Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
File: ZGASnCIfekeBKIWmSDixLuaxXtU.mft (raw, json)
Hash identifier: aPibyvr65oist2AJNvgtdUuWUwkOuL6x45H5t9K/oMU=
Subject key identifier: 77:ED:3C:FF:EF:5C:68:84:5F:1A:D0:67:C0:1D:34:95:CA:78:13:5D
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Certificate issuer: /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial: 019677FBBDC143910FB79E725BE1929639B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
Manifest number: 0B2A
Signing time: Sun 27 Apr 2025 16:01:48 +0000
Manifest this update: Sun 27 Apr 2025 16:01:48 +0000
Manifest next update: Mon 28 Apr 2025 16:01:48 +0000
Files and hashes: 1: JmllacFYtWc-oOoWU-KiBC-dzBI.roa (hash: ofZ7OlX/Buue/GMQQmZdmktJZ/jzN3/Huw6iGY9j4no=)
2: ZGASnCIfekeBKIWmSDixLuaxXtU.crl (hash: XXbkNq0mRUSyiV8FCBm6CzhYH0MYFndxPJDI4UwSAiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:bd:c1:43:91:0f:b7:9e:72:5b:e1:92:96:39:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
Validity
Not Before: Apr 27 16:01:48 2025 GMT
Not After : Apr 28 16:01:48 2025 GMT
Subject: CN=77ed3cffef5c68845f1ad067c01d3495ca78135d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:bb:40:b8:d8:5a:53:a7:7e:5b:c7:8f:b1:
c7:87:87:aa:01:d8:90:9d:c1:ce:cf:e6:58:78:01:
35:13:4d:dc:77:cf:78:bd:64:4c:34:3c:48:6a:bf:
5a:33:d0:6c:05:0e:4f:ff:67:e0:15:a3:ea:27:3e:
22:ed:f8:1f:b5:8a:40:1f:ea:c1:b5:b9:38:2a:45:
ee:b0:e7:62:0f:73:9d:a3:8b:42:fc:b4:94:b0:91:
1b:32:1a:7e:e7:ca:27:f3:b0:81:08:74:32:14:9d:
68:92:69:d3:b7:95:62:58:08:6f:b5:de:5f:cb:7b:
19:3a:a4:20:cc:6c:20:fa:9a:53:af:88:81:d9:56:
36:cf:a6:27:12:79:9e:a1:4c:e4:05:14:fd:e5:8a:
e6:6b:42:a0:61:42:dc:2d:bd:1e:93:52:d0:a2:31:
78:f4:95:0f:2c:0d:8c:3d:32:3f:0a:3e:41:38:6f:
f6:82:b5:f5:ee:b1:36:24:25:62:8c:bc:8c:7b:0a:
46:ef:23:96:92:7b:97:f4:9a:de:d3:69:d5:c9:4b:
34:16:f3:1d:e1:77:59:cd:2f:21:69:55:0e:33:8d:
71:2d:ef:bf:1d:af:af:5f:a1:99:c6:39:c1:c9:95:
05:0b:f8:55:2c:15:61:50:fd:1f:1e:9c:ae:c0:53:
4f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:3C:FF:EF:5C:68:84:5F:1A:D0:67:C0:1D:34:95:CA:78:13:5D
X509v3 Authority Key Identifier:
keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3b:3b:e6:83:f4:1a:06:b8:64:31:3a:af:d4:f3:b9:d0:46:
02:cc:3f:dd:ed:3d:e7:f2:f7:61:fe:9d:92:05:ab:1a:3f:04:
9e:bd:01:f9:41:c9:82:8b:fa:ee:56:de:9a:ad:10:04:0a:35:
46:ae:3e:39:2d:5b:a3:1d:07:01:1d:99:d3:98:48:b7:82:62:
22:9d:c6:a0:3e:48:2f:3c:17:a0:a7:bb:c5:9c:14:b9:26:03:
c7:15:09:9f:d4:0c:cc:99:86:27:97:0c:df:d7:47:4f:a7:78:
98:e3:da:69:3d:90:c2:da:43:92:ba:68:05:f2:b7:d2:19:09:
4a:74:ff:90:28:67:c5:e6:f1:1a:1b:a2:9d:92:c5:c9:1b:4a:
21:36:97:01:30:e8:d6:70:fb:c5:c2:c6:1d:4a:ea:6e:9b:df:
2f:d5:65:95:aa:b4:8f:d4:4e:31:e3:af:3f:1c:a1:8e:3f:05:
48:09:0e:2c:b0:3a:09:ca:28:06:9d:47:d5:2e:90:f4:f7:a9:
c1:01:87:e4:d8:72:eb:4e:f5:cd:89:24:99:09:09:7c:2c:91:
39:8b:04:5e:2d:e9:32:35:c5:8f:7a:ac:5a:fc:52:2c:13:30:
86:c8:7d:72:8e:bf:f5:1b:c0:bd:66:52:5a:4e:db:44:3a:0e:
6c:9c:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:47:21 2025 by rpki-client