Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: S5pG7oz3SuG6bIHn57MI+Sp6ENlEXeOEMPhnGToBV7Y=
Subject key identifier: 9D:2B:B2:D9:83:74:A2:C4:D0:1E:42:F4:8B:21:96:D6:86:A4:E6:6D
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 0196C0815BDD7A6E255602056A3B8E9786C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 0949
Signing time: Sun 11 May 2025 18:00:25 +0000
Manifest this update: Sun 11 May 2025 18:00:25 +0000
Manifest next update: Mon 12 May 2025 18:00:25 +0000
Files and hashes: 1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
2: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: UQkiTk1M3olJ5t2sRHuHAJFclsRVpjLbTf9JSzpDq3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:5b:dd:7a:6e:25:56:02:05:6a:3b:8e:97:86:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: May 11 18:00:25 2025 GMT
Not After : May 12 18:00:25 2025 GMT
Subject: CN=9d2bb2d98374a2c4d01e42f48b2196d686a4e66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:f4:38:f8:b4:36:02:d4:cc:d6:ac:02:68:
5a:ec:ef:dd:68:3b:24:f0:ce:9b:2f:8b:4f:25:f1:
8b:88:f1:93:5d:69:7f:dc:60:81:a9:8a:e9:a7:c7:
db:9e:bb:6a:b4:75:4b:87:fc:90:29:c3:e1:f7:83:
ed:d4:5a:2c:d6:a7:78:c6:7f:9c:49:92:1c:02:af:
45:57:94:68:d0:cb:56:80:09:f1:6f:2f:9b:4b:99:
88:39:51:e9:57:a1:85:29:17:c0:f5:f7:bd:b2:62:
5b:e6:e3:2c:98:38:4e:59:f2:4c:eb:60:0d:c2:83:
81:c5:20:58:2e:5d:9c:a3:92:68:60:35:30:0b:54:
1c:1d:5f:7c:3b:53:a5:c6:59:27:b8:a3:e6:b2:9d:
04:18:42:e8:48:9e:f4:0c:8d:9a:8b:1d:28:3b:cd:
79:e7:8b:f9:70:2b:c5:b7:78:3d:42:90:6e:d3:62:
2e:4f:0c:bb:97:4f:3b:81:77:6f:f7:90:12:6c:d7:
58:79:64:d2:24:3f:60:8c:89:58:bf:e6:44:44:fc:
53:3f:fa:7e:39:ac:a1:2c:66:be:6f:5e:80:ac:3c:
77:f0:20:bd:97:a6:95:41:1b:3c:0c:8b:06:a2:43:
da:98:cd:61:a0:04:14:9b:29:36:bf:9a:37:72:ee:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:B2:D9:83:74:A2:C4:D0:1E:42:F4:8B:21:96:D6:86:A4:E6:6D
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8e:bc:66:bc:31:45:07:87:dc:92:31:21:23:82:a2:ee:09:
39:cf:4f:5a:7d:24:8d:40:4f:6e:3b:40:92:10:11:09:98:e1:
c5:4e:b2:6b:76:75:5e:cb:e6:94:70:e9:cf:b4:08:d0:cf:aa:
09:14:7b:15:f5:9f:f4:05:53:16:43:d6:9c:28:e0:5a:14:13:
79:bf:9a:d5:de:d7:37:b3:b3:80:ea:fa:22:89:e9:95:f8:ac:
29:5d:6a:89:3a:d0:56:d8:b4:ab:67:16:63:ac:a8:06:37:44:
19:20:b8:ee:94:cc:a4:85:be:dc:08:fd:6a:76:b1:d9:a8:b3:
7e:2c:09:5a:f5:33:8b:eb:90:f4:4a:e1:d7:f5:18:19:e1:f4:
54:fb:26:37:8a:9e:e1:7d:d6:8b:b2:95:a5:d6:b2:97:6b:bb:
03:78:41:ba:28:de:85:bf:32:d3:2a:a4:7f:1a:c3:24:96:69:
54:22:ee:37:02:d3:34:6b:9c:4d:b9:bd:b2:4c:aa:06:16:a0:
50:b6:54:2d:33:a7:65:74:be:76:ab:46:9d:7a:c0:f7:ae:99:
20:dc:61:d9:6e:dc:af:4d:69:a6:3d:d5:06:a2:30:83:2a:5b:
ff:60:71:a5:df:ae:5d:56:5b:e2:82:6e:16:22:a0:10:84:10:
22:33:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:20:45 2025 by rpki-client