Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: sfJ5y021B7MPFsPXJN804FsaU/O3qoGTaHM2v18Et6Y=
Subject key identifier: FF:F3:58:4E:C1:BA:24:21:2C:B2:99:7E:4E:85:F7:EE:80:C9:B1:EF
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 019671C1B27D4520A7D4442954DA2B1964DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0576
Signing time: Sat 26 Apr 2025 11:00:41 +0000
Manifest this update: Sat 26 Apr 2025 11:00:41 +0000
Manifest next update: Sun 27 Apr 2025 11:00:41 +0000
Files and hashes: 1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: TtiuDhgJ3E4iJ+5qD+GH73X+3KnTPUQq5y1WqRwvm2s=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:c1:b2:7d:45:20:a7:d4:44:29:54:da:2b:19:64:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Apr 26 11:00:41 2025 GMT
Not After : Apr 27 11:00:41 2025 GMT
Subject: CN=fff3584ec1ba24212cb2997e4e85f7ee80c9b1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:c9:b0:61:d2:88:09:5a:37:93:12:8f:d4:
9b:5b:59:88:de:e7:b1:bc:d7:c2:89:6d:01:22:69:
17:ca:e5:63:c7:63:56:38:14:62:c4:6d:65:18:aa:
29:dc:c6:6f:f0:cc:7d:9c:73:d3:52:fe:52:97:15:
1f:a4:c0:d6:1f:7c:3a:0e:f8:7d:33:cc:ca:e2:5a:
ba:38:5c:ea:5a:bc:46:bd:ab:d4:85:8e:49:1c:37:
2b:03:72:39:f4:20:1d:0b:c4:f7:87:78:e2:3a:86:
49:05:23:49:69:88:60:6d:60:08:cc:df:78:df:14:
46:77:7c:ea:45:6b:2e:c5:73:ce:bb:3b:92:7f:1d:
26:72:4c:0b:c8:aa:25:5f:5b:9d:e5:d2:cb:41:79:
35:19:06:3c:7c:0d:6d:de:c1:3a:92:a7:6b:22:6c:
c9:1a:4f:42:3d:b2:96:a6:00:87:36:8c:c2:e3:7d:
a9:1d:b4:e2:55:c4:ba:c4:d9:39:d3:46:d6:c4:75:
60:eb:0d:82:bb:d2:84:eb:db:e2:4c:5e:55:f2:ff:
bd:3b:c4:96:67:60:0a:f4:d1:5d:73:ec:aa:66:0b:
32:bb:b0:0f:7a:4e:b1:a5:1b:55:7c:ce:3f:55:74:
5f:9d:2a:10:89:06:7e:48:0b:5e:56:47:8f:be:28:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:58:4E:C1:BA:24:21:2C:B2:99:7E:4E:85:F7:EE:80:C9:B1:EF
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b5:1a:45:04:27:49:b3:9a:5d:6f:de:07:e9:12:f3:33:0e:
49:4c:70:70:f3:11:55:16:84:ed:0b:9a:c5:d6:64:88:d8:da:
3a:2c:35:4c:09:34:21:4f:0c:60:63:3e:3c:56:89:8c:dc:33:
88:bf:77:5f:6b:ff:03:66:84:0e:6f:91:48:8d:b5:d6:61:a9:
d5:ea:59:ba:cb:e0:d2:1e:0f:c8:45:e9:ac:5b:dd:54:47:3b:
24:44:15:37:e2:07:97:2b:50:c5:13:5a:10:cb:f4:e3:35:23:
e6:b7:ad:b0:00:2a:04:f2:99:58:65:f1:c4:e2:3c:54:67:51:
b2:6d:b7:51:43:e1:33:36:fb:f5:7e:da:ac:33:22:7e:d4:45:
12:8d:cb:d5:50:c9:05:7c:9a:e3:c2:ab:ee:5f:b4:7c:a0:d7:
6f:fc:41:70:4e:33:fe:9d:dd:c4:e6:92:50:e6:db:fc:67:ef:
f0:c3:c5:f2:fe:50:b5:1f:97:99:31:6a:ea:b2:83:ee:53:27:
bc:f0:84:2e:e9:73:e1:60:09:3a:d7:da:d7:dc:8a:da:a1:cd:
91:d0:c5:3f:ee:af:b0:2d:88:ae:08:20:d6:53:79:5e:87:9f:
d5:7d:e8:1e:53:6c:f4:88:a3:82:6a:8b:cc:ab:91:83:83:64:
8b:96:44:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:49:01 2025 by rpki-client