Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: S3GQAUeZUGBdfLuKh0nVhNRqyz+6oQHUlGs9qO1wOsk=
Subject key identifier: B4:5A:36:19:B1:86:D2:B6:17:DF:DD:EA:1A:D7:E3:C4:64:91:8C:E4
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 01968EB9254F6D814A19629A901B3C8379ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 03A7
Signing time: Fri 02 May 2025 02:00:20 +0000
Manifest this update: Fri 02 May 2025 02:00:20 +0000
Manifest next update: Sat 03 May 2025 02:00:20 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: lkPgGEqiO7IjQOYIvMUWSz7wMjGS/DjM6GKEKCC9U4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:b9:25:4f:6d:81:4a:19:62:9a:90:1b:3c:83:79:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: May 2 02:00:20 2025 GMT
Not After : May 3 02:00:20 2025 GMT
Subject: CN=b45a3619b186d2b617dfddea1ad7e3c464918ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:16:3b:1d:0b:14:c3:c0:55:1d:0b:b3:70:
2a:5a:68:e4:23:66:94:b5:6d:fa:4e:90:01:40:c4:
08:72:77:9e:d0:cd:0f:15:50:a1:b5:40:57:ef:3d:
05:69:2e:ea:6a:d3:a7:3e:d8:f9:62:b6:9e:ba:63:
1e:3f:8e:1e:1b:27:f6:05:7b:52:f5:97:f8:19:d2:
f6:b5:18:d9:bb:3f:2e:5f:e0:ce:67:33:98:68:50:
86:7a:74:70:0b:4d:b1:42:65:ba:a1:c3:e5:6a:6e:
33:e1:57:64:e6:53:2f:c0:42:7c:49:b7:e2:b4:4c:
e7:b4:e6:9b:57:06:46:c4:fb:e3:20:46:3e:a1:12:
4e:0b:08:2e:28:c2:f6:e9:cd:ac:6a:e4:0b:c9:47:
c9:35:da:14:d2:b2:b7:4c:f7:6e:b2:f3:12:2c:fe:
5f:28:3e:7d:ec:48:ac:ef:1b:b6:26:83:f2:1e:7e:
77:38:90:90:0d:f5:a2:6a:42:a7:99:7d:42:f0:74:
ed:7a:25:3c:ee:05:71:d4:2c:ed:99:e8:9b:24:f6:
d1:17:1c:17:85:93:df:78:71:66:b4:c3:ea:71:fd:
8c:3a:c3:3f:d3:46:b9:f3:69:a9:95:b3:41:7d:2f:
16:53:20:1c:0e:ec:7e:4c:06:9e:64:1e:3d:c3:d9:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5A:36:19:B1:86:D2:B6:17:DF:DD:EA:1A:D7:E3:C4:64:91:8C:E4
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:93:9a:4c:59:7b:e1:20:44:93:4a:7a:2f:b9:b9:8a:7e:2e:
e0:c1:57:5f:20:cb:00:d1:bf:0a:42:41:5f:39:c6:08:18:9d:
cb:fc:78:83:17:6e:71:e3:79:b7:cf:d7:25:6a:4b:ed:22:ec:
04:64:4e:79:8c:fb:e2:e2:52:90:82:d6:53:86:b4:7f:56:9a:
d8:b6:07:88:0a:74:ea:e3:ae:b6:74:d7:d3:83:b2:c5:c4:34:
e6:28:cd:57:65:2a:57:89:b9:91:d2:b6:07:05:b6:31:eb:3a:
79:d8:c8:be:97:74:07:77:33:3d:8c:77:c9:48:88:a9:67:6d:
12:5b:b9:8e:8c:f7:6c:d1:74:8e:ca:fb:b3:cc:81:96:7f:71:
fa:b8:0d:da:2c:82:01:b2:c3:ea:d7:0c:0e:f8:d5:e1:19:43:
56:24:88:44:f2:c1:4a:62:71:f6:76:dc:7e:e0:d5:1d:04:c5:
33:01:18:07:6f:25:8e:7a:db:25:ec:72:26:60:fb:50:c2:1f:
d1:5a:ca:80:43:9b:a4:aa:3d:85:e5:d3:88:7b:92:e3:90:e1:
0a:3e:bc:05:18:8d:d8:a5:22:46:dd:f2:a7:25:ca:f5:d7:4d:
c2:02:18:ac:d7:15:2b:cf:dd:d4:e4:aa:51:c9:46:72:38:ae:
01:d1:90:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:00:03 2025 by rpki-client