Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: D45Eka/ipz4IwCMArQ76oZ3j/wGuI95ACf75NcSVYJA=
Subject key identifier: F3:AD:A5:99:D5:79:97:B7:C5:D5:23:C3:BA:34:FC:78:E2:40:68:95
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 0196D1E2D89C92975A5B8719B404056A4BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1287
Signing time: Thu 15 May 2025 03:00:26 +0000
Manifest this update: Thu 15 May 2025 03:00:26 +0000
Manifest next update: Fri 16 May 2025 03:00:26 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: oi1QSiLz5381Vxgzr+XCUyAQf+tDTYpDdr2ahAvu9HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:e2:d8:9c:92:97:5a:5b:87:19:b4:04:05:6a:4b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: May 15 03:00:26 2025 GMT
Not After : May 16 03:00:26 2025 GMT
Subject: CN=f3ada599d57997b7c5d523c3ba34fc78e2406895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:2b:19:77:2b:e7:15:ca:ea:b1:3b:48:1d:
31:09:1d:8f:fc:f5:e2:eb:77:38:fd:0b:e7:83:d9:
f1:a6:80:76:d5:6d:04:88:b3:dc:5c:35:ef:91:cb:
c6:b3:a9:2e:ff:87:f4:b1:46:b6:07:47:c8:b4:27:
57:0c:ed:52:14:9d:c8:34:f2:ef:d3:b1:f1:2b:4b:
43:3f:1f:ca:86:89:29:39:66:99:1d:f1:7f:3d:be:
7e:63:ae:86:bb:af:6d:53:bf:25:59:9a:2e:5b:47:
e3:c6:cd:bd:c7:00:be:85:54:9c:66:dc:2b:67:35:
8a:5e:ef:bb:f0:42:3d:98:ea:df:d3:07:ef:8a:84:
23:c5:1c:cd:ba:27:20:21:77:52:49:48:0e:c3:9b:
1d:e0:97:54:b7:84:73:a7:1e:c7:20:dd:64:15:a2:
65:55:76:ef:46:a6:79:77:e5:08:05:d7:69:99:a4:
3e:a5:6b:3e:16:1f:9c:f6:bb:45:ad:13:73:cf:bc:
e4:44:d7:fa:87:19:97:f6:23:e4:64:1f:71:60:da:
0a:5e:cc:27:99:73:84:17:6f:08:c8:00:e5:99:7c:
b0:1c:93:81:c9:b0:0e:82:3b:99:ae:1c:4f:e6:0e:
a0:00:94:31:08:8c:e1:b0:dc:be:fe:71:4b:41:d2:
d8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:A5:99:D5:79:97:B7:C5:D5:23:C3:BA:34:FC:78:E2:40:68:95
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:25:14:47:2c:0a:60:a3:d3:52:7f:df:e1:0e:f2:43:21:7b:
e4:a6:c1:23:29:5a:73:a1:97:66:3b:e2:5a:78:df:3e:9a:2a:
55:39:a9:fd:4c:0d:15:12:72:e5:ca:84:2f:69:57:36:84:4a:
17:ff:61:57:66:59:b6:f7:35:97:78:8a:20:28:79:b6:2d:15:
cb:77:02:a3:4d:bd:22:ec:4a:4f:7e:25:4a:16:12:68:68:37:
5d:96:1a:38:65:80:e2:95:c8:00:02:5b:a9:c6:c4:d6:ba:52:
e8:9e:10:52:0c:56:2a:22:86:b5:2d:60:a6:fb:f1:04:1a:a0:
49:95:be:05:d0:b0:14:ac:58:78:d8:e4:8b:14:0c:4c:9a:3a:
0a:2b:fe:1b:d4:6a:5c:27:6b:f3:3e:5b:02:a9:5c:f4:e6:11:
65:b7:5e:46:83:c7:9d:43:25:38:09:d2:6e:59:c5:a2:2e:4a:
d3:73:aa:8d:f2:0c:22:eb:4d:ce:ad:99:bf:5f:93:5b:d0:53:
77:5a:5a:d2:b3:3b:3e:d6:dd:e7:ab:9e:45:87:56:e0:17:5c:
ac:7f:39:89:8f:79:53:08:5a:2c:e2:0b:b1:e5:91:06:a3:95:
f7:6f:db:ee:be:2b:2e:99:6e:4a:47:50:20:6d:31:a3:a4:95:
12:03:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:49:24 2025 by rpki-client