Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier: pFKlJFZVnU5QgjQtMfcbHsGSzXACKt/CnfslfsYaNIk=
Subject key identifier: CA:DF:10:41:89:12:21:E6:C9:15:F4:DB:75:54:20:08:E2:D0:95:2A
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 01968359F2DBE5017EED7BAD748DE549969F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number: 151F
Signing time: Tue 29 Apr 2025 21:00:32 +0000
Manifest this update: Tue 29 Apr 2025 21:00:32 +0000
Manifest next update: Wed 30 Apr 2025 21:00:32 +0000
Files and hashes: 1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
4: DLVyMXEFc4HCeGjKSW4Cx2Pnr78.roa (hash: ZQmXU2vc4afgIjjUGFHs8aXtb7R/hrU5Q7fUBkSefzs=)
5: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
6: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: 7u7odo04aKF8LFdYaxQFmTITr8vtbr/kS33YJs0hjNI=)
7: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:f2:db:e5:01:7e:ed:7b:ad:74:8d:e5:49:96:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Apr 29 21:00:32 2025 GMT
Not After : Apr 30 21:00:32 2025 GMT
Subject: CN=cadf1041891221e6c915f4db75542008e2d0952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:67:64:65:ac:35:a0:a8:1c:ef:41:47:79:
e1:c0:6c:9c:d8:11:ca:f6:60:5b:92:eb:71:13:31:
3b:dd:27:8c:6b:47:4e:44:bf:18:9d:9a:af:c8:89:
0d:e2:3e:28:6b:c7:8a:a4:53:d7:41:30:15:cd:6c:
2d:75:77:62:f2:b1:6d:b4:ed:4c:f5:f4:52:98:e0:
5f:c8:b5:93:cb:f5:c6:61:80:87:1f:2c:70:16:34:
8d:34:86:f6:55:d6:f6:55:95:33:47:f1:52:59:66:
cc:ad:07:65:1f:2f:84:e1:09:25:23:52:2f:3b:4e:
db:95:1f:7d:0d:08:fe:62:cf:58:a4:1e:93:68:40:
99:24:3d:7a:91:6c:7a:40:06:7b:52:f3:05:5f:85:
50:21:b5:c7:a3:fb:9d:ae:6a:2a:4d:ff:80:ac:c1:
e4:90:b7:da:c0:6e:5e:69:5c:b6:f5:a3:23:82:15:
63:6c:a9:80:b0:5f:cd:93:01:b7:1f:06:35:ae:99:
03:14:7b:15:ff:02:85:6f:b2:fc:be:61:94:a9:c7:
e6:09:78:e4:70:1a:73:05:3b:8e:36:e0:d9:2e:3d:
94:75:61:56:45:89:26:0b:29:90:d0:00:40:ad:98:
fb:3b:56:d3:d9:fe:82:86:9d:0d:09:70:e6:ea:3a:
d0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:10:41:89:12:21:E6:C9:15:F4:DB:75:54:20:08:E2:D0:95:2A
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:04:f5:00:e5:fe:f7:b9:49:89:02:5e:fa:cf:20:2c:3a:4a:
56:e9:db:5a:fe:df:d4:cd:2c:b7:11:54:d7:3e:7a:b2:aa:28:
7d:be:f9:5b:2e:23:d7:a7:31:57:d5:b7:84:08:5c:3e:d8:53:
42:7f:f8:35:5d:77:11:7d:54:51:0d:ee:e3:b7:fc:ad:ba:27:
03:5f:d0:55:7c:26:1a:d3:4f:57:db:e8:5d:bf:03:5f:8b:60:
5a:6b:f1:cf:51:cf:b5:15:57:19:48:78:e0:71:4e:9e:13:5f:
e9:40:d8:c0:d9:ef:c3:13:24:4a:64:0b:8f:bc:31:54:c6:a6:
fe:7a:90:90:2a:77:43:11:e7:c1:79:c4:47:fe:cf:05:a8:83:
4b:0f:c4:dc:16:8e:38:04:92:b3:96:e4:90:ba:3a:84:89:4b:
1a:c1:82:fd:5e:31:c1:6e:cb:27:18:80:c9:c2:c3:57:87:46:
dd:12:3b:1c:96:bd:27:cf:88:ea:e7:84:0c:a7:86:20:66:c5:
1b:3a:80:67:42:ff:53:4f:ea:6b:69:e6:6f:c0:4a:15:d7:36:
06:8c:88:77:3c:a5:1a:f8:a6:77:5d:8f:25:53:51:81:01:6f:
cb:58:dc:09:dd:46:34:93:41:ca:d6:22:89:55:1d:df:f6:5d:
1c:d6:bc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:28:53 2025 by rpki-client