Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
File: Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft (raw, json)
Hash identifier: 5+x5RHDlTrtxx5vZsuRKxMNqSZU4OV+AWOaG1frpDA0=
Subject key identifier: 78:9D:5E:C5:FF:A3:E0:64:B5:27:7C:26:14:07:84:58:D9:D3:DF:40
Authority key identifier: 66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
Certificate issuer: /CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Certificate serial: 019685B676194C11669AC7B30626E1001999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
Manifest number: 148B
Signing time: Wed 30 Apr 2025 08:00:49 +0000
Manifest this update: Wed 30 Apr 2025 08:00:49 +0000
Manifest next update: Thu 01 May 2025 08:00:49 +0000
Files and hashes: 1: Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl (hash: jePSvN3Zdd/eR4GpFp1FqofwT7I6R+5bdtVG1y4ygy8=)
2: ozTEzJ9CezdFTub-OtUArZTGCUk.roa (hash: hY/JTd/yJ1qrW6X45LIcw6pONHk7vyqJi7EpOCN1u7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:b6:76:19:4c:11:66:9a:c7:b3:06:26:e1:00:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=666d97ceb84e9c616bfe6d93576cc33bbf4b63ef
Validity
Not Before: Apr 30 08:00:49 2025 GMT
Not After : May 1 08:00:49 2025 GMT
Subject: CN=789d5ec5ffa3e064b5277c2614078458d9d3df40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:54:eb:4e:4a:65:ce:bf:08:59:4a:7c:2b:
df:cc:01:0e:31:1e:c8:f2:13:b0:0a:bf:23:6c:ec:
6c:49:07:a2:87:04:b1:63:e1:80:91:0e:ad:09:16:
29:24:68:07:4f:c6:21:62:b4:1c:14:e2:30:47:d2:
af:35:9b:59:4c:c9:9e:15:22:ef:c6:c8:2f:39:09:
bd:ef:50:7b:34:31:2f:61:6f:6f:2b:c2:1b:54:ed:
c3:c1:d9:2c:6d:c6:b7:0f:58:d0:51:88:dd:00:64:
08:34:b0:8c:6c:94:55:d4:b6:62:7b:93:b9:72:89:
86:92:a9:ec:88:5b:b3:0e:cb:26:1d:7e:67:96:75:
05:29:5c:2e:73:3f:9b:6b:0d:14:21:b9:c3:69:95:
18:87:4c:70:fd:24:70:ab:ce:60:be:cc:6d:3b:05:
8a:fc:4c:60:ff:b8:38:fb:54:b6:4a:04:3e:5f:34:
03:89:5f:f1:57:96:60:0d:bc:5f:91:37:04:d9:ba:
a4:a4:84:37:8b:1a:42:a8:09:fd:f1:ef:98:2a:25:
8b:44:bf:5b:53:48:5c:aa:41:a6:0c:3a:2f:49:00:
00:3c:bb:33:75:cc:d2:92:67:3a:9f:b6:e9:a2:8e:
9d:21:ea:2d:ae:91:50:85:d1:19:df:fc:34:2b:8d:
d8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9D:5E:C5:FF:A3:E0:64:B5:27:7C:26:14:07:84:58:D9:D3:DF:40
X509v3 Authority Key Identifier:
keyid:66:6D:97:CE:B8:4E:9C:61:6B:FE:6D:93:57:6C:C3:3B:BF:4B:63:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zm2XzrhOnGFr_m2TV2zDO79LY-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/81235b-2e04-471f-8689-69baafdd9a6e/1/Zm2XzrhOnGFr_m2TV2zDO79LY-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ed:c1:b2:74:eb:b8:58:b4:fb:d3:4d:9a:30:8f:35:02:9d:
6a:14:d6:22:24:94:ec:db:38:00:84:70:d0:e9:f3:73:8f:bd:
0a:1e:ed:08:1c:77:52:d6:af:b7:cb:9d:d6:14:c8:70:68:b4:
bd:2d:5f:59:a6:61:ed:99:4f:95:d2:90:13:f1:7e:dc:fa:a0:
f5:64:f8:5c:8f:4a:3a:2d:9a:95:b8:7b:21:42:de:3b:1c:59:
69:a7:cf:c9:d4:8a:3c:c8:8e:f2:f6:54:5f:9b:c6:67:1d:ae:
51:9c:98:2f:a6:51:b2:6e:ff:f6:54:12:9f:6c:15:da:fc:ad:
c7:22:bd:02:48:23:51:45:c3:5a:4f:93:c8:91:54:ff:96:76:
a6:48:b8:bf:25:95:18:1b:39:3e:71:58:34:46:df:06:c6:47:
ca:a7:49:f4:15:13:a8:5c:81:39:10:fe:a5:04:30:2f:a3:f3:
91:fb:2f:f8:be:9b:19:7a:ae:e3:4f:07:30:10:3a:4b:db:d8:
3c:62:83:00:b4:d9:56:9c:95:a0:f8:82:5f:9d:3a:11:c5:37:
93:02:20:58:ce:58:06:e9:1f:4d:2d:80:65:6b:2b:b2:94:fb:
cd:61:77:d5:2b:5d:15:fb:31:af:fd:bf:46:56:6b:70:ad:1d:
25:f8:8f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:22:16 2025 by rpki-client