Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier: jVAwk5pqqBFNl0wt+DkJlgo1mzoq6IL9m8J7cRo/3+k=
Subject key identifier: DC:BF:0F:EE:FF:CA:DB:D0:51:9C:E2:11:D7:B5:3C:19:96:C5:CE:48
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial: 019694BB6ABD8BEA15D8DC969409891DE601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number: 016C
Signing time: Sat 03 May 2025 06:00:32 +0000
Manifest this update: Sat 03 May 2025 06:00:32 +0000
Manifest next update: Sun 04 May 2025 06:00:32 +0000
Files and hashes: 1: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: Scf9kDVRy1oDq8Ak3OlD3jsvmfvkFPg8i3Trrs38BKs=)
2: gH87DnFCIVeDMCdzZgdgeo0PCRQ.roa (hash: pS4ieprkTVj7xtpm2D2Dk/zZSNZ4iIRcoOU3KEt530k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:bb:6a:bd:8b:ea:15:d8:dc:96:94:09:89:1d:e6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
Validity
Not Before: May 3 06:00:32 2025 GMT
Not After : May 4 06:00:32 2025 GMT
Subject: CN=dcbf0feeffcadbd0519ce211d7b53c1996c5ce48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:b3:e0:9b:a8:0d:fe:cd:89:ee:b2:5c:79:
f3:29:8f:8e:fa:bd:17:f7:47:39:55:17:3d:4b:b3:
d5:5c:2f:b1:8c:68:be:4f:ab:d6:c9:c6:4d:ef:13:
48:98:3d:72:00:6a:12:f1:38:51:d2:8d:c5:72:46:
18:0b:e0:9c:88:e0:a7:3a:7e:c9:45:60:67:06:bb:
33:40:1f:2c:ec:bb:5a:71:44:66:c6:7c:da:84:a1:
53:d5:7f:3f:7a:1e:ed:44:82:b8:ce:82:8d:39:3e:
fe:74:e9:96:ec:e4:4a:0e:08:1a:3f:50:53:ce:41:
a0:45:e5:d9:d7:1d:da:30:28:9f:2c:4f:9c:43:2c:
8d:8c:3f:f1:16:65:b9:52:43:68:1d:b5:14:64:10:
5f:26:ee:ba:0d:87:6f:32:cd:ca:d5:eb:4d:1e:1a:
e3:70:73:f9:ce:30:d4:46:33:5d:14:34:3d:2e:94:
da:b9:a6:16:cc:2c:f6:3d:0c:dd:1b:5e:d3:67:a0:
30:9e:79:53:95:ad:ec:6b:9b:02:14:ff:36:a2:c0:
43:7b:3b:e1:e0:8b:82:53:db:3e:0f:3c:ac:8a:74:
c6:73:ab:e3:92:b6:de:46:cf:d1:d4:0d:b9:7d:db:
ff:70:d1:f2:d1:1b:d7:df:f8:e0:72:ac:df:f1:fe:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:0F:EE:FF:CA:DB:D0:51:9C:E2:11:D7:B5:3C:19:96:C5:CE:48
X509v3 Authority Key Identifier:
keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b1:a5:9a:06:42:43:7e:76:a7:ce:7b:a7:c7:49:39:1f:88:
d2:38:a4:30:82:d4:89:9f:b2:cf:9e:f7:09:1b:4b:09:d0:d7:
21:40:a0:f6:fe:73:89:55:0c:fc:6f:2f:62:58:e1:ae:b6:fa:
5c:04:04:9d:31:8b:ca:58:af:8f:81:65:c2:bd:ff:6f:63:b9:
db:7a:ee:ba:c9:5b:0d:0b:ef:72:36:6f:db:8b:4a:33:27:43:
cc:be:04:15:e4:d5:71:6c:7a:2e:e9:96:cf:76:29:c2:29:25:
02:0a:44:09:dd:74:fd:5a:fa:2c:e8:d7:28:dc:f7:d8:d4:5d:
af:d3:50:de:bf:eb:70:d0:d4:ab:3d:7c:2c:60:62:60:a8:2b:
57:f0:e1:af:c0:a7:3a:05:92:c4:e8:5c:7f:67:79:91:ef:d1:
34:55:92:6b:60:2c:f0:92:a5:8d:2a:d2:29:e7:b6:33:3b:a0:
d5:91:0b:f1:71:ff:2b:f2:75:46:84:b7:c4:eb:36:f0:85:10:
e1:75:e1:20:69:26:e2:df:80:ad:a8:66:bb:33:c7:00:aa:c0:
79:1b:c4:94:28:f1:9a:55:7c:3b:90:48:f1:38:1a:59:b5:50:
b4:bd:b8:85:df:4e:56:19:dc:6e:34:6e:86:61:06:6d:3e:3c:
7b:9f:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:38:01 2025 by rpki-client