Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
File: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft (raw, json)
Hash identifier: E/RCKihEBuWZuR60Lb5xd6eds2wAQYZHK8yo3bAUi30=
Subject key identifier: C5:81:27:06:5C:E6:8D:93:28:44:D6:5A:F2:F4:AF:9A:26:B7:8B:BE
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 019677C3B2F45B25AE8163CF45F53AA11E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
Manifest number: 0106
Signing time: Sun 27 Apr 2025 15:00:36 +0000
Manifest this update: Sun 27 Apr 2025 15:00:36 +0000
Manifest next update: Mon 28 Apr 2025 15:00:36 +0000
Files and hashes: 1: 1-7yAEP3nLzNnqtf3Nej2sy65zq4.roa (hash: tYb6X8EoEPBIOpcCtjg5jZ8qmmvQ3HaHzxmvyPy77Pw=)
2: VzQqyrs-uqIcVAV9Qkei6a34wwc.roa (hash: fyOWws5YA8x0adXdJbC1gsHmLihm5Um5wk56YNm2GDk=)
3: ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl (hash: r5KpB6krchGVFhN6n9szY8BJI7sQishGHmSKIcr4tv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:b2:f4:5b:25:ae:81:63:cf:45:f5:3a:a1:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Apr 27 15:00:36 2025 GMT
Not After : Apr 28 15:00:36 2025 GMT
Subject: CN=c58127065ce68d932844d65af2f4af9a26b78bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:54:5f:78:2d:db:54:9c:e3:a9:51:22:7c:
47:dc:50:0b:40:18:91:95:5f:8e:c7:31:79:ca:b8:
f6:82:14:91:3a:16:aa:19:b6:c2:4a:e2:1c:8c:53:
f2:7e:d9:f5:d2:62:4b:3b:f8:bb:64:21:f8:84:d4:
b2:2c:5a:08:1b:28:74:0d:82:e9:77:af:4e:97:79:
3d:2d:9c:a8:d7:34:5f:0a:35:f4:4a:47:b1:76:d2:
01:4a:c6:0e:48:1a:f2:89:24:55:07:a2:c0:3c:5f:
cb:8d:c0:87:31:43:42:6d:ad:aa:dc:0c:9a:36:17:
9c:3c:dc:d8:25:2a:94:d8:6f:64:ee:ca:79:fe:ce:
aa:75:ea:66:b4:1b:0b:a5:4d:d5:f4:5a:52:3d:cb:
12:fe:ca:17:47:f6:da:53:14:d5:65:63:a4:01:29:
b7:a4:ae:98:56:65:d0:91:40:a0:84:00:32:dc:5c:
8f:43:89:97:4f:da:c7:44:71:61:92:7f:5c:56:5d:
93:36:bb:46:c0:f8:f2:ee:c0:9e:c0:3c:b9:9d:8e:
33:97:4b:b0:6e:0d:25:7a:a9:91:ae:36:e1:0c:77:
dd:fc:37:6a:20:2c:bd:47:3b:5d:6c:52:a7:da:c8:
c4:7c:21:12:c3:32:32:0b:ca:29:4d:50:2b:01:22:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:81:27:06:5C:E6:8D:93:28:44:D6:5A:F2:F4:AF:9A:26:B7:8B:BE
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b1:4a:ca:70:f4:b9:7f:83:c4:59:6b:11:b4:22:88:ee:7f:
0c:9d:ad:20:f4:59:ac:83:d6:72:b8:e1:d4:e6:b8:24:56:3f:
3c:01:38:8f:9d:2b:75:4e:da:3c:63:07:d2:9e:7a:84:fc:ae:
4f:39:50:1c:74:4a:ae:ce:82:ca:e0:ca:4b:84:11:22:a8:07:
5c:1f:a2:4b:89:f9:bf:d9:d9:4b:79:2e:69:a6:2b:75:7e:b4:
79:8c:d6:58:8a:75:5b:79:36:e3:23:89:84:1b:e1:bd:94:a2:
f8:95:ad:28:d1:ac:8a:da:72:6a:13:73:cb:68:8b:45:b0:e8:
11:f0:a6:01:92:dc:3c:52:5e:d3:fd:21:ae:ef:18:30:8c:30:
0c:7e:4b:b3:73:6c:56:bf:11:61:98:40:53:37:a0:10:3e:36:
60:e1:2f:cb:18:13:24:a7:7e:91:a9:dd:3a:98:90:35:c5:4b:
b0:fe:02:9a:bc:6e:a9:f8:bf:8c:dc:d8:43:48:38:e9:79:b8:
21:3f:20:f0:91:a9:ec:63:2c:b5:34:4d:0f:b6:ed:ff:7e:da:
89:88:68:71:43:01:22:b8:5d:ce:f4:24:f2:6e:75:24:34:78:
0d:ec:16:bb:1c:ed:75:3c:a4:51:80:57:f1:28:05:3c:a5:9f:
5b:98:02:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:34 2025 by rpki-client