Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: vnzCAtDj4EzbhN+8niBw0KJQchC6Ab/0rIEKXT2+woo=
Subject key identifier: 20:B5:68:2F:3C:27:66:C2:28:0B:FA:FB:78:2C:4B:BD:CA:17:6B:82
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 019690033819FBA022B58214A66D8ED3BC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0C1A
Signing time: Fri 02 May 2025 08:00:51 +0000
Manifest this update: Fri 02 May 2025 08:00:51 +0000
Manifest next update: Sat 03 May 2025 08:00:51 +0000
Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: D7zk2SGhDdy63+RAJO5CiWMvQ/j4YaN5Jq+OiVVVYKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:38:19:fb:a0:22:b5:82:14:a6:6d:8e:d3:bc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: May 2 08:00:51 2025 GMT
Not After : May 3 08:00:51 2025 GMT
Subject: CN=20b5682f3c2766c2280bfafb782c4bbdca176b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:da:14:01:67:03:dd:77:fc:04:7f:a7:d2:
38:ae:c2:d0:ef:88:f8:17:ad:f5:9e:54:1b:29:5b:
64:ee:1a:5b:bf:69:53:37:ff:7e:44:dd:67:93:39:
ac:cf:8a:73:83:fe:c8:f1:8a:90:d9:c5:26:e3:2e:
61:68:48:e4:75:99:59:c4:29:f0:27:18:61:f1:24:
87:29:ff:1b:69:5c:86:18:91:b8:e7:4f:ea:7a:5f:
a3:66:95:39:e8:c0:16:be:75:d1:57:0d:75:58:1c:
a2:3c:7b:62:b0:45:b3:3c:88:84:09:d7:f1:84:6b:
a3:29:d0:ad:0c:83:01:51:2e:c9:6a:25:16:73:57:
9f:df:c6:69:24:52:76:9c:74:5a:41:ca:c2:87:9b:
68:37:d5:e9:82:6f:50:0f:b1:0c:e3:e1:3f:98:58:
4e:c6:95:12:a2:8b:58:a9:b1:9f:4c:62:ff:61:5d:
98:9b:6e:16:12:ac:a4:cb:ee:2a:43:c4:e6:c1:e9:
d7:5b:24:e4:fb:1d:9a:b1:28:f3:06:9b:17:c2:90:
4b:75:e3:55:56:6d:5b:37:07:b8:00:d1:63:bb:ff:
45:fe:40:c3:97:51:cc:ed:08:ff:6b:29:45:75:20:
aa:7e:f3:8a:98:84:ce:84:41:0e:de:5a:fe:a1:78:
ef:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:68:2F:3C:27:66:C2:28:0B:FA:FB:78:2C:4B:BD:CA:17:6B:82
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:de:74:26:a2:8b:2b:5f:70:a4:d7:11:20:52:92:45:a2:54:
3b:1b:0d:ae:23:d4:d2:fd:72:6c:71:72:90:c9:fe:a2:e1:a2:
59:d0:9d:de:45:70:1a:2e:91:11:54:cc:d9:c0:0a:ee:9d:b8:
07:de:b2:c9:16:20:29:38:46:d5:82:f8:19:15:9f:c1:a2:06:
35:11:1a:00:07:d7:7a:38:18:a4:3b:f1:b7:cb:9d:be:11:ab:
16:2b:a9:89:5f:9d:0a:3e:45:27:76:83:44:76:05:cf:18:46:
fd:ce:be:26:97:f3:f5:aa:5a:fe:0b:0f:00:08:5c:fe:b2:82:
36:08:71:c7:e7:63:c6:4b:9d:c3:7b:b0:2a:a6:78:65:98:29:
a8:f1:35:fd:96:c3:82:82:7d:4b:64:b2:d9:74:89:62:6a:17:
70:f1:4a:5e:2d:61:f1:31:d7:89:86:72:86:e1:c8:0f:7e:fb:
70:3d:c6:af:4d:78:39:03:39:82:31:cc:2f:5a:a0:b0:b3:a9:
5d:a3:5f:50:01:fa:76:98:36:cb:07:a0:9c:5a:1e:a9:63:88:
e4:16:fc:53:57:18:04:2f:e6:e8:fc:d7:21:c3:54:a0:10:5f:
24:26:dd:e3:4e:c6:59:3c:9c:aa:23:16:94:e3:3b:c3:93:a9:
a3:69:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:21:14 2025 by rpki-client