Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
File: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft (raw, json)
Hash identifier: ghEqFYf46wjMSlpXjGUIlSn85+lI6vk0SWzmD8ZLH+s=
Subject key identifier: 00:84:97:75:A8:32:06:BF:A5:AE:B0:1E:F8:68:17:76:59:AC:98:3E
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 019684A3A7F2444F0151ABA13CC6EDDB4F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
Manifest number: 09CD
Signing time: Wed 30 Apr 2025 03:00:39 +0000
Manifest this update: Wed 30 Apr 2025 03:00:39 +0000
Manifest next update: Thu 01 May 2025 03:00:39 +0000
Files and hashes: 1: ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl (hash: G+RuzRwixsRWdB2dKvdAcRcvPmrDuDN6P8e6JekjQHI=)
2: m0yxPUG5G1jn_MsAVOEXQRSr8zg.roa (hash: HSL9sr8GMkWirsR9VZ1nNGJBpCkP+fezV62fm9ODPZ4=)
3: wSK3TEqaONdwtqYByktpLoC9XxM.roa (hash: VuQyagVUYb2xT4bvHSmNEYjaX9Dtg0YekkLzWO6iXDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:a7:f2:44:4f:01:51:ab:a1:3c:c6:ed:db:4f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Apr 30 03:00:39 2025 GMT
Not After : May 1 03:00:39 2025 GMT
Subject: CN=00849775a83206bfa5aeb01ef868177659ac983e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:54:fc:81:e7:93:a2:b7:33:ff:8b:da:61:
82:ea:aa:02:15:7c:bc:33:7a:21:a8:6f:52:3f:e9:
f5:f9:53:ee:41:69:b0:03:bc:8f:24:01:bf:92:7a:
d5:5f:09:91:00:7f:b6:e8:64:d1:52:36:24:c5:4f:
b5:91:9f:82:9b:8c:5e:0e:af:09:49:6c:78:00:78:
d4:e3:4e:d5:26:78:84:e6:56:f6:bf:9a:2d:4f:a9:
48:da:44:90:c9:63:4f:03:21:35:9d:ae:a5:d7:17:
f7:8a:15:8d:c2:7c:04:3e:14:d8:1f:06:9e:5e:86:
51:07:84:80:dc:1a:13:69:a8:41:6f:a9:5a:bd:43:
45:d1:e9:63:a2:eb:e0:40:60:85:df:79:3a:25:0b:
b0:b4:e4:a0:ad:ce:42:ca:10:de:ac:3b:55:5a:03:
3e:7e:15:6b:f6:c3:f0:d6:40:fd:d1:19:84:48:9c:
15:12:ae:de:e7:92:43:1b:47:35:b0:e6:78:b7:74:
a0:c6:b4:74:ce:93:55:e0:4b:2e:0d:7a:ae:cc:54:
33:cf:0b:6f:24:d6:10:f5:63:b7:8a:45:6f:e0:1d:
b6:12:fe:0d:85:b4:bc:dc:25:b0:16:19:70:28:2d:
fb:b5:5c:2a:38:3a:5d:9c:fb:fd:9c:f7:ab:04:5e:
6a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:84:97:75:A8:32:06:BF:A5:AE:B0:1E:F8:68:17:76:59:AC:98:3E
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:49:96:a3:57:88:a7:9e:99:fb:7c:bb:ab:d1:70:32:ca:ed:
c7:f4:e0:04:96:4a:f6:15:f9:cb:16:af:4d:66:c1:03:7e:14:
4f:53:37:46:72:a7:87:6e:b6:12:b8:11:d6:8b:50:2d:f6:71:
e4:0d:e1:6d:65:9c:a6:97:11:6a:55:11:c9:63:e1:12:c0:bf:
13:82:56:e8:f0:60:cf:b4:6e:36:85:e1:ab:b9:bc:c8:50:e2:
91:25:76:8d:9e:a3:29:e0:13:1d:0b:db:2b:6e:7c:f4:5b:62:
d8:d9:9e:d9:e2:69:de:c0:43:af:9c:1b:77:89:a6:d9:bd:a7:
4d:23:be:bd:14:13:c0:4f:21:a1:b0:95:2e:fa:5f:1a:e8:0c:
57:c3:93:16:47:ab:63:0c:4c:68:fe:e0:2b:b3:c8:7c:45:bb:
98:d7:56:87:51:f2:1f:c1:d1:33:d4:f3:8a:af:9f:00:6c:2e:
3d:73:29:05:2d:80:5a:37:aa:15:14:e6:6d:77:f8:60:30:46:
4b:e4:e9:3f:44:b4:7a:c4:2f:de:2b:57:6e:a6:70:d1:96:e2:
88:1c:b7:db:76:e6:e6:5c:df:fb:41:f8:25:76:39:35:4e:32:
fb:11:2f:94:cb:69:01:a9:f8:b3:90:42:97:31:05:2d:d9:23:
72:23:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:25 2025 by rpki-client