Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
File: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft (raw, json)
Hash identifier: Rn5Nj/TZbkJrIG+QSILlTR0k40FHBj1Uv3L9cvLGH7E=
Subject key identifier: 47:FB:0F:31:17:35:40:94:29:D7:91:57:84:8C:93:56:67:C7:D5:79
Authority key identifier: 66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
Certificate issuer: /CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Certificate serial: 01967F4635894AEC2A78E20F54CD785C0A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
Manifest number: 121A
Signing time: Tue 29 Apr 2025 02:00:29 +0000
Manifest this update: Tue 29 Apr 2025 02:00:29 +0000
Manifest next update: Wed 30 Apr 2025 02:00:29 +0000
Files and hashes: 1: L4h95g97hPav_sLi8oU5ekfgF0c.roa (hash: gzwtuotOybzEB9lulxkeHjwR8xKOZWJlJKeZJPHVfuA=)
2: PoOOtUJXWSIrEDf1Xj5Z3VDMHSE.roa (hash: xLcUbAcJyMHzQNbU8ncdTmCAmnGI9JLzaYaEQOKQswQ=)
3: YUnFkerPf_tC9lIXfmeJMH6YBzU.roa (hash: /JxLnX44gj+6WYgNCgzFGwP4v1yZUybgTY/uSoStij0=)
4: Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl (hash: +oOyMoH4EabnawCocJ/SicEuk6GCYEHJa1rpemkt7tg=)
5: fOsTWD5Ar1YZxa1P3Pq5mxy5-1c.roa (hash: Dkn0j1n45E5x1EWMxBbv2nQa8t9BDN0AoTeGlR/FbFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:35:89:4a:ec:2a:78:e2:0f:54:cd:78:5c:0a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d2f64c337465ed38da5f7cc4584df87d4a744
Validity
Not Before: Apr 29 02:00:29 2025 GMT
Not After : Apr 30 02:00:29 2025 GMT
Subject: CN=47fb0f311735409429d79157848c935667c7d579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:10:37:60:fc:b3:18:33:73:56:61:97:1b:
86:d7:dc:7d:10:79:ec:56:ea:ac:1c:0c:f6:96:ae:
82:1f:a0:7d:92:88:21:9e:87:21:7b:4f:71:32:35:
d1:20:40:51:39:51:15:b4:ec:6f:46:73:05:fd:02:
46:0c:b1:88:01:b3:7b:84:06:48:cb:0c:9e:f9:39:
cb:6e:6a:27:25:95:33:2e:31:31:72:82:8d:02:51:
58:9e:65:55:5d:1e:67:24:dd:bb:63:56:13:e2:e1:
dc:42:10:ea:5d:12:91:bf:92:92:39:73:5c:61:55:
77:80:56:1f:bb:6a:ba:69:60:2d:20:ed:b8:b5:3e:
a9:69:42:0c:e7:99:03:6d:cf:26:69:ee:cb:6e:6a:
2f:2c:a3:f2:0c:39:29:62:c9:fd:da:fe:76:a3:dd:
c9:be:65:58:b7:86:b9:ec:22:08:12:67:09:08:f1:
cc:5c:1b:a2:05:08:ba:b9:7f:af:25:0c:78:68:88:
57:a9:c0:d6:49:3b:5f:f6:61:d9:76:b9:73:0d:0f:
fa:10:f7:95:3a:b9:37:3e:b5:1d:81:48:0d:ed:07:
cb:da:16:75:f8:2b:3f:55:bc:20:46:9e:4f:7c:d5:
2d:f5:56:13:77:9f:24:89:88:9b:d8:e1:d2:df:50:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FB:0F:31:17:35:40:94:29:D7:91:57:84:8C:93:56:67:C7:D5:79
X509v3 Authority Key Identifier:
keyid:66:8D:2F:64:C3:37:46:5E:D3:8D:A5:F7:CC:45:84:DF:87:D4:A7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/828b0f-80e8-427b-971d-38bbcfaee6ce/1/Zo0vZMM3Rl7TjaX3zEWE34fUp0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5b:9b:12:80:ef:8d:74:87:57:54:81:24:6d:36:4e:5c:35:
b1:65:2d:2f:3d:55:44:68:a7:a4:94:18:8c:7c:5f:66:4d:fe:
a1:07:a5:b9:d8:dd:19:40:88:6d:e6:e2:46:c2:9a:1d:57:c0:
57:d8:3c:e5:d3:ce:f7:e3:f0:6c:4b:45:5a:48:d1:bc:b6:72:
4c:20:35:4a:61:1d:84:2a:2e:ee:7c:87:c9:b2:bb:87:04:bd:
48:f9:54:67:4e:59:27:58:c7:55:19:b4:42:7a:c0:40:5b:4d:
cc:28:19:f3:0a:ff:fd:89:bd:a4:fb:71:93:77:1c:ec:08:d8:
db:15:23:09:db:15:93:ad:09:9f:f9:af:c0:92:98:10:98:f3:
ac:21:64:b6:88:85:05:78:c7:e2:84:47:9e:a9:7f:c3:c9:10:
62:e5:9b:41:e7:2f:1c:cb:61:ba:e1:b2:08:c3:be:bf:ab:34:
21:38:49:04:86:34:14:1d:f9:40:bb:79:bd:bd:d5:8d:39:6b:
d1:da:51:9d:84:f9:b8:cd:b3:02:bd:d1:04:21:a4:5a:bd:9c:
71:06:01:6a:db:34:80:ca:be:99:fe:f9:f0:3f:6f:bf:36:0e:
48:3f:34:9e:45:1c:58:3a:ff:ea:10:8f:79:94:ac:36:e8:65:
74:fd:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:38:19 2025 by rpki-client