Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: tiiMAXFcqtR5DgTeEydsdDJd4WziWsgIAsKOqDuBJsg=
Subject key identifier: 13:31:9B:6F:99:FF:D8:DF:EC:E6:AA:7B:26:A8:82:FB:6D:16:77:22
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 01967DC57F0C00795BCCF2834AFD2FD74B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 151F
Signing time: Mon 28 Apr 2025 19:00:17 +0000
Manifest this update: Mon 28 Apr 2025 19:00:17 +0000
Manifest next update: Tue 29 Apr 2025 19:00:17 +0000
Files and hashes: 1: XA0CQqMcOPYYccV3sepNDTS0yhw.roa (hash: 4pMf0cRKCztacYsNRlFf/QDf3VqwFTPcvQ/RQcBBA+8=)
2: ZZQHimemT1Yqan2xZ5-h03SN2fg.roa (hash: 6foyLQXTh/VHEAP/zlvNZfav60Qqh/Jwfeou7E9KXFE=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: FCTPV9xrb2n/haOrF654hVzHhDbBWyXN+NgHX2M82KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:7f:0c:00:79:5b:cc:f2:83:4a:fd:2f:d7:4b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Apr 28 19:00:17 2025 GMT
Not After : Apr 29 19:00:17 2025 GMT
Subject: CN=13319b6f99ffd8dfece6aa7b26a882fb6d167722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:03:39:34:ab:34:6b:be:0d:a6:0a:8c:ec:06:
8c:46:01:85:49:e7:f4:e8:fd:3c:91:9f:fe:43:b9:
86:5d:86:70:13:a3:40:c8:d3:59:ca:99:8c:8f:7b:
12:85:85:89:23:a0:2f:83:48:4e:8f:80:3c:36:18:
14:7b:46:3c:3e:72:ca:5e:12:c8:56:cc:dc:64:16:
b1:44:32:d2:96:a1:fb:27:63:33:82:e1:fb:9c:49:
57:65:09:71:01:36:47:ce:5d:e9:c0:3c:ef:2d:79:
32:42:6a:41:79:eb:76:d6:eb:c9:ea:73:f0:91:ef:
f2:04:9b:4a:2c:c4:18:54:bb:aa:b5:99:66:60:fa:
7a:c1:4f:90:62:86:c0:3c:67:21:92:0a:30:19:06:
53:b2:5c:30:d5:3c:7e:8a:19:b2:4e:e4:b9:3f:57:
00:7e:25:22:19:f1:3c:59:2b:c3:dd:72:9d:5f:46:
73:72:8a:26:ec:5e:aa:ac:49:93:35:19:ea:ce:f7:
29:a7:93:03:a6:b5:b0:50:c1:ec:be:57:12:21:08:
68:82:21:57:55:5d:3c:98:ee:1e:38:0e:78:d3:ca:
34:35:34:79:fb:1c:10:5c:8a:5e:ac:6e:03:7a:92:
5f:35:dc:da:9c:0d:83:95:76:b9:cb:34:1b:65:3c:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:31:9B:6F:99:FF:D8:DF:EC:E6:AA:7B:26:A8:82:FB:6D:16:77:22
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4a:08:ff:0f:e6:36:7b:41:0d:bc:a7:37:e3:53:73:78:e9:
30:28:15:95:9a:46:d3:1e:a9:87:35:d9:c3:b7:2a:4c:27:4b:
58:a3:40:87:47:c6:6e:2e:ef:b9:fc:d6:d6:3e:de:55:2b:56:
2d:a4:c8:95:23:50:0f:45:e8:4c:10:8c:23:b5:7f:18:f2:25:
75:3c:27:e5:4f:33:ff:3b:f1:78:68:36:82:1e:4f:c8:d2:1b:
ee:b3:27:45:de:da:a1:b3:cf:ce:62:fc:d7:f6:72:6c:81:e0:
8c:42:7c:24:ec:64:3b:ad:2e:e5:ed:38:ef:f0:09:50:16:7f:
4d:d1:57:27:7e:ca:bc:b3:3b:8f:b0:8b:ee:67:64:05:4e:ab:
ae:78:56:03:d0:77:e1:01:a5:2c:da:ff:c9:5c:93:06:8b:56:
bd:1f:04:af:19:2d:08:ab:54:d3:ca:09:c4:75:e5:9d:1e:47:
f5:13:a5:71:71:4a:27:ad:fd:1f:d7:01:08:b9:f2:5a:43:fe:
27:d6:ca:7a:30:2b:cb:18:19:3b:4d:19:f7:f4:e1:95:45:75:
85:69:67:74:ba:ca:e3:77:fb:7f:55:b4:e3:14:0c:c6:f4:b6:
13:7d:b2:27:e5:51:7a:d4:3e:a6:ad:b8:f9:3f:99:33:dd:28:
c7:8f:89:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:11:31 2025 by rpki-client