Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: 2tqfXxHgoWNdjb0uzNi3U7xKWBk07lSYxkBetKA44YI=
Subject key identifier: C5:7F:36:32:65:4B:31:07:53:BA:FA:28:87:00:E5:F3:8C:F4:49:A8
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 01967F7D556EDE928F46729679ACE2809BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 03:00:42 +0000
Manifest this update: Tue 29 Apr 2025 03:00:42 +0000
Manifest next update: Wed 30 Apr 2025 03:00:42 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: bxvTvYPEJeTGfF1fmNcIHkNNWLyoK/WXQOx9L/uuVyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:55:6e:de:92:8f:46:72:96:79:ac:e2:80:9b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Apr 29 03:00:42 2025 GMT
Not After : Apr 30 03:00:42 2025 GMT
Subject: CN=c57f3632654b310753bafa288700e5f38cf449a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2e:a4:45:e5:87:11:08:79:ef:68:b7:86:5d:
67:5a:25:be:0a:48:81:da:e2:2a:be:e1:22:6f:11:
ce:64:d7:f5:f7:68:47:0a:21:25:e2:a3:e5:8b:5b:
7b:63:a9:cf:63:75:48:0e:64:f5:ff:18:76:94:4b:
91:ec:33:f3:e9:04:95:4d:c1:00:85:68:0e:36:88:
e6:4b:b4:18:c5:a3:45:f0:e9:bc:b9:95:61:5f:5e:
99:de:93:8c:c0:6a:ed:9e:a3:04:64:b1:e2:28:27:
aa:00:dd:58:e1:74:6f:dc:c8:1c:bc:58:ec:1c:f8:
a2:b6:eb:94:5b:c7:a0:ca:9a:bb:99:32:a5:98:8b:
ab:44:53:f3:1d:7f:05:2b:62:dc:a4:d0:80:ea:d5:
ce:3d:e0:51:ba:86:a7:fe:7f:13:91:37:f6:47:91:
da:f9:bc:07:ba:bd:65:2c:e2:7e:a0:2f:d1:bf:60:
67:8d:e5:af:d0:f8:df:f5:2f:01:8d:6c:ab:2d:8a:
0a:5f:e4:8b:bd:60:01:c1:7a:4b:9f:f2:0c:d7:36:
4a:ea:99:6d:2e:cc:f1:9d:e2:6c:96:c2:e2:1b:28:
bd:11:d7:92:f5:4c:7d:b3:36:f8:6d:fb:8e:74:ab:
8e:c9:eb:22:a7:f3:4a:ba:0b:49:0c:34:90:5c:6c:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:36:32:65:4B:31:07:53:BA:FA:28:87:00:E5:F3:8C:F4:49:A8
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0b:22:13:2a:98:b7:e9:88:62:99:2d:5a:4c:3e:0f:62:eb:
48:80:6e:83:04:58:08:df:a6:25:93:ec:e7:f3:30:3d:50:d6:
46:50:9b:8a:e0:60:f7:31:db:17:fe:1a:db:d5:ba:59:0d:62:
f3:e8:07:1d:32:8b:ef:83:d6:89:95:27:e3:59:7d:9c:75:8c:
66:5a:af:bd:51:f2:bd:1d:23:00:be:57:e7:19:d8:21:77:9d:
72:d4:4e:2a:6e:57:09:7a:69:61:a3:76:26:b0:ac:4a:89:a9:
b1:ba:2d:b8:8b:68:1c:c8:33:06:e9:88:f1:5a:87:1b:ec:74:
d3:bc:f7:04:2d:6e:60:4f:2d:75:45:50:c0:65:f8:79:6f:08:
a9:97:48:e5:a1:e1:72:3b:a5:ab:46:ae:f5:70:8a:dc:6a:2e:
94:90:27:af:ac:38:eb:3f:7b:58:ad:95:3e:91:16:0b:1b:01:
d1:4d:54:64:e7:b6:68:9d:d4:a2:2b:82:30:b6:8b:a3:77:03:
10:88:f1:b5:27:42:29:66:b0:f3:bf:2e:bd:1e:39:9d:cc:70:
df:1f:ed:e8:ea:f4:7b:c2:97:ee:e9:e8:93:3a:e3:e7:2e:0e:
5d:9c:ab:ae:32:e1:43:05:c5:b8:db:b6:10:d4:68:3f:57:91:
b1:63:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:21:50 2025 by rpki-client