Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: MfJM6k0JotU/iqzkahiUh+IhXwBUVcm4lp6eZ5W0Bfg=
Subject key identifier: 2D:D1:6E:8B:88:5E:15:81:3A:0F:32:07:BF:75:4F:C0:E5:7D:35:1E
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 01967A8E13973895EBE2F5F3EB18EC0DBE43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0255
Signing time: Mon 28 Apr 2025 04:00:53 +0000
Manifest this update: Mon 28 Apr 2025 04:00:53 +0000
Manifest next update: Tue 29 Apr 2025 04:00:53 +0000
Files and hashes: 1: JBec802FdcKabjY28XiR5H1LtHE.roa (hash: K48XffcS0X6Fp6KuIpuhXGlT+fph47E9cUUhQv9Lq8o=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: CwLoP32l8cdmI3vrcGGyVHDB5R9YxkQeBC5DtQVjgjk=)
3: sH_MU-dLONCSS2liGOTF8yFjBic.roa (hash: bC4qlhF2mIa5vONZeQi20o6xvZPm50Q6MktLj7FF2Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8e:13:97:38:95:eb:e2:f5:f3:eb:18:ec:0d:be:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Apr 28 04:00:53 2025 GMT
Not After : Apr 29 04:00:53 2025 GMT
Subject: CN=2dd16e8b885e15813a0f3207bf754fc0e57d351e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:be:67:d6:04:9c:a4:72:d1:d0:50:57:2f:
ad:56:c0:29:0c:92:8b:c5:83:ec:3c:33:61:94:8c:
ef:3f:5b:5b:65:b7:f0:49:77:b5:c5:24:ae:57:3f:
75:6b:41:b9:7f:15:2f:09:c6:df:b6:e5:8d:6f:da:
4e:b3:80:bb:bc:41:4a:da:e5:e8:34:59:4a:f6:f6:
ed:56:0d:74:b6:f4:ef:d0:a2:17:a5:25:0b:7d:3d:
af:df:39:05:f0:23:2f:5c:7b:19:fd:01:24:9b:89:
de:5d:06:0d:59:83:62:ff:fb:fa:c6:c8:5a:20:3b:
53:a1:29:9c:35:73:48:9e:9f:48:a5:3e:f9:b7:45:
8d:d9:eb:b7:73:9e:ec:52:84:aa:d6:b8:49:72:75:
14:57:94:17:22:ed:4b:2c:3e:85:6d:f6:b6:71:b9:
4b:7d:f7:e7:e6:34:2d:86:c4:82:a0:df:d3:8a:a9:
35:a7:f4:8c:b3:3b:7a:82:c9:0d:d4:c1:7d:c6:80:
80:c9:f3:cf:56:2a:5d:a6:51:67:7c:dd:00:ff:7a:
80:0d:de:be:6a:63:a5:48:8d:3a:b8:f3:87:e6:61:
2f:44:d8:98:76:15:87:0f:f0:93:a0:32:8a:23:6c:
f6:d6:a5:20:d5:ec:ce:f7:7d:28:3f:55:b5:d7:62:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D1:6E:8B:88:5E:15:81:3A:0F:32:07:BF:75:4F:C0:E5:7D:35:1E
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:be:cf:54:09:5d:53:43:04:76:69:95:01:17:7d:d8:80:df:
18:d1:8f:cc:85:a4:ae:54:5b:8a:ec:b5:8b:fd:b8:e3:c9:a4:
73:80:29:86:01:eb:53:f1:94:a5:9c:be:0d:8c:18:1f:5d:61:
e6:bf:72:90:f9:38:1d:b6:76:f5:ec:b7:8a:2a:12:95:42:b6:
0a:7c:51:93:6c:b0:39:90:b0:2c:66:c9:13:b3:35:ae:33:8f:
e7:2f:66:96:32:1f:75:2f:27:4e:c8:46:24:2f:49:ef:e7:81:
1e:4c:30:ca:b0:e7:7f:78:ec:d0:37:49:ea:d3:e7:ed:d4:ab:
65:33:36:7f:c8:aa:79:95:62:e8:1b:7d:a8:10:f8:a0:00:5f:
58:91:9c:94:47:bd:07:ab:5a:83:bb:7d:39:d7:b1:2f:20:13:
1c:ef:75:a3:77:7c:b9:33:39:ba:f0:ad:26:a5:fe:10:7e:5c:
b6:4c:c8:ec:a7:62:1d:c6:14:c4:82:bd:39:03:f3:88:a5:13:
b6:5c:28:72:ef:07:27:4b:12:da:d4:cf:db:49:fa:c1:3c:fa:
20:0d:ac:56:86:b0:2b:1d:12:ae:2d:44:c2:45:e1:71:d4:e0:
00:c4:b7:12:4d:2b:de:73:74:3e:06:5d:13:2a:b4:16:f8:f3:
62:e9:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:51:28 2025 by rpki-client