Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: 2qjcGokygDt6tvwinW358cgvU6Gg0S83cyvX370X1RU=
Subject key identifier: 28:05:75:C3:EF:7C:65:E9:CA:F0:2E:C2:E4:BC:70:E6:D1:98:4C:36
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 019679B20A5E830D2E830F54EFEAF03C365E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0DC6
Signing time: Mon 28 Apr 2025 00:00:33 +0000
Manifest this update: Mon 28 Apr 2025 00:00:33 +0000
Manifest next update: Tue 29 Apr 2025 00:00:33 +0000
Files and hashes: 1: 7KyvX2ge4BVj5LFVdOXXXemAkCg.roa (hash: Hc/1xIYUTBtB+16ukbbri4uoGukybMhi3rtoBVu7s8I=)
2: 8k4-DaJSUcckd3W12t-LKgUPXOY.roa (hash: FEgAXATsq5yqV5pU5s6y/DGmTndCuBZeOPWD+L+m2zs=)
3: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: Y5OfGrAxXa9+P0CqPhocmI+fDupg/svwgoDadci1vis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b2:0a:5e:83:0d:2e:83:0f:54:ef:ea:f0:3c:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Apr 28 00:00:33 2025 GMT
Not After : Apr 29 00:00:33 2025 GMT
Subject: CN=280575c3ef7c65e9caf02ec2e4bc70e6d1984c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:01:05:32:0a:e1:2d:d4:cd:96:cb:cf:80:
2d:b2:df:fc:ea:bc:bc:12:72:1e:82:ed:23:b6:93:
58:dd:e3:a0:8e:bf:94:82:84:60:3a:fb:aa:d0:25:
29:49:3b:11:e8:20:e8:b2:de:72:ff:98:4e:73:04:
de:24:d4:1d:dc:2b:0e:65:e7:df:60:17:0f:87:14:
ea:c5:80:72:eb:d7:3c:e7:98:de:3a:51:1e:77:3c:
d4:33:47:1c:b8:58:b4:22:78:fe:dd:9f:ab:89:e9:
3a:95:30:74:fc:20:7e:14:71:07:7b:91:97:c9:08:
76:38:be:39:e3:51:c9:43:d8:62:2c:f5:ff:86:87:
2b:67:b3:5a:de:03:17:a1:6e:15:b1:4e:b2:cd:cc:
62:9a:87:3b:d7:dc:a0:3b:ae:7e:d6:65:66:e2:e1:
88:f5:d0:6b:26:cc:f4:71:fe:be:98:39:1a:db:d7:
fc:7e:ca:ba:e3:fa:1e:69:f1:2f:7f:ed:26:1a:24:
8b:fd:95:77:18:49:f8:38:0a:cd:df:eb:77:66:aa:
cd:80:49:ea:0f:62:29:1a:42:ea:d5:2c:c4:2e:d2:
51:aa:26:1b:9d:4f:18:1a:d8:6f:54:90:0b:a1:e6:
40:91:e6:ae:22:8c:9e:0d:4a:f8:2f:37:91:96:c4:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:05:75:C3:EF:7C:65:E9:CA:F0:2E:C2:E4:BC:70:E6:D1:98:4C:36
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5d:ed:45:fe:13:ae:6e:09:f4:1c:81:fd:4d:6b:18:d4:80:
dd:30:97:7f:ae:dc:5d:86:7d:a1:87:95:78:32:4c:90:a9:ae:
f4:c8:d1:46:c3:10:07:e7:71:58:44:5e:55:aa:6c:1a:a2:3d:
de:8c:ac:79:67:97:ac:81:e5:a8:01:7e:0d:39:79:52:55:f0:
cb:4d:87:f9:05:f1:42:04:e7:9d:a9:96:21:15:da:cc:ad:c9:
40:d1:1f:cf:1b:ca:cb:e4:40:91:0a:1b:bf:ce:e6:ef:fa:9c:
4b:2b:0c:37:8a:37:34:2d:be:30:d0:5b:28:b5:f4:83:12:f6:
c4:36:d0:86:c8:e0:1e:f3:de:b9:11:08:14:9b:d0:ea:3a:70:
d3:6d:dc:9e:54:76:28:57:1c:a6:85:f4:22:25:72:5e:cb:45:
21:11:3e:33:3e:be:b1:b7:55:d4:9f:4f:b9:89:d3:e6:37:f5:
67:8c:9e:69:67:e5:6a:79:7c:76:88:46:32:f8:48:ac:de:cb:
55:0d:fc:18:33:96:02:1f:f2:83:c3:f3:f4:f4:8d:12:ac:64:
58:45:48:57:44:80:49:a7:df:33:11:d5:7e:5b:c9:fd:57:4c:
e0:fd:00:50:16:ba:9b:08:e6:26:c5:6d:40:1c:b3:32:26:c6:
a8:f8:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:14:53 2025 by rpki-client