Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: 3lHXMUOLGDWghwxiVh9PIEtXgh4a3Cpi2RC12knk+Bc=
Subject key identifier: 96:A8:47:97:FF:52:EB:7A:01:7B:64:13:1E:51:E2:5D:7D:0A:8A:35
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0196722FA22503499C00BDB847A3B9F7A95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0974
Signing time: Sat 26 Apr 2025 13:00:46 +0000
Manifest this update: Sat 26 Apr 2025 13:00:46 +0000
Manifest next update: Sun 27 Apr 2025 13:00:46 +0000
Files and hashes: 1: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (hash: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=)
2: UojdXawnx16jHvQuUPhyRGr9AUA.roa (hash: Hr78TmcOhe37IFpeiMzuuAac0/dugWioMJ66bJbp/E8=)
3: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: DQIA+RaD02LS59ZH6nwSaXSDhJETD682yo61MDFjX28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:a2:25:03:49:9c:00:bd:b8:47:a3:b9:f7:a9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: Apr 26 13:00:46 2025 GMT
Not After : Apr 27 13:00:46 2025 GMT
Subject: CN=96a84797ff52eb7a017b64131e51e25d7d0a8a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:22:d6:79:a6:b4:8c:df:2c:1c:42:7e:22:
9a:e2:a8:05:96:02:8f:03:78:8a:89:a4:cc:f7:a9:
86:fc:3c:fd:5a:df:eb:d6:0c:e2:47:45:81:22:3c:
b9:2c:91:a0:e2:35:26:04:7c:37:49:cf:5b:b1:c3:
b3:36:06:2a:b1:3c:aa:10:c0:92:58:7f:99:ba:ea:
26:22:22:53:72:e5:6d:51:89:7e:81:f2:59:8a:d5:
21:52:0d:a1:57:a6:c1:8a:c7:ec:01:59:fe:34:40:
b2:47:79:73:05:e1:98:ca:a9:c0:73:10:5c:65:13:
77:47:24:b3:97:81:ef:78:53:91:56:a1:7e:97:7e:
76:de:68:a0:35:9f:a1:d6:47:31:bd:90:7e:e8:dc:
17:a8:48:c4:00:3d:30:b5:64:8a:26:de:a0:6b:31:
4c:26:c4:2b:76:cf:e7:a0:a4:25:cd:96:13:88:7a:
b9:96:db:d0:e9:3a:cf:af:80:c1:9f:ec:4c:49:ce:
94:d0:86:4f:f1:ff:17:ea:a4:ff:82:44:ee:86:9c:
21:0c:bf:12:eb:ff:48:32:96:76:af:35:30:a8:6c:
5d:2f:c4:1c:88:86:d2:46:f6:3b:f0:ae:77:42:88:
57:36:73:4e:fc:a4:b3:45:24:f7:94:fb:4a:bf:9c:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A8:47:97:FF:52:EB:7A:01:7B:64:13:1E:51:E2:5D:7D:0A:8A:35
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:8d:42:3f:bc:2e:f5:d8:f5:7b:44:89:cc:d4:61:cb:2e:82:
6c:84:24:cb:b0:a8:28:5b:9d:9e:1d:b9:9c:47:9d:a3:05:52:
e3:a3:0a:dc:12:08:5c:85:e6:4d:7d:3c:db:71:e9:ac:b2:03:
9c:3f:10:a8:29:25:1e:a9:97:3c:b4:e9:a4:18:4b:af:88:ed:
c8:95:36:dd:69:6e:ec:8f:40:bd:7b:bc:ea:e7:9c:c9:40:f6:
f8:e8:ae:42:b2:6e:d0:b6:4f:ce:77:82:5e:8d:30:d1:e1:74:
5f:57:ec:41:e0:3c:5f:04:b8:69:42:b1:fa:98:22:7f:e2:06:
7a:f9:b7:a4:57:36:d9:ee:78:44:c7:50:a3:10:c3:3c:e8:10:
87:31:40:d3:31:44:6e:99:83:b4:45:a2:69:e1:7d:61:6d:cd:
b8:73:1a:62:57:e9:34:5d:28:00:47:49:cf:37:e7:72:3e:3a:
fc:4a:f0:1d:52:c0:43:ef:1a:d5:3d:6b:2c:c8:b9:59:e2:df:
a8:0f:06:da:7d:e0:8b:20:79:69:6e:76:41:33:8f:ec:08:1f:
da:2a:91:34:d3:68:d9:5e:e6:d9:de:af:8a:71:e5:39:84:ec:
95:ed:b1:ac:be:53:d3:49:6c:59:67:2c:e0:dd:10:a6:47:73:
66:e0:68:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:50 2025 by rpki-client