Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: VwRzpBPdbDx+3vI2b+6ikzHMo9FNRvdCp/eNaf0TfP0=
Subject key identifier: BF:74:7C:A6:10:16:1D:CB:00:75:C5:78:FF:D6:D1:50:4A:68:DB:67
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 0196771EEF4D1F17FE0D0FE4AAB75FFB306B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 12:00:38 +0000
Manifest this update: Sun 27 Apr 2025 12:00:38 +0000
Manifest next update: Mon 28 Apr 2025 12:00:38 +0000
Files and hashes: 1: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
2: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
3: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
4: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: Bf0/uHvz83nCY1fGjxjUOUpA4ruhs4RrD61j/nHUjZY=)
5: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
6: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
7: oCb6cpOKxQ3hs0Wd_KXRQQOGUOY.roa (hash: nIAMXpEpkh1hhboO/mB9TQEizUmas4RdDtRm1RU1TV8=)
8: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
9: zegOmVW3er1W7JPzrg42o5wEwdQ.roa (hash: 4d7Zk0b0nBk4WIXJdlH8YvyzxungmG127NYOALKCd2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:ef:4d:1f:17:fe:0d:0f:e4:aa:b7:5f:fb:30:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: Apr 27 12:00:38 2025 GMT
Not After : Apr 28 12:00:38 2025 GMT
Subject: CN=bf747ca610161dcb0075c578ffd6d1504a68db67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:87:cd:36:61:81:e4:3e:81:fe:4c:40:ba:
78:ad:2b:bb:62:ef:81:91:2b:e3:41:bf:18:bb:36:
49:f1:92:15:d5:f6:0f:c9:52:d0:d2:03:20:cd:05:
e3:0e:f2:47:4c:eb:cc:51:0c:08:78:24:56:18:42:
7d:ce:c6:99:b4:9c:7e:71:3d:d8:ff:ab:13:e1:4e:
64:88:d7:68:0e:33:bc:13:09:b1:ed:09:01:7a:7b:
47:19:05:d9:da:b2:68:bd:7a:81:87:a7:6e:d3:2a:
61:38:da:64:9e:46:b1:09:b1:d4:8d:8a:ae:68:90:
fa:82:e2:4d:5d:90:40:00:ed:02:95:2f:28:87:25:
10:0d:ea:e5:07:a2:48:ba:55:ce:38:57:8a:16:a7:
de:8c:2a:b3:c9:e0:ef:b5:a7:3c:21:12:66:d2:49:
13:ad:f3:87:2f:3e:9e:8e:3e:f5:e0:e1:06:1c:fe:
20:a3:64:1e:23:35:09:8e:8a:7a:34:f4:a9:4d:f1:
0a:99:0b:11:63:de:08:ec:08:f2:e3:07:f2:27:cb:
93:5e:9e:e4:e5:6e:a3:c8:e4:d7:49:09:57:d0:8d:
db:9a:2d:85:67:26:b5:1d:4c:8d:1e:22:14:f9:8c:
3a:3d:c0:58:c1:17:d8:a5:e0:7f:9d:94:7c:d0:29:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:74:7C:A6:10:16:1D:CB:00:75:C5:78:FF:D6:D1:50:4A:68:DB:67
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e1:93:f9:ac:a9:27:23:f9:ee:25:a8:20:23:11:16:1a:5a:
c7:a5:6e:8f:55:26:65:46:db:57:17:12:1a:18:27:f5:bc:76:
19:ef:25:97:eb:70:0c:60:d3:70:12:08:c7:4a:ea:cf:96:77:
a6:97:d0:35:da:cc:04:65:9f:5f:2a:9f:62:50:da:5d:7d:1e:
db:3d:c3:2f:08:38:0e:a2:7d:8f:b1:94:5c:ea:63:57:ee:ec:
fb:bd:ca:3f:56:04:5d:cf:8e:b0:b1:ab:8d:e5:ca:87:de:f8:
2d:15:16:92:d5:82:06:cb:ab:9b:52:b6:de:69:62:c8:43:78:
5a:0f:f6:35:b6:22:17:54:a6:28:fa:d8:ae:57:9b:a4:84:42:
9b:5f:01:13:3f:2f:9a:36:c5:7b:82:a3:cf:7c:60:8c:94:23:
e0:03:c2:b9:23:44:53:e2:90:de:58:f1:17:8f:06:d6:9a:81:
ea:06:6b:c4:8c:ee:04:1c:c0:12:eb:26:0c:16:2c:f0:5c:69:
ae:25:f0:24:82:c1:1e:1b:24:8d:e4:d6:4c:d3:1b:ed:4d:12:
ef:a5:f1:1f:6d:cc:22:27:6d:c2:eb:a2:70:dc:54:b0:a6:70:
cb:ad:b5:ce:f9:97:66:73:a4:04:cb:35:67:de:ac:68:11:d6:
a6:58:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:11 2025 by rpki-client