Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: YHQ2vy5CbCx8youZqdXew3JMDHvc9mNNf7xs1WVhekE=
Subject key identifier: 74:6C:FA:40:1D:79:97:B4:A5:4E:A9:C0:C6:54:83:34:39:C8:D0:01
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 0196BA119BCC8EBE3C34694D53951087A06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 126C
Signing time: Sat 10 May 2025 12:00:38 +0000
Manifest this update: Sat 10 May 2025 12:00:38 +0000
Manifest next update: Sun 11 May 2025 12:00:38 +0000
Files and hashes: 1: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (hash: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: kKogwY5KbGOwlvmCvmLdMUNJtSoE6V4+n+ILmp97uiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:9b:cc:8e:be:3c:34:69:4d:53:95:10:87:a0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: May 10 12:00:38 2025 GMT
Not After : May 11 12:00:38 2025 GMT
Subject: CN=746cfa401d7997b4a54ea9c0c654833439c8d001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f7:46:51:25:68:7e:27:c9:9b:10:69:32:bb:
ef:c8:36:3e:10:a3:97:ee:26:53:29:c9:0e:b5:05:
7e:b7:67:94:a7:dd:b0:fc:c1:62:65:da:ea:26:52:
e6:ee:98:a4:00:56:d7:32:ef:86:e3:d5:bc:98:bd:
d2:8f:65:08:99:93:44:3d:00:b9:6e:ad:4a:d1:f6:
d3:0d:a5:90:66:48:e9:f6:5a:be:f4:90:72:92:b1:
27:ba:a8:8c:7a:ed:b9:2c:eb:0a:48:db:d6:8e:9c:
4c:83:26:11:29:84:69:e1:0a:cc:41:a2:95:17:2d:
4d:71:f6:3f:bb:19:19:14:8f:dc:0f:25:2f:8a:0d:
56:21:03:aa:b2:ac:8f:5e:b0:d3:e0:59:38:2f:4a:
94:b0:11:cf:a0:98:3e:6e:b2:25:ac:1d:66:35:99:
00:38:d1:99:64:3b:6b:30:81:b1:e0:f0:a3:4f:19:
b4:c7:6e:f6:16:a9:1e:3a:58:ef:3d:11:91:9c:37:
f8:dd:ee:c6:80:31:4d:3f:da:59:ff:c8:c8:0d:99:
54:d4:00:ef:52:a1:6a:d8:e0:6e:7b:f7:84:68:57:
1c:1d:86:c1:e8:ef:1d:cf:26:d5:96:f4:bd:da:db:
41:23:fe:65:c5:5b:89:96:e0:c2:70:36:9f:dd:cf:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:FA:40:1D:79:97:B4:A5:4E:A9:C0:C6:54:83:34:39:C8:D0:01
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cc:0e:52:96:3f:f5:63:4c:4a:06:c9:57:28:8b:b8:2c:25:
b0:da:41:63:ef:30:61:52:ff:fb:41:a6:90:3f:84:b0:e3:bc:
e9:0e:98:d4:37:78:16:fe:33:3b:90:25:43:1b:be:27:c4:2f:
62:ed:2a:72:83:00:ab:47:68:0d:5a:ff:dd:b0:41:e8:bc:cd:
00:19:02:79:aa:79:ae:74:bc:50:e6:b7:d0:db:6e:8b:c3:9e:
ef:71:99:22:cb:9f:56:cb:ca:19:c7:5c:81:40:0d:f3:ac:b3:
1a:2f:6b:d4:9c:16:94:71:84:89:36:c2:51:aa:50:15:fa:3f:
5b:01:1d:cf:e2:f2:b6:46:bc:4d:42:65:b5:33:a2:41:fa:2e:
e1:75:28:ac:ed:09:cb:5c:9b:81:3e:ee:b9:33:46:25:5c:e5:
52:a4:af:0a:41:0f:ed:54:1a:6b:25:8d:b2:44:93:03:22:f3:
f5:45:00:4f:a4:18:33:96:b2:4b:a3:37:67:5a:c0:65:67:3a:
cc:34:f5:5c:45:02:d0:d7:c4:62:28:b4:04:0d:fe:6d:49:7d:
3a:90:08:1b:01:f4:08:ef:be:9e:d6:6d:2c:75:c5:91:66:c0:
01:12:e0:8a:b9:ac:4b:33:03:fc:11:a6:e0:93:c7:74:16:4c:
ef:95:e4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:16:24 2025 by rpki-client