Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
File: zZGetcIQg2AVXef7TyFqBVrjHwk.mft (raw, json)
Hash identifier: q/Na4mpJWJE31501fjK7e6iz+cPlfijPMo/Loo8mkps=
Subject key identifier: B0:C8:36:7F:FE:78:78:14:89:8E:60:B7:7E:54:20:D8:5A:A8:7D:3C
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 019680C705FF2DAE4D7A46C7237A11B5E6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
Manifest number: 151C
Signing time: Tue 29 Apr 2025 09:00:48 +0000
Manifest this update: Tue 29 Apr 2025 09:00:48 +0000
Manifest next update: Wed 30 Apr 2025 09:00:48 +0000
Files and hashes: 1: QrfYxaTHhTSXop-ghzKRc2pRZhA.roa (hash: PMTolMEGmvsQvzQ9GGSfcadwLJNVLNi1hDvyzf87EUg=)
2: ahq3UrSwaIQvDkIrorl5O5ztGvQ.roa (hash: rt6AciC29jxzpxpxz0n9wcvl0rWHWyCvo8/vyh12WeY=)
3: zZGetcIQg2AVXef7TyFqBVrjHwk.crl (hash: uwTeNcRYl+8zw4AWTN996x4/tBtmcssltDM9SKLf6Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:05:ff:2d:ae:4d:7a:46:c7:23:7a:11:b5:e6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Apr 29 09:00:48 2025 GMT
Not After : Apr 30 09:00:48 2025 GMT
Subject: CN=b0c8367ffe787814898e60b77e5420d85aa87d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:d5:5e:d7:c6:c2:00:93:88:0d:d3:ce:9c:
0c:a1:a0:0e:92:32:e3:7d:da:b8:bc:f0:91:1c:d5:
81:bc:e9:62:7e:c8:ba:90:4f:40:b1:99:37:a9:4c:
05:3a:34:02:c7:ca:f9:7b:ef:0b:f5:b1:df:4e:8e:
06:ee:c8:b8:07:bd:47:7d:90:5b:ef:3d:b2:2a:dc:
85:68:3b:fa:72:90:b3:ae:91:f1:28:21:89:30:4b:
8e:fb:56:5b:41:bd:45:10:41:87:51:45:67:c3:0c:
5c:cd:db:a5:d3:46:c4:63:b7:fb:11:7d:7f:ce:12:
10:af:14:2d:0b:76:5a:0c:c5:25:89:2d:93:56:b2:
7d:a4:db:21:6f:07:3b:08:ac:6e:a3:5f:fd:a3:09:
05:7d:f3:b3:06:5d:28:fb:41:da:a2:0f:05:9f:1e:
57:01:9f:b6:d3:58:b9:d7:44:15:b3:7a:96:e7:cb:
60:d3:14:ae:a7:73:9e:9b:fd:3b:54:04:35:b4:55:
2a:bd:04:af:34:6a:87:bd:08:9f:f5:50:0c:c0:1a:
53:fb:4b:79:f3:51:6c:8e:55:28:5f:ff:31:c9:3f:
44:0e:06:e3:12:68:f9:aa:f1:ab:a8:33:a0:96:dc:
1d:9a:dc:42:6a:54:5b:64:f4:c1:28:b8:51:9a:77:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C8:36:7F:FE:78:78:14:89:8E:60:B7:7E:54:20:D8:5A:A8:7D:3C
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6d:0f:af:8b:f2:34:be:a1:d0:5d:3a:61:6c:1f:d6:a5:89:
2a:15:63:37:ef:af:b9:6b:98:11:8e:2d:ff:c7:e0:49:12:bb:
79:48:4c:f7:1e:af:83:47:82:f4:40:3a:af:a3:b3:44:89:07:
a6:e7:96:ce:f4:83:85:0d:e7:a8:91:1c:90:c1:53:cb:d8:91:
81:49:34:9b:56:f7:60:40:56:30:b1:db:6a:ff:68:28:36:55:
08:e2:e7:31:a8:41:59:48:1a:67:86:c0:e1:6a:50:00:8d:b0:
c5:34:36:3a:8b:90:3f:f6:2a:52:db:0d:d2:a2:fb:cd:94:a1:
b2:d6:d8:80:1f:63:e0:5c:eb:ed:10:ee:b6:6d:23:23:37:13:
c7:3f:18:fb:86:59:42:de:8c:f2:a1:d0:c3:07:1b:9a:46:96:
27:66:d4:ea:cc:7f:e9:dc:4f:8a:a1:2a:2e:fc:b3:05:28:e2:
06:4b:22:e5:2d:f8:8b:64:ef:3d:d5:be:31:0f:2b:ba:cc:cb:
70:d0:93:b7:bb:20:2b:9f:82:e9:0a:8f:85:38:2e:38:f4:b3:
04:da:36:f2:37:1e:bd:19:03:dd:6c:f7:0d:b3:3a:a6:9d:c8:
15:21:40:80:a3:c0:22:0e:c9:de:6e:b1:1f:86:72:59:85:7b:
42:9c:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:24:27 2025 by rpki-client