Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
File: zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft (raw, json)
Hash identifier: 2RITuncUDok1xBENrk7Rw46+MzW79mlKR0LQjz8AAyE=
Subject key identifier: 77:B6:D0:FB:C2:45:44:E6:B9:37:8C:19:CE:71:83:7A:35:57:E2:2F
Authority key identifier: CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
Certificate issuer: /CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Certificate serial: 019674FA2FF70DE93A9E02378B537A772A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
Manifest number: 0FC4
Signing time: Sun 27 Apr 2025 02:01:15 +0000
Manifest this update: Sun 27 Apr 2025 02:01:15 +0000
Manifest next update: Mon 28 Apr 2025 02:01:15 +0000
Files and hashes: 1: sQGDlHpoLDO9MGkxSeBWC8uppqs.roa (hash: 6KgDIkevhFyVfhdKRkIXWLxH6LsOjOgpwNrZ+fmFguE=)
2: zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl (hash: UlNehhH5xL6hd+L7sv4IbrMI8rfYtm0nYFGOBGga5wU=)
3: ziOY-6fncsLuQQzVu0Sf6c2Hbmk.roa (hash: AVAQzd3M8IxybV2CUgMzwoAYpnE92DpPd7dWpe04sBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:2f:f7:0d:e9:3a:9e:02:37:8b:53:7a:77:2a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5a535935a4bc786c1dd75b7f1087f13f3e0874
Validity
Not Before: Apr 27 02:01:15 2025 GMT
Not After : Apr 28 02:01:15 2025 GMT
Subject: CN=77b6d0fbc24544e6b9378c19ce71837a3557e22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:75:25:b6:10:0e:55:e0:c9:bf:66:c4:26:c7:
f8:40:a1:2e:76:38:91:1c:21:80:4b:74:40:3e:55:
3f:1a:9a:d2:09:de:f9:61:99:ad:fd:25:40:0a:a1:
d9:5d:d3:07:fe:80:8c:a6:3a:3a:5b:f2:ad:86:93:
26:89:fc:39:16:ab:fe:79:87:bd:30:fa:fc:37:c0:
cb:fb:18:a4:c1:52:88:14:a0:90:41:da:7e:aa:75:
7e:2b:42:75:52:36:64:1c:f6:3b:1a:5f:2b:b2:17:
2e:e7:e1:2e:1d:e1:68:9d:73:da:f2:57:c4:dd:7f:
07:49:65:0d:17:ed:7c:66:b4:94:50:c5:cb:40:41:
34:29:a7:d3:b9:b6:f5:09:cf:19:c6:92:88:54:f6:
d2:fc:04:de:8c:70:66:92:13:14:a0:d0:dc:04:e8:
7e:74:e2:2e:3e:5c:ab:bc:9b:9a:f3:3b:3a:0c:4d:
52:1f:b0:be:28:07:88:cb:1d:17:03:4c:35:a4:fa:
9b:ea:d9:db:38:3a:eb:db:3a:f6:57:48:05:31:44:
83:4f:ff:67:e0:4e:ed:0a:ae:0d:40:9e:b8:40:ad:
6f:23:e7:4e:7f:ae:04:9a:af:b2:4f:07:3e:f7:1a:
74:6b:25:46:d7:7f:9b:c7:81:d7:3a:24:b5:d5:1b:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B6:D0:FB:C2:45:44:E6:B9:37:8C:19:CE:71:83:7A:35:57:E2:2F
X509v3 Authority Key Identifier:
keyid:CD:5A:53:59:35:A4:BC:78:6C:1D:D7:5B:7F:10:87:F1:3F:3E:08:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVpTWTWkvHhsHddbfxCH8T8-CHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b9aad5-cfe2-4480-ac5e-05c13f890b9c/1/zVpTWTWkvHhsHddbfxCH8T8-CHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:c1:c0:32:f8:b2:66:9d:07:29:83:7b:b3:95:d4:7a:14:
68:30:8d:8c:5c:14:7e:26:f5:29:2b:2e:22:c6:a7:ea:05:fc:
83:af:62:44:93:04:97:58:17:d8:d3:6f:ae:32:3c:14:c7:66:
9b:28:78:0c:37:d4:ae:75:25:5f:a5:b4:6e:a1:48:07:5f:37:
00:f3:f9:4f:af:8c:67:71:69:11:99:64:23:7b:c3:27:14:57:
47:2b:2e:84:b9:a8:f2:83:c8:25:8a:52:b9:9f:35:f5:37:b8:
9f:27:4c:fa:ad:84:08:72:94:80:34:2c:40:ca:3e:45:00:45:
43:c4:c1:73:01:e5:db:87:23:82:12:98:37:cf:5d:63:a4:fb:
93:42:1e:87:63:02:a3:6e:1c:22:34:75:99:81:0a:aa:fc:8e:
e2:ae:03:87:49:a2:57:67:02:04:02:07:78:d0:fc:2f:10:b7:
c0:b8:a5:15:e2:92:79:a8:8f:6c:ed:0b:b0:db:19:10:15:f3:
66:a7:39:8c:74:84:15:2c:27:3e:28:80:1f:ed:4d:30:39:40:
35:99:05:7f:b0:ec:82:43:f3:dd:65:5d:ee:02:8b:ac:fb:7c:
48:a8:1e:48:73:c9:9c:37:ad:c5:76:45:00:5b:88:5a:d5:ad:
cb:eb:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:50 2025 by rpki-client