Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
File: ZvmDE4lp-NpnT3tcATPgwtAptMg.mft (raw, json)
Hash identifier: fMyTCeqeckGmn265sNyHgLvEOwhuuu7wplibwN95whI=
Subject key identifier: 03:E0:FA:CC:69:8A:29:7E:BF:FF:6E:1C:DA:A9:35:A4:B7:BA:D7:8D
Authority key identifier: 66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
Certificate issuer: /CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Certificate serial: 0196759EBF965AF188F14DCDDA7D89D7C39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 05:00:59 +0000
Manifest this update: Sun 27 Apr 2025 05:00:59 +0000
Manifest next update: Mon 28 Apr 2025 05:00:59 +0000
Files and hashes: 1: 1-mam0MNYijlsUMBvUuzN8saQbSA.roa (hash: 7/MiQ2GbC+9P+jtI1s6HZozavARFckuLPrIIYS9KDUU=)
2: P1AdxUyUjVnpvB2qJGHDHOSGgqE.roa (hash: X7W16uCiCg3Hk2XdddLjkg7PZ/jHsdu8vmq4ZCQC5eQ=)
3: ZvmDE4lp-NpnT3tcATPgwtAptMg.crl (hash: uDLGSMkwwQkNBF66THcI6EE614dpNcp2UJZs/pkhmK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:bf:96:5a:f1:88:f1:4d:cd:da:7d:89:d7:c3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f983138969f8da674f7b5c0133e0c2d029b4c8
Validity
Not Before: Apr 27 05:00:59 2025 GMT
Not After : Apr 28 05:00:59 2025 GMT
Subject: CN=03e0facc698a297ebfff6e1cdaa935a4b7bad78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:a7:f9:90:de:6e:33:da:c3:0e:1f:31:ef:
7f:39:15:0f:2b:75:ed:09:2e:de:23:a7:cb:3b:73:
74:cf:27:c1:60:e8:47:c0:16:34:31:93:23:ce:01:
22:2c:ea:d2:d7:2a:f7:eb:88:cc:8c:41:ef:a6:0d:
73:7f:0c:83:8f:45:78:09:7f:65:01:78:7d:d7:0b:
49:fe:e0:69:ba:fc:88:72:d0:80:51:11:7c:60:11:
e2:f4:13:5c:21:38:00:36:f8:0f:2a:ad:a5:9b:fe:
04:ab:77:a7:1d:63:4d:24:bc:ae:72:c7:29:f3:22:
e7:64:51:6e:a4:a2:0b:cb:09:6e:11:14:89:19:ba:
90:ec:f2:d7:ce:87:fb:26:49:e0:40:52:7f:0a:93:
6d:03:81:21:19:af:80:12:cf:81:07:d0:00:8d:43:
ed:db:93:f6:5b:fb:f0:62:e1:97:c5:4b:b9:41:8a:
3b:df:11:cb:b6:fb:5b:8c:d3:f0:39:5c:3a:25:11:
94:8a:27:84:13:3a:db:08:9e:6b:bd:86:d5:38:b4:
8f:c4:9e:50:e7:21:50:3d:79:df:c8:f5:19:c5:3d:
0e:11:d4:45:95:e1:11:f3:a8:88:d6:f7:eb:65:0e:
c0:27:bf:88:80:cb:c3:27:e6:a8:95:cd:61:d3:38:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E0:FA:CC:69:8A:29:7E:BF:FF:6E:1C:DA:A9:35:A4:B7:BA:D7:8D
X509v3 Authority Key Identifier:
keyid:66:F9:83:13:89:69:F8:DA:67:4F:7B:5C:01:33:E0:C2:D0:29:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvmDE4lp-NpnT3tcATPgwtAptMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b8169b-8bfd-40ff-b9ba-403043048118/1/ZvmDE4lp-NpnT3tcATPgwtAptMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3e:7d:a2:55:99:01:bc:e5:90:5e:77:57:56:97:50:2c:2b:
f8:fe:fa:09:44:97:10:99:a6:f8:20:cf:1f:9d:67:21:39:9a:
fe:e5:b5:2d:c5:71:30:73:06:7a:0b:2e:fe:df:c6:9a:8e:e1:
87:0d:25:da:a1:fb:8c:e6:7b:28:92:0e:ef:0f:82:04:0e:47:
df:ac:b5:c6:ef:c8:49:58:6d:cb:6f:16:c6:0e:15:76:c1:9e:
40:7b:ae:8d:85:ed:33:f4:8b:63:bf:c3:e0:b8:ff:a6:ee:7d:
d5:a0:fe:9a:9b:df:03:17:62:cd:96:1f:da:70:9c:af:78:0c:
e3:06:30:c0:4d:0a:72:33:2b:eb:f9:3e:9f:22:15:8a:13:b6:
32:71:6d:94:b1:d3:b8:52:c0:d4:ff:df:b0:08:19:4d:17:f7:
df:e4:db:22:bf:45:b9:ae:0d:24:f5:07:7d:79:5d:58:43:57:
f2:0c:34:e2:4d:9a:53:6f:7e:f4:07:09:b8:f5:97:c1:f3:d5:
cb:c1:85:74:09:a2:99:5b:c1:ff:91:8f:81:4f:0e:d3:13:5c:
88:7d:f4:86:45:64:0c:34:8b:16:69:c0:3e:49:38:d5:36:7e:
62:26:95:3f:c2:0f:e7:22:a7:fd:7f:b0:55:fb:32:39:ff:03:
78:80:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:20:26 2025 by rpki-client