Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
File: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft (raw, json)
Hash identifier: CHWYjJg8/4RTP4C9xQjd8dDrqe7emmll8npzQvPjgmg=
Subject key identifier: D1:B3:1D:AC:F7:C8:E5:B8:AE:8A:F8:4F:89:AD:1B:03:05:F6:59:DE
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 01968BB8D594A022446F1529635EE1C50EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
Manifest number: 09C8
Signing time: Thu 01 May 2025 12:01:08 +0000
Manifest this update: Thu 01 May 2025 12:01:08 +0000
Manifest next update: Fri 02 May 2025 12:01:08 +0000
Files and hashes: 1: GTkSynOSR7JJ8hFIh874atQ2kys.roa (hash: WFZgsIYIpZf3qUaXsQ6Bchk/4++gg/bi1AspWX+Djq8=)
2: Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl (hash: LPlynwBKb+JDtNldA83XuHkWhD/AalorGJPECcIet+I=)
3: jQJ3TVzSbt94QvsxkfpNQIXk1wM.roa (hash: T8E8HgR/9Azb+iBhoXTJ2mWfJtNkMg+eux8XOkoO5aw=)
4: qLBwfOuFs3K7TRJtu9mhTqn2oCI.roa (hash: t1+dGuENDhf8xhcNT9hdJi3ibea4hMiZnxDqhvWQ4xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b8:d5:94:a0:22:44:6f:15:29:63:5e:e1:c5:0e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: May 1 12:01:08 2025 GMT
Not After : May 2 12:01:08 2025 GMT
Subject: CN=d1b31dacf7c8e5b8ae8af84f89ad1b0305f659de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:16:63:6e:9b:1e:97:79:30:3d:4d:1a:2e:
a7:5a:c6:e1:74:96:5e:d4:e3:8d:03:7a:f5:73:f6:
7a:ab:14:e4:a3:e3:7e:d3:d3:8f:37:d3:35:f1:17:
7e:56:e3:11:6b:34:0d:c2:6f:69:dc:ce:ea:ff:05:
2e:19:31:13:48:6e:ba:88:61:f5:be:b4:ea:75:15:
b4:ed:8c:d4:3c:f1:dc:d0:96:ab:06:80:13:7f:c6:
71:fc:f0:bf:b1:ca:03:bd:70:80:9a:a6:1a:33:5f:
be:98:b3:66:d0:68:85:76:40:7a:6a:20:69:4e:66:
c0:67:58:88:04:20:18:8a:a7:2e:e1:3b:9a:88:ff:
2b:11:3d:c9:2c:f8:d0:47:42:75:26:9f:e4:04:70:
33:d0:0a:f0:38:34:d7:d2:10:fa:c5:ff:8b:19:24:
25:4d:ff:e3:df:65:d8:8f:82:9e:53:8e:b4:7b:27:
37:bc:1b:fc:1d:bb:15:a2:eb:07:36:40:a0:3b:db:
c1:28:00:a1:c5:1f:1a:e7:92:da:dd:ee:46:2a:6d:
1d:34:bf:7d:ef:32:20:02:21:01:79:f1:f7:f9:c5:
53:46:3c:c1:7f:0c:b6:41:ab:eb:1d:d3:55:16:0d:
88:b4:d0:bc:e8:ff:43:83:23:4a:e1:c4:d0:bf:28:
31:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B3:1D:AC:F7:C8:E5:B8:AE:8A:F8:4F:89:AD:1B:03:05:F6:59:DE
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:36:0e:c4:23:c7:c0:c8:1e:3a:a0:b9:90:07:7b:94:db:ae:
2a:ed:9c:83:96:4d:07:28:85:36:b1:79:c6:2a:d2:5f:36:1a:
0b:10:64:55:4f:34:87:c6:cf:00:ec:e5:79:db:e8:cf:87:26:
d8:d1:38:7f:47:4f:ac:9a:fd:1b:28:6c:96:f7:ec:b8:44:18:
de:86:c3:68:e7:9d:59:f0:81:a4:b8:60:9f:d3:ac:aa:4c:15:
7c:ff:1c:51:34:b8:28:c5:e3:e3:61:59:b5:3c:3c:da:46:be:
1d:85:1c:0d:8d:46:a8:a1:77:ed:94:8e:c0:be:8b:f7:68:8b:
82:7c:71:c3:07:99:dd:df:2f:b4:65:cc:71:56:b9:5d:a2:99:
c6:3c:ed:f2:e4:73:61:ea:bd:6f:4f:a3:df:4f:d9:c0:4e:55:
69:e2:31:a6:32:48:df:5b:84:d8:b7:30:0c:62:8d:d0:1c:89:
2d:e9:9e:d8:76:a6:ea:42:b3:36:34:ea:1b:41:67:22:4c:ca:
d3:1f:dd:25:62:66:c7:e5:bb:40:ae:38:07:8c:cb:e1:50:ec:
f8:e8:67:f0:24:34:78:45:76:69:9f:6e:8f:f4:e5:e5:63:0c:
4f:73:34:96:9f:82:8f:ba:d8:6d:0a:92:ab:9d:97:27:9d:c3:
a2:45:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:08:09 2025 by rpki-client