Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: 6ig/8hsKHgPyig0SRpzHOyuAnsXVS/9LdOaCg2YUuWA=
Subject key identifier: 1E:3D:0B:76:7A:36:7A:FC:6F:3C:2B:60:BE:0A:51:9D:62:9C:F3:5C
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 01967DFC64961CFE59A9208549787B0B86C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0AC1
Signing time: Mon 28 Apr 2025 20:00:14 +0000
Manifest this update: Mon 28 Apr 2025 20:00:14 +0000
Manifest next update: Tue 29 Apr 2025 20:00:14 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: QD+jacLoXzfF57ksTEBY3d3FoOIe6IS0mcvnchqmJAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:64:96:1c:fe:59:a9:20:85:49:78:7b:0b:86:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: Apr 28 20:00:14 2025 GMT
Not After : Apr 29 20:00:14 2025 GMT
Subject: CN=1e3d0b767a367afc6f3c2b60be0a519d629cf35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:d3:c4:95:c0:00:dc:d8:e6:4e:68:9e:02:
ca:e2:8f:69:8d:c2:ed:23:1e:de:2e:d6:24:be:6d:
ae:d8:72:28:f2:2e:6e:8c:91:8b:3e:e3:bd:19:56:
13:34:31:54:f2:ba:86:c4:5d:60:aa:0c:0f:46:ee:
4d:f5:13:ed:31:c0:61:1b:f0:dc:b2:fd:e6:f0:99:
ed:4f:f7:f3:55:fc:f5:d4:c6:32:70:64:a1:25:95:
96:b4:42:68:31:9b:65:2f:d7:6f:9d:45:da:81:1e:
70:2b:81:f7:43:a3:a4:01:ab:b5:0d:95:1a:92:04:
bf:ea:74:d4:f6:2a:75:a0:bd:92:4b:30:d9:df:40:
a1:06:09:32:d7:1f:57:80:a9:01:d4:61:72:54:76:
f6:81:9d:07:7b:ce:13:90:28:9c:34:6d:70:2a:7b:
02:d5:63:ec:44:08:f5:50:84:fc:59:83:9d:ee:bd:
88:c3:a7:e5:d4:d0:a6:79:4d:2b:09:ab:2b:0f:51:
88:63:9d:5b:f6:91:93:b0:89:ba:25:64:2e:5a:55:
23:0c:3d:c5:d7:a1:68:13:1c:26:ac:2a:99:d8:33:
7c:ef:64:4f:de:9e:70:b2:6a:27:d8:55:97:66:6a:
9e:e3:e9:f9:f8:a5:07:c5:ff:68:e9:26:49:28:a4:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3D:0B:76:7A:36:7A:FC:6F:3C:2B:60:BE:0A:51:9D:62:9C:F3:5C
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ee:6b:c2:5b:fb:c1:0f:98:66:25:a7:c7:bd:42:76:27:7e:
b9:a7:79:9d:22:40:4e:2d:c2:63:d0:27:2d:16:d4:3c:7c:1a:
58:2d:81:68:44:b1:55:af:65:8a:dd:5c:ce:85:39:01:81:46:
54:d9:69:28:55:88:04:ab:e1:80:64:12:6c:75:7d:71:0c:be:
1a:dc:98:7b:3b:66:1c:77:f3:0f:2e:51:e2:f8:a0:ce:bd:80:
15:c8:7f:78:69:dd:c0:1e:95:ae:a5:c5:1f:f0:8e:71:eb:24:
fa:2f:83:cd:6a:89:67:70:85:bb:1e:1c:97:85:b7:b2:31:d7:
ca:30:98:c8:22:fc:25:ac:46:9c:ff:ff:96:87:61:c2:8c:68:
e3:cd:0f:d1:e1:39:2b:38:61:d8:2a:75:e8:3b:b5:79:dd:eb:
6a:b9:f7:7c:4e:09:11:31:da:91:24:c8:55:c9:f3:30:af:88:
1c:cb:31:ed:82:97:fe:12:fa:75:7c:4b:40:7f:21:65:05:03:
53:2c:2a:96:fa:11:11:df:4f:63:fb:c0:02:8a:a9:e2:d0:cf:
20:82:47:ee:af:4d:15:15:5d:82:19:04:6e:f2:01:c0:d7:b8:
1c:e4:80:67:db:3f:3a:2f:09:05:62:3d:cc:fa:84:19:58:0c:
36:85:73:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:18 2025 by rpki-client