Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File: zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier: zO4LdAoSKzfOs7e/S2htKxcW4etEqCwnNZp3vsSlpKc=
Subject key identifier: 46:D2:18:68:03:2D:00:61:C6:FC:39:0D:A0:F7:63:C1:1F:D7:20:C4
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer: /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial: 01969FE46715A81C3532C37DB31EB2295FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number: 0BB4
Signing time: Mon 05 May 2025 10:01:08 +0000
Manifest this update: Mon 05 May 2025 10:01:08 +0000
Manifest next update: Tue 06 May 2025 10:01:08 +0000
Files and hashes: 1: Z8HK86u_Tc2z7y-zidkbMMq2jco.roa (hash: 9ipzU/iNA87vl6CCfbIc4JupJ5JjdKNFibG14Sk7A3Y=)
2: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: XXQ1UO2MoheSSd1AuF2Jl8Lb7MtQxYn2ASSq3YJEHiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:67:15:a8:1c:35:32:c3:7d:b3:1e:b2:29:5f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Validity
Not Before: May 5 10:01:08 2025 GMT
Not After : May 6 10:01:08 2025 GMT
Subject: CN=46d21868032d0061c6fc390da0f763c11fd720c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:4c:ff:ab:99:26:8f:10:b9:62:ff:c3:ca:
85:e2:cb:4e:29:b8:e1:73:22:fe:3c:85:6e:04:d0:
b2:11:39:c3:f1:79:ac:7e:50:c7:cb:d9:e8:e7:11:
23:ef:2a:05:f0:15:c0:d7:47:bf:9d:61:d5:61:6f:
9f:3b:88:aa:08:b6:dc:92:1f:53:95:8c:bf:d3:cd:
4f:ce:cd:20:20:14:a8:ea:77:5e:ce:36:09:97:89:
98:85:52:2c:3f:1d:10:56:d0:6c:b1:a0:e1:90:31:
04:37:73:21:15:f0:c7:5c:04:88:14:b1:71:b4:24:
4f:7b:44:7f:29:14:b5:52:7d:b2:96:58:cc:26:d2:
1f:52:47:dc:0c:74:9e:66:71:9e:83:76:36:43:5c:
88:70:a0:cb:9f:ae:ae:4d:f0:bf:f8:4c:f2:2b:40:
70:c3:0f:39:de:4d:11:f0:76:6a:2b:44:15:20:12:
db:31:27:28:3c:aa:89:1b:94:2d:a8:cc:c8:00:bd:
45:69:70:6b:68:9c:12:7c:0e:bb:43:16:08:80:7b:
7d:56:e0:1c:0b:3a:46:72:98:9c:89:41:9f:2c:22:
02:52:d3:b7:1c:8f:3c:bc:2b:89:de:f3:3a:d2:dd:
88:d5:9f:5f:84:6c:3c:cf:db:99:5d:8a:d2:10:a3:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D2:18:68:03:2D:00:61:C6:FC:39:0D:A0:F7:63:C1:1F:D7:20:C4
X509v3 Authority Key Identifier:
keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e8:dc:78:38:f9:ed:0d:1e:e3:ac:3c:0f:e8:d9:e7:62:34:
3e:66:86:f3:9f:d7:d8:72:19:ef:be:a6:99:20:b6:c4:1a:75:
fa:f9:25:1c:17:d8:b7:3e:b8:ca:df:5c:e4:b4:21:c0:2d:4b:
26:b3:fd:02:3a:9a:de:47:b1:99:5f:79:45:0a:ac:71:75:6f:
79:da:21:5e:83:b2:c3:1a:81:54:32:69:d4:8d:25:0f:13:1b:
7a:78:97:53:85:2e:f6:63:f6:a7:02:0c:68:0a:c2:fa:08:cc:
2c:1e:fc:84:dd:ea:0a:fb:43:c2:fa:b2:41:30:9d:73:da:5e:
a1:f0:ff:3d:6c:1e:69:4d:73:59:54:01:16:85:15:b6:05:0a:
6f:e4:57:95:a6:1f:ae:d2:ed:69:f2:2d:35:f0:59:0a:2c:0d:
27:cb:ae:a8:12:25:52:c0:33:1b:ed:fc:b9:a7:6e:98:32:5b:
66:5a:78:27:12:97:c9:45:52:b7:d4:71:2d:23:06:ae:6c:6e:
5e:28:b3:a9:fb:dc:77:98:d5:e6:ee:c3:3a:89:9c:b4:01:9e:
22:73:a5:71:d6:ec:ee:d2:39:a4:9f:a6:fa:2a:94:4b:1c:14:
6f:2e:45:d6:cc:61:30:ec:27:0e:c0:2c:1d:ee:2b:bb:c3:ac:
d0:21:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:07:08 2025 by rpki-client