Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json)
Hash identifier: a3/qH+k7Q0Ct64iueRs5kYerf/jfxwdgqfZLW3KCOBQ=
Subject key identifier: 35:F5:75:44:B7:DD:16:C2:76:DF:8F:9B:3B:20:2F:65:06:0B:0F:87
Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Certificate serial: 01969002C219D1F75B1413FC0857B21C8E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
Manifest number: 0918
Signing time: Fri 02 May 2025 08:00:21 +0000
Manifest this update: Fri 02 May 2025 08:00:21 +0000
Manifest next update: Sat 03 May 2025 08:00:21 +0000
Files and hashes: 1: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: vJ0rHQ0PBlToAnqwWjZZL0v5KCVCrpXtCGIeEJJLqm0=)
2: kvXcpQTzKfI6gYewmYSpRpe0IKs.roa (hash: My61/36Uwh1IIiMu1AIZdI2rmfYYECW0U4UcdSmLLaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:c2:19:d1:f7:5b:14:13:fc:08:57:b2:1c:8e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f
Validity
Not Before: May 2 08:00:21 2025 GMT
Not After : May 3 08:00:21 2025 GMT
Subject: CN=35f57544b7dd16c276df8f9b3b202f65060b0f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:25:d1:6b:f8:6e:5f:6f:5e:84:d2:70:3b:
07:ff:ba:53:02:71:72:7b:b8:4a:ce:2d:f4:d8:de:
29:57:54:6f:74:09:ed:f2:e5:f9:0a:9e:ce:28:de:
d6:54:36:8a:3f:6d:f1:92:75:b3:fe:10:9b:15:0c:
8e:e6:d6:eb:2e:16:ce:cc:f1:4b:bb:ac:04:f2:9d:
2c:48:ad:30:04:43:4c:5f:0f:27:c2:18:cc:44:68:
13:90:74:a3:ee:7c:54:61:8d:27:12:b2:78:26:c9:
65:b9:4e:c5:20:e4:f3:4a:04:a6:51:06:5f:c7:57:
16:c7:bc:18:f8:f3:0c:a9:86:cd:f5:d2:6d:fc:75:
6a:b5:14:a8:b4:b0:1c:e2:01:3e:fd:cc:fc:83:29:
82:58:2a:11:2e:18:dc:0a:73:fa:e9:8d:de:6b:37:
75:96:36:8b:cc:c0:1d:9c:8b:74:a8:8d:fc:4d:f6:
5c:46:c6:2e:a9:8c:32:2a:69:a9:43:e2:05:b3:01:
bc:0c:bc:05:ae:01:97:34:6f:15:58:12:91:1d:77:
76:6b:d8:32:8a:5c:ee:21:3a:60:ad:52:df:20:c1:
55:37:88:a1:dd:ef:20:c9:e6:a8:51:59:53:a3:8c:
2a:5a:fb:45:bd:2b:d1:fb:48:62:71:bd:00:f1:fb:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:75:44:B7:DD:16:C2:76:DF:8F:9B:3B:20:2F:65:06:0B:0F:87
X509v3 Authority Key Identifier:
keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:64:cd:7d:0a:67:ef:d0:04:ef:d7:1c:fd:c6:6a:00:cc:f7:
44:c7:67:d9:fb:b1:d4:5c:14:9d:de:41:f7:88:d2:7c:c9:e9:
2a:29:9a:4e:c2:b7:be:21:9d:70:59:79:9d:54:53:fe:cf:ac:
80:b1:17:bc:19:94:f7:fa:31:01:64:2a:30:fa:20:4f:8f:3b:
35:2f:4a:a6:89:ad:0a:c6:fa:da:c1:74:36:80:1e:1a:f0:61:
d3:3e:08:03:3c:3c:ff:82:12:3a:44:b4:68:7a:5e:e1:69:9d:
ab:ed:9d:a2:29:c2:0e:a5:e9:fb:d2:d9:7d:05:33:9f:4b:92:
2b:f3:47:42:46:33:b2:40:66:5a:d8:2f:e1:f2:e6:59:83:6a:
97:49:d9:51:3c:67:22:f0:81:9a:21:23:0b:57:cd:89:1a:1f:
51:78:8e:27:e0:db:d6:8a:9a:fd:61:d2:9f:ee:d2:6e:d2:ac:
d0:70:6f:53:d2:d1:1a:db:c5:f3:e8:24:2c:9a:c7:96:18:c9:
e6:32:93:6b:78:f7:92:55:e3:59:92:3d:ad:bc:5d:82:30:08:
1b:28:e1:18:da:c0:6d:2b:cc:e7:54:5b:ca:f4:ac:b2:7d:9b:
7b:2c:5c:92:5b:ed:ac:22:15:5c:ee:d2:0e:43:e5:82:3a:48:
84:45:d4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:23:05 2025 by rpki-client