
4a:a4:3c:2d:d9:f6:1a:f9:48:c6:a9:f4:f2:df:f0:
1c:1e:70:9f:a3:9c:3e:69:3a:07:d9:22:72:06:bc:
9c:21:e8:57:7e:7d:fc:af:49:ca:bf:9b:50:18:4d:
70:58:5f:97:76:66:56:de:02:63:18:80:be:7c:57:
cd:df:c7:8b:c6:37:c9:1e:83:49:6b:7c:39:d1:26:
a2:53:f1:e0:db:04:7b:f4:67:86:85:2e:ca:67:0c:
25:30:9f:8e:63:84:cc:55:64:63:fd:10:e0:c7:e7:
58:84:41:85:dc:fb:51:61:7d:64:39:b3:c0:f1:30:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9B:5E:C1:E1:7B:27:24:04:C4:EA:41:18:5C:DB:41:EC:89:79:E3
X509v3 Authority Key Identifier:
keyid:64:C5:FD:1D:C0:C4:57:D9:EC:11:3D:23:BD:49:35:C7:23:E9:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/a4640c-e69a-4337-b1aa-4cb0679ace7f/1/ZMX9HcDEV9nsET0jvUk1xyPp7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:85:89:00:89:6a:58:ed:b6:04:6e:db:4c:05:ae:40:d4:22:
46:b2:1a:06:2f:d2:b1:a6:3a:3a:d5:88:cb:08:c0:86:26:55:
06:63:d4:de:a6:70:92:e2:1f:a3:2a:0c:4a:a7:5c:77:4a:e9:
a9:9f:1e:af:1a:8d:63:30:96:40:31:2c:69:69:b4:55:49:6a:
54:54:46:9b:15:9f:01:ef:b2:3f:90:c6:d9:b3:8c:a2:15:c0:
22:f1:91:74:53:0f:f1:4b:a4:a1:ae:d1:fa:4e:29:0f:34:6a:
b5:c9:d9:3e:72:a0:5e:dc:2e:1e:12:e6:15:83:91:84:52:47:
4a:90:a0:ad:2c:35:73:1c:f8:e0:85:f9:8a:bc:87:b8:b2:d9:
a2:ce:21:13:8b:e5:90:f9:80:f4:d4:f8:25:51:e4:32:20:66:
0d:08:a1:95:cd:4f:7e:2f:23:4e:9b:b0:64:03:4c:3d:ff:07:
81:12:04:f5:e3:2f:93:06:ce:a0:85:0e:26:4f:fc:6c:fd:f8:
c0:bd:28:2b:80:64:02:0a:85:85:dc:b3:13:cd:ba:13:c7:9f:
08:48:59:c3:e7:28:11:79:32:23:29:4d:86:9e:32:c2:4b:57:
df:86:96:d3:d6:a6:3f:b2:da:6b:67:3e:1a:6c:22:4b:6e:93:
5a:36:6f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:50:00 2025 by rpki-client