Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
File: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft (raw, json)
Hash identifier: TdJTOqSDUtr5j5AIRBMjfRbo+Mj8VL48EsGL0H3JYkk=
Subject key identifier: 1C:63:F0:3D:9D:6F:3C:99:D1:B2:76:C6:BC:84:9A:5B:B0:87:A5:0B
Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08
Certificate serial: 0196A954C4CD047621F14BDC098B044DE307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 06:00:26 +0000
Manifest this update: Wed 07 May 2025 06:00:26 +0000
Manifest next update: Thu 08 May 2025 06:00:26 +0000
Files and hashes: 1: Q47WtOQCnZpCmGtfa6Ew40Gy4MM.roa (hash: duMBQWWRYKd9t18S6r0lV3zHXTUBGHlTePHIZBRiz1Q=)
2: ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl (hash: 03NTW+fswCtZX06BcLN/fAY6YQefCBhkfwqoisVXzEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:c4:cd:04:76:21:f1:4b:dc:09:8b:04:4d:e3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08
Validity
Not Before: May 7 06:00:26 2025 GMT
Not After : May 8 06:00:26 2025 GMT
Subject: CN=1c63f03d9d6f3c99d1b276c6bc849a5bb087a50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:ba:d0:b9:49:d7:3c:b6:9d:4a:50:ee:86:
10:18:45:22:87:f9:63:b5:4d:58:07:95:2c:bd:24:
74:07:6f:d4:b3:61:a4:8b:16:91:76:29:b2:71:98:
39:2c:d7:5e:a0:2a:ae:2d:8d:aa:c2:49:9d:c2:18:
15:05:fe:84:06:e9:d8:43:a6:21:37:de:d2:0b:93:
65:84:1e:92:43:82:a5:f9:4a:fa:a3:e6:3b:fd:10:
89:f7:4d:a7:88:36:e7:9c:9d:7c:ef:96:fe:95:c6:
89:92:06:2d:3c:7e:e8:d2:60:8e:ad:6a:c5:6b:97:
eb:bd:34:64:1a:11:af:58:8f:a3:5b:dc:ff:6d:e3:
09:d9:e7:b2:72:4d:ec:bc:9b:fa:01:e0:c3:8d:0b:
a4:80:54:3d:99:20:9d:ef:15:58:cd:07:46:6b:07:
a0:3e:24:cd:1f:97:51:4e:ab:a4:6a:d5:56:43:a7:
56:05:20:63:c3:17:fb:fa:34:73:ac:be:11:75:c9:
d0:c7:73:86:b4:f0:eb:b9:d9:75:60:c9:a5:db:d2:
81:1f:ee:2c:7e:4c:9b:c8:d6:c6:34:fb:76:09:ac:
b9:c9:4b:47:4c:7a:8b:bc:ef:cf:67:d5:59:1b:f8:
92:23:42:9c:72:06:88:df:5a:46:89:2f:42:a7:76:
74:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:F0:3D:9D:6F:3C:99:D1:B2:76:C6:BC:84:9A:5B:B0:87:A5:0B
X509v3 Authority Key Identifier:
keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:37:93:ef:78:0a:f3:21:c3:61:04:ff:37:a4:36:5c:79:b4:
c1:fa:51:40:aa:06:5b:48:e1:71:cf:9a:47:bb:73:3b:2c:6b:
da:f9:cb:4a:6e:19:d9:0e:1e:df:e5:b8:fd:32:83:ff:06:e9:
ee:bc:9a:91:b6:c5:cb:4e:e4:bf:91:50:2c:17:2a:96:d1:16:
89:96:c2:1c:47:e3:7b:a7:6e:e1:b6:84:a2:24:87:fb:5b:57:
b9:88:ea:c7:d8:43:17:24:72:3e:3b:05:31:e9:4f:88:8a:7d:
c7:55:89:2e:89:b3:cb:a5:5e:61:73:ea:50:a1:bb:a3:27:0c:
46:0f:b8:a0:2a:49:dd:72:a8:88:e9:49:03:11:22:9c:57:50:
2f:19:ee:ee:da:97:9d:36:50:4f:25:67:bf:62:c0:66:ae:85:
8b:3a:f1:0d:26:fb:e3:a6:2f:3b:cd:20:8f:81:22:39:54:37:
e9:2f:08:5a:bd:f0:a8:fb:0f:23:6a:7b:b2:c1:9e:12:f6:86:
27:c9:e6:a7:84:bb:71:25:ca:0c:ea:22:e4:9c:43:3e:30:19:
9e:10:ad:e7:ee:ad:2e:7a:ff:23:8b:66:66:c8:05:5e:a3:70:
b8:1d:d2:58:91:3f:bb:28:ca:92:0a:b3:d5:15:c9:79:64:ba:
a2:98:f4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:27:05 2025 by rpki-client