Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: dhLN3xa0Xq3vTbV1gJjhVJJwNS4QNTS4xxPo19R4N8Y=
Subject key identifier: 0F:3E:93:5B:DB:46:F2:5C:FF:B1:DB:DE:71:5C:66:32:97:B9:07:9A
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 0196753027AAE2E93C0245917BF57471E1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0A59
Signing time: Sun 27 Apr 2025 03:00:12 +0000
Manifest this update: Sun 27 Apr 2025 03:00:12 +0000
Manifest next update: Mon 28 Apr 2025 03:00:12 +0000
Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: ROXN0lqHbnn4uJTcLaWv2jc3v0OXkoO0+FLNhXstOEA=)
5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:27:aa:e2:e9:3c:02:45:91:7b:f5:74:71:e1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Apr 27 03:00:12 2025 GMT
Not After : Apr 28 03:00:12 2025 GMT
Subject: CN=0f3e935bdb46f25cffb1dbde715c663297b9079a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:02:70:7b:d2:80:41:07:d1:57:ba:aa:89:
2f:0f:ae:08:94:3b:d3:47:56:6d:28:f8:77:84:00:
ee:57:7f:2d:d4:4c:8a:60:16:bb:e2:5c:30:52:c2:
36:df:34:3b:e2:da:ac:fa:b7:aa:1b:56:bc:ff:9f:
e7:0f:2a:16:37:57:48:ad:89:1d:37:0f:30:2d:c3:
a9:c4:10:56:81:ae:c1:13:ad:32:bc:cc:fc:85:b6:
cd:81:85:2a:d1:b5:be:3b:2f:ff:a7:9f:12:fa:26:
54:77:1f:79:dd:cc:ff:3e:35:96:ae:ea:b5:32:25:
9f:c1:76:16:1d:02:d6:d6:71:54:61:bc:bb:90:07:
11:2c:c3:09:df:cb:f9:65:14:e8:9e:64:4b:bc:76:
4d:bf:3c:07:ce:be:24:ec:06:bc:e3:a6:eb:c4:a4:
eb:5f:2e:bc:d9:70:85:a0:9e:1c:28:91:42:13:93:
3a:f6:31:4d:d1:00:b4:db:27:8d:2b:7a:cf:90:27:
82:8b:50:22:fd:77:a0:90:3a:69:28:4b:9a:62:75:
d2:14:75:bb:2e:a7:bb:3a:e3:d7:d9:3d:cc:c3:08:
dd:7c:53:9a:53:9c:e1:dc:99:70:4b:fa:82:db:71:
fc:d8:68:13:c4:f4:31:d5:79:94:6e:5f:6f:79:e5:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3E:93:5B:DB:46:F2:5C:FF:B1:DB:DE:71:5C:66:32:97:B9:07:9A
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ec:a6:e8:91:d3:bc:58:2a:10:a0:d8:30:2e:78:0c:54:4d:
77:dd:a3:3f:09:af:f4:05:1c:a1:a3:16:fa:26:81:ff:e1:fc:
ef:25:2a:90:e6:53:4b:a3:1f:37:03:09:ac:f7:ca:c5:76:93:
14:f8:7e:24:d9:ca:b9:b0:87:6c:61:c8:aa:7d:16:ca:bc:0a:
55:05:5c:e1:48:14:9e:55:07:6a:66:9c:a3:d9:e7:79:1c:d5:
54:83:02:97:9d:d5:2a:7e:88:b0:6a:af:28:9a:77:c3:5f:a6:
e7:f8:6a:ab:45:01:df:9e:ad:49:79:4e:67:ef:1f:6e:91:4c:
17:0f:78:fd:6d:19:dc:e0:0a:5d:3b:c0:6d:b1:db:83:0a:23:
88:e6:de:b7:be:1a:e7:32:bc:75:a1:fc:4b:b3:d8:a4:e5:b1:
9d:9e:8c:9a:26:7f:08:6c:2d:09:ec:3d:56:bf:f8:99:a0:38:
df:5c:57:6e:8f:c7:51:12:d6:3d:39:d5:9a:be:50:08:61:4f:
c0:07:88:ee:8c:88:d2:1c:51:d5:57:28:57:8e:0c:0b:45:25:
cc:23:32:38:cd:d0:dc:2e:21:74:52:17:e6:29:11:11:ec:32:
f8:3d:17:2f:be:a3:b7:3a:53:18:df:39:81:a0:5a:35:ba:00:
a1:28:c6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:48:24 2025 by rpki-client