Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
File: ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft (raw, json)
Hash identifier: 1gI6pcjncsKw+KXWDMxGChz9h87A/xKGPGRL4Ko9Yzo=
Subject key identifier: 99:1D:F8:3D:29:B7:38:D1:5E:9C:3F:06:B4:92:61:D8:61:FB:BE:01
Authority key identifier: 66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
Certificate issuer: /CN=66f04275253f967384c4973758a54b7fd085fe45
Certificate serial: 01967FEB35B938393958D66CF041F9AED622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
Manifest number: 1362
Signing time: Tue 29 Apr 2025 05:00:43 +0000
Manifest this update: Tue 29 Apr 2025 05:00:43 +0000
Manifest next update: Wed 30 Apr 2025 05:00:43 +0000
Files and hashes: 1: 0Iy8NsUXTA0psQPyCINqg9pVI58.roa (hash: yvEGBqidyX57HbZdF/uHS+mpQFnEILAUnlH+f4viPS0=)
2: ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl (hash: KPkkW3tUvTnkgtvEv1SxdLPuVvwl59eWUHxxm7+SWEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:35:b9:38:39:39:58:d6:6c:f0:41:f9:ae:d6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66f04275253f967384c4973758a54b7fd085fe45
Validity
Not Before: Apr 29 05:00:43 2025 GMT
Not After : Apr 30 05:00:43 2025 GMT
Subject: CN=991df83d29b738d15e9c3f06b49261d861fbbe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:0c:f4:16:bb:98:88:5e:3a:b9:9f:74:7e:
f7:8f:e7:0c:bb:65:74:af:1a:9f:ac:a5:db:38:2e:
b0:70:de:2c:ab:7b:76:b9:ab:9c:72:59:af:6f:c5:
b8:58:69:7e:ab:61:49:a9:38:55:c6:cc:1f:51:9b:
87:a8:9c:28:95:f3:14:00:aa:77:ed:9b:21:10:97:
4a:9e:5a:5c:05:9f:86:40:5a:1e:7e:fc:76:57:d6:
35:7e:f4:49:8c:46:13:15:2e:5b:07:7d:cf:96:88:
b9:29:8b:e1:bf:6c:55:92:24:71:c2:5d:36:ef:97:
cb:0d:b1:6f:88:2b:05:86:43:6f:2c:76:ee:fc:c4:
9f:75:2a:20:11:3c:22:e2:72:89:dd:55:c2:b2:4e:
26:b9:12:eb:78:34:86:67:62:f7:34:18:e9:09:36:
ec:25:b1:6c:a1:be:a7:c2:49:e3:a1:8b:22:10:70:
97:fd:5d:73:64:38:63:c7:d8:7e:80:d0:54:2a:2b:
59:5b:fe:76:a8:f4:82:64:e7:e1:12:dc:8a:1e:39:
8f:be:15:9d:da:5e:a5:8b:cc:7c:68:cc:95:0e:0e:
5a:b1:eb:55:fd:5b:2c:f8:b3:b9:50:94:25:b3:ab:
bd:fa:73:78:f5:96:82:0b:3d:22:c3:b0:d9:f8:11:
06:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1D:F8:3D:29:B7:38:D1:5E:9C:3F:06:B4:92:61:D8:61:FB:BE:01
X509v3 Authority Key Identifier:
keyid:66:F0:42:75:25:3F:96:73:84:C4:97:37:58:A5:4B:7F:D0:85:FE:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvBCdSU_lnOExJc3WKVLf9CF_kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9e16d2-d3b9-4efa-9c3d-e4961852c8b6/1/ZvBCdSU_lnOExJc3WKVLf9CF_kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6b:42:76:af:6a:fe:7c:3d:89:98:c0:fe:90:6b:c9:e5:68:
a8:6c:07:0f:81:2f:f4:96:9d:6f:9f:d6:76:1b:35:fd:e6:e3:
f4:67:e8:75:33:94:56:9c:27:50:ca:53:3f:2a:99:f0:c5:68:
1e:6e:d9:7d:ec:db:72:27:7e:12:a4:66:e2:bb:c6:40:8b:00:
fa:42:90:b1:ed:a3:56:14:bf:1b:87:99:cb:40:8d:87:eb:5c:
f0:a6:ed:86:37:7e:ab:1c:76:9d:47:ee:b4:3c:05:31:35:1d:
63:44:9f:db:88:af:b6:97:40:56:65:7f:2d:f0:3f:91:12:4c:
01:28:d3:01:d6:14:f1:1f:31:52:0b:1d:74:27:9c:ff:b0:b0:
95:60:d4:0f:24:ac:ac:28:4d:44:8c:6b:b2:e9:07:3b:3c:d7:
bd:c8:39:65:71:38:9e:97:08:b2:94:1e:3e:19:3d:e6:b1:a0:
b2:15:6f:d8:a5:e1:87:7b:da:df:94:0e:cf:2e:42:b2:13:d5:
92:6a:26:e2:21:20:a6:7e:3f:2c:17:5a:87:9c:55:d3:4e:3e:
43:18:af:ea:96:78:40:5d:62:32:d5:2b:cb:e6:f5:84:9b:df:
6e:d2:d7:91:bf:47:51:9b:c8:4e:bd:dd:b6:38:78:64:b4:e8:
12:77:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:07 2025 by rpki-client