Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json)
Hash identifier: nKN3EjbjR0nlAtZWH1ARiYk+LJ2ybn+MfDv4JnKXuiE=
Subject key identifier: 66:5D:6C:36:00:40:C3:38:B9:83:0D:C5:8D:A5:F3:06:B7:C7:BC:05
Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f
Certificate serial: 0196CA296DA5CD03B47AAA337ED93A56F392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
Manifest number: 02C3
Signing time: Tue 13 May 2025 15:00:34 +0000
Manifest this update: Tue 13 May 2025 15:00:34 +0000
Manifest next update: Wed 14 May 2025 15:00:34 +0000
Files and hashes: 1: x5aJzUPMHLKhlIKJ0Wf5QMJGC1w.roa (hash: vQ6QPNwnnIFhCOXdhX1rKb14Trxw+IBL89xByl8hgdM=)
2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: QKpbvIY+seFLhxbSxyp5BYFXYqDOImSVlMqJlecasNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:29:6d:a5:cd:03:b4:7a:aa:33:7e:d9:3a:56:f3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f
Validity
Not Before: May 13 15:00:34 2025 GMT
Not After : May 14 15:00:34 2025 GMT
Subject: CN=665d6c360040c338b9830dc58da5f306b7c7bc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:a0:71:aa:50:31:d8:32:3d:cf:fa:f7:ba:
32:4c:86:a2:94:3c:0c:4e:a5:fc:3e:26:4c:c9:cb:
8f:63:6c:6b:0f:6e:94:65:2c:fc:64:0b:77:7e:85:
c6:34:a2:94:71:c0:46:30:56:c7:96:fa:b7:ff:b8:
14:78:ab:0e:a9:b3:ab:29:55:1f:80:7e:59:cf:a3:
2e:1c:40:45:5a:ee:88:54:95:51:ba:28:e8:66:1b:
21:cc:78:f0:ae:df:95:48:6d:73:15:65:28:29:70:
59:b0:f3:6e:58:0a:df:d0:99:c4:17:b3:82:ee:19:
8d:b9:47:21:8f:79:f1:c5:35:6c:5b:47:8a:cf:3d:
63:2e:cb:e0:a0:96:ad:7b:e4:98:46:be:c8:3d:f1:
b3:30:45:d7:ee:41:9c:c0:90:6c:45:ff:ac:f7:12:
45:65:d2:87:4f:23:73:fb:7c:d4:a9:65:53:f3:43:
39:83:27:bb:b5:b2:1e:fd:b4:72:b5:3c:0e:48:c4:
11:4d:e7:7a:93:5d:41:10:ba:89:a0:0c:7f:94:42:
3b:b3:4e:30:ac:02:c2:eb:ff:bb:0a:c2:47:f6:c0:
21:36:24:42:c7:98:b7:a6:ad:f0:87:17:57:1d:5d:
97:81:26:b7:45:bb:85:e6:3e:4f:02:c8:5e:d7:07:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:6C:36:00:40:C3:38:B9:83:0D:C5:8D:A5:F3:06:B7:C7:BC:05
X509v3 Authority Key Identifier:
keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:28:fc:76:34:b3:90:76:4e:f0:74:41:76:9d:18:9a:dd:97:
8a:a1:fa:5a:53:a5:92:ba:2f:a3:85:67:9d:00:a3:cc:5d:cf:
0c:bb:cf:6a:2c:4b:23:4b:20:ed:6e:da:3c:f1:15:0b:64:2b:
ef:53:fa:8a:3b:ab:7a:34:d1:77:36:38:4c:0f:d0:ea:e8:92:
2f:1c:c1:7b:9e:80:a1:f9:36:6c:62:f9:2f:fc:64:5e:7c:47:
10:c7:50:80:91:0a:83:7e:1d:37:45:5c:1f:3e:7e:40:80:c0:
b3:69:7a:ed:3f:ad:62:71:8f:45:41:c5:8d:4a:3b:6b:5d:36:
39:ca:31:d2:f6:9b:1f:c6:97:27:2a:6d:34:5f:df:b8:0d:51:
f0:71:51:13:dd:61:bc:67:bd:ee:32:29:67:38:4b:f0:60:c5:
fa:78:35:09:bb:f1:87:3b:a4:09:3f:4b:bb:f6:de:16:f2:2e:
db:de:58:b4:05:8b:7b:46:4e:f7:88:07:e0:9e:48:8e:33:30:
de:96:93:cb:4f:9c:dd:30:7c:d0:31:c7:ec:1b:91:8b:43:ba:
0a:91:a4:2a:92:15:de:0e:f1:86:fb:01:b3:1a:6e:bb:65:60:
0d:1e:fe:29:71:25:67:00:36:a0:b7:56:04:38:02:c8:fd:88:
ca:b9:de:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:15:04 2025 by rpki-client