Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: kMSIFdraPJTYblts5L1SdMDt9mO1sf+tG9jl9+d35GM=
Subject key identifier: FB:06:AE:47:D5:AF:14:56:97:5F:FF:3A:7D:18:FE:51:4C:E4:31:65
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 0196895C57835E3903AF558192386200D8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1518
Signing time: Thu 01 May 2025 01:00:52 +0000
Manifest this update: Thu 01 May 2025 01:00:52 +0000
Manifest next update: Fri 02 May 2025 01:00:52 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: dimmrrHpPVqKtCp0Dxu2LEpokCbQx0U+M3esm0HZ4Kc=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:57:83:5e:39:03:af:55:81:92:38:62:00:d8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: May 1 01:00:52 2025 GMT
Not After : May 2 01:00:52 2025 GMT
Subject: CN=fb06ae47d5af1456975fff3a7d18fe514ce43165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:16:c0:24:5f:14:d7:2f:e7:5a:ae:1e:c2:ec:
06:fc:db:b4:a7:8c:24:f9:c8:03:44:53:bf:d2:58:
fb:d4:99:1c:63:5c:ac:e5:90:7e:9d:3b:3a:20:b3:
2b:cf:5d:18:d1:aa:be:19:06:f2:e2:6b:51:07:f4:
6e:67:88:c9:6f:2b:43:c6:6e:ce:0c:32:18:83:2c:
d9:8f:3d:0d:7b:33:6e:40:1c:e9:0a:f4:97:d2:a3:
55:d4:51:62:23:6e:07:da:c1:50:58:37:61:4c:19:
8f:c3:5e:96:18:cd:f8:39:23:33:f7:38:db:76:57:
f3:70:a5:b5:20:fb:b6:dc:b3:5a:ed:89:e5:69:b0:
a7:5c:d6:93:db:30:b7:6f:81:7b:f8:72:d5:81:d7:
94:f1:c1:49:b1:ed:04:72:ca:b8:64:b6:a1:30:a6:
8b:fd:5f:65:b6:30:41:d7:6b:b7:c8:1f:e9:30:d8:
63:89:68:81:c9:83:e9:b1:57:91:95:16:f3:56:82:
96:62:27:7a:8d:ea:81:30:9c:43:6e:8c:51:84:08:
7f:a3:43:e2:a4:1e:4c:54:b3:4d:31:c2:4e:10:74:
24:e6:52:84:59:61:7b:cc:ee:b9:59:86:e3:d6:67:
16:d4:0f:86:4c:9e:78:3e:18:b9:71:60:f0:c8:42:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:06:AE:47:D5:AF:14:56:97:5F:FF:3A:7D:18:FE:51:4C:E4:31:65
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b1:0a:10:1f:57:c3:f3:c9:8d:f4:cf:6f:3b:70:a8:09:c3:
ec:b7:a9:7e:ad:41:c8:d3:f1:b3:cc:4d:8e:19:42:dd:fe:41:
71:c9:59:4e:a2:44:bc:ba:68:a1:11:4d:14:2d:15:49:04:15:
cc:a8:51:72:fb:27:fd:cb:ea:bf:d7:dc:b6:cf:92:ec:3f:df:
65:98:84:f7:a6:f0:fe:79:a6:c7:2a:7b:ef:cc:f5:c8:31:93:
42:8e:6d:c7:37:19:26:4a:b3:a3:42:1a:b1:c9:98:5e:e4:ec:
18:e3:25:04:29:dc:5a:7f:57:82:18:ca:35:a7:94:09:5c:c2:
6d:95:b7:a5:2d:87:16:97:a0:51:ab:0e:80:9d:97:12:47:cd:
cf:20:77:00:90:6e:3d:b4:9e:e0:d7:c5:0f:c1:63:df:c7:ee:
93:84:7b:1b:6b:e5:95:21:32:06:cb:c7:2a:88:63:b4:42:04:
38:3b:a2:f0:4b:c4:ea:51:1c:88:e5:ac:78:ba:d8:12:84:68:
89:da:89:d8:e5:77:13:2a:f5:d0:b5:c0:e9:e8:3f:9b:0d:e3:
df:73:f8:44:1e:fd:00:07:57:29:70:c3:a8:99:a1:08:33:68:
9b:85:2d:29:ed:75:f0:ff:f4:fe:f9:8a:65:6d:e6:02:29:c7:
3b:49:61:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:57 2025 by rpki-client