Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
File: Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft (raw, json)
Hash identifier: omXzE7fPzuyCOyUiZshpCaArvkWf1o3h+VAcrMnN5Oo=
Subject key identifier: 92:33:90:B5:83:8E:BA:2C:63:4D:CB:86:14:EF:FF:04:38:90:8A:4E
Authority key identifier: 66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
Certificate issuer: /CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Certificate serial: 0196C26FB4B34A34B42F830F0092F70204E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
Manifest number: 0E0F
Signing time: Mon 12 May 2025 03:00:22 +0000
Manifest this update: Mon 12 May 2025 03:00:22 +0000
Manifest next update: Tue 13 May 2025 03:00:22 +0000
Files and hashes: 1: Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl (hash: xRa8GcLtB4l9bdDUzfs76vYJdnZWV5I+cDQe1Mmgui4=)
2: qdrDiBktURajjlk4oiqN9piQBiA.roa (hash: XK33AjhLnejYmOacprLZoYaTNO5MSW3e9jm0PB6V7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:b4:b3:4a:34:b4:2f:83:0f:00:92:f7:02:04:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66fb7727d64a518c7cd485e4823ee78a9e291008
Validity
Not Before: May 12 03:00:22 2025 GMT
Not After : May 13 03:00:22 2025 GMT
Subject: CN=923390b5838eba2c634dcb8614efff0438908a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:73:91:c4:58:18:7e:89:8d:68:b7:42:9d:
a8:bf:e6:73:66:c4:36:9e:0b:ed:94:72:36:a3:89:
bb:b6:67:cb:5e:d0:e3:fe:7f:54:5e:90:eb:8d:af:
e3:77:a1:55:11:18:7b:a3:ee:7e:10:8e:d6:fc:40:
63:03:58:ab:b0:48:bf:8e:e8:0b:3c:bd:f4:7a:f6:
4f:bc:b5:66:d3:55:16:3c:c9:ff:d5:0f:51:49:0f:
37:e5:47:89:39:b6:e1:06:66:ee:85:79:2a:2a:7d:
c4:30:dc:d0:66:de:c2:fb:9c:c6:47:13:45:8e:a5:
f2:50:9e:04:3f:7d:f4:02:e8:31:16:88:ed:0d:45:
50:82:12:4a:05:22:28:e9:f0:65:64:bb:09:d1:7a:
86:11:2f:c9:d8:2f:3f:5d:f6:1e:86:95:53:a5:95:
48:f9:3e:a5:95:60:ce:d6:12:39:a9:bb:b2:60:c8:
54:55:fa:c4:60:0d:3f:f7:18:f1:de:30:bb:30:ff:
f6:0f:17:e4:cf:53:12:f5:ea:c6:a3:12:9a:ea:f8:
77:f8:26:93:1c:9a:ad:ff:b7:5f:6f:7d:6f:38:26:
fa:0f:84:0d:78:ad:39:21:90:fb:04:ce:b5:af:a2:
0a:59:92:a8:e2:ed:34:97:d5:f6:34:4f:e4:38:f7:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:90:B5:83:8E:BA:2C:63:4D:CB:86:14:EF:FF:04:38:90:8A:4E
X509v3 Authority Key Identifier:
keyid:66:FB:77:27:D6:4A:51:8C:7C:D4:85:E4:82:3E:E7:8A:9E:29:10:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zvt3J9ZKUYx81IXkgj7nip4pEAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/995449-a905-4e06-b839-7c3bddc2978a/1/Zvt3J9ZKUYx81IXkgj7nip4pEAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:13:3a:d8:14:8d:62:c2:67:eb:56:a4:7c:11:c5:f0:d3:87:
30:ff:6d:05:15:27:c0:29:16:30:69:61:41:39:af:83:51:45:
53:07:6c:6d:33:10:83:56:47:af:84:ee:b3:19:ec:1c:b9:88:
56:9b:c0:c3:73:83:1b:88:10:d3:a8:b8:59:1d:91:d8:71:b0:
4a:e1:09:79:c4:08:11:e1:08:12:ad:80:96:99:dc:d7:ed:97:
a0:e5:06:a6:fa:42:2d:fc:a1:28:95:05:d0:1c:66:b9:f9:c1:
a9:3e:11:d0:0a:6e:e1:62:00:d5:58:18:c5:78:82:12:9a:0b:
40:04:9f:69:5e:f9:4d:4a:72:4d:35:48:19:7d:4c:8d:b4:dd:
aa:14:8e:f1:11:50:9c:f8:36:26:3a:94:55:ca:7d:5d:4d:bd:
8c:28:c8:60:e4:0e:69:ed:0b:92:7b:ca:91:d8:52:61:82:67:
45:11:1d:36:08:b3:15:8b:80:e9:e9:de:d4:a9:70:ca:02:1c:
ef:62:d2:f4:62:3c:b2:d6:b7:79:76:9a:81:4d:20:47:f6:86:
b7:8a:7f:20:ce:60:4c:a4:bd:36:6a:4b:ef:a5:02:56:ba:fb:
8e:16:a9:55:59:20:35:d4:6f:03:b8:f7:f7:a2:5b:d7:53:d3:
c0:bf:ab:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:36:27 2025 by rpki-client