Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
File: ZZq64rDK6GxBlrAgdluCOiAyB_w.mft (raw, json)
Hash identifier: gmey5gMLD36+tfHsTbvYka5mAE01KV1pRVEgXHoxy+0=
Subject key identifier: DA:2E:D0:E8:E1:98:82:A2:DF:FA:41:81:08:53:59:1B:0F:91:3B:89
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 0196808FAD009034BFCA5345E45344F95046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 08:00:21 +0000
Manifest this update: Tue 29 Apr 2025 08:00:21 +0000
Manifest next update: Wed 30 Apr 2025 08:00:21 +0000
Files and hashes: 1: O5xBU8VL53qxjYE82WOYcODpGTk.roa (hash: T0jCYlMlaGotp+vjckUxtBiuT4d14wsO10or/VNnLsU=)
2: ZZq64rDK6GxBlrAgdluCOiAyB_w.crl (hash: +GpSqW8vH7xGXKRMqqI5/2ot16lp03i56TMH7sy0x2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:ad:00:90:34:bf:ca:53:45:e4:53:44:f9:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Apr 29 08:00:21 2025 GMT
Not After : Apr 30 08:00:21 2025 GMT
Subject: CN=da2ed0e8e19882a2dffa41810853591b0f913b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:71:63:e1:2c:51:29:e8:97:71:37:97:55:
ec:25:dd:10:8b:4c:61:af:e8:4e:f9:1a:e4:db:80:
f7:25:47:3e:b4:2e:be:9b:76:12:29:f8:16:18:0c:
80:b1:f4:c8:12:64:86:6d:ab:55:bb:97:cb:a7:72:
8a:75:07:4c:65:1a:57:e4:63:ca:93:e4:a6:ba:74:
58:29:fc:40:7f:65:8e:68:a9:c4:8a:29:3f:aa:57:
03:ff:38:3c:62:c4:bb:fb:33:46:37:a1:ec:eb:c2:
df:f0:cd:33:b0:4c:d8:06:95:9d:be:a3:57:c4:6e:
54:b6:9c:f5:85:08:e6:c0:fe:7d:32:38:f4:c9:fc:
16:b8:4e:40:4a:33:e3:c7:14:46:4b:85:50:cd:0a:
54:f2:77:17:e6:43:6a:a3:b0:9b:65:a1:6f:50:ad:
ac:ef:b2:04:2c:13:f2:93:4a:15:8c:4b:ab:a1:f8:
39:67:ad:1b:9b:b5:8a:78:ff:ca:62:bd:42:f9:da:
06:ab:e8:36:cd:69:dc:c5:56:ae:76:bd:5b:e0:4c:
84:0f:9e:1d:be:56:bd:6f:b3:66:72:63:69:05:ef:
2b:e2:9b:0d:59:ca:37:2a:f6:3c:3c:72:6c:44:f1:
0c:f2:44:4d:a3:49:b4:22:68:89:2f:2d:ef:bf:6b:
52:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2E:D0:E8:E1:98:82:A2:DF:FA:41:81:08:53:59:1B:0F:91:3B:89
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1b:48:09:f3:57:6e:57:1b:07:bf:be:a4:bf:c1:a6:8c:93:
ab:91:6f:c8:53:76:b7:1f:6b:af:fb:c4:36:c0:2f:2e:04:64:
cf:a0:d6:bf:b5:57:ba:77:3d:31:5e:79:cd:9f:f7:0b:09:5c:
58:df:da:9b:9f:45:30:0f:fb:74:c8:8e:18:aa:66:3d:a7:a7:
2a:40:43:05:98:f5:f4:95:76:bf:57:a2:fd:60:f6:11:4a:a4:
d2:d0:d2:12:43:6d:36:44:df:ef:dd:9b:21:63:7b:99:37:13:
37:dc:52:29:4c:7d:03:a5:19:8f:6c:30:2c:7b:4a:26:09:87:
d4:4f:92:48:cc:0e:67:5f:80:19:f9:be:fc:53:66:c0:d2:1c:
01:58:b8:ff:74:df:f4:90:86:93:a5:99:1c:c4:e1:7e:1d:42:
35:cf:df:52:20:aa:72:bf:63:8f:6e:6a:d8:66:94:f3:54:80:
49:a3:5b:8f:84:36:bc:5e:fe:d8:22:dc:07:1d:7a:aa:e7:57:
e3:11:83:09:c9:8a:26:21:f6:b0:4f:05:5c:85:fe:24:21:86:
d7:a9:ba:78:43:c4:45:59:b4:af:44:a2:7c:48:c7:c0:57:b1:
c4:ae:83:0e:dc:b5:70:8c:42:dd:46:23:5c:2b:19:8a:3b:ca:
90:63:d2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:58:17 2025 by rpki-client