Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft (raw, json)
Hash identifier: PU1C8gQucpqB3f9Kh1xa9grH7WKqATG+VOGKFVWA17s=
Subject key identifier: 7B:43:11:17:A5:7F:08:4B:D9:F4:90:66:13:59:A5:F2:D7:24:04:29
Authority key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Certificate issuer: /CN=660899133329faa5b5716b1c95fbaf93021fbc61
Certificate serial: 0196C2DD81700DFA9B9B106D8982A7DC40A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
Manifest number: 0C1B
Signing time: Mon 12 May 2025 05:00:18 +0000
Manifest this update: Mon 12 May 2025 05:00:18 +0000
Manifest next update: Tue 13 May 2025 05:00:18 +0000
Files and hashes: 1: RA9kR943QDfswVQ2De2E5cFSYaU.roa (hash: jCT5nXHXTc0Nn3QbV8+Qje22n9CHMzdTyZ/tDlKS5Ck=)
2: ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl (hash: g3DxQQYFzDmBf8z/XR576TdPl8RNKlrCTR3uFVpeUCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:81:70:0d:fa:9b:9b:10:6d:89:82:a7:dc:40:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Validity
Not Before: May 12 05:00:18 2025 GMT
Not After : May 13 05:00:18 2025 GMT
Subject: CN=7b431117a57f084bd9f490661359a5f2d7240429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:52:19:76:71:49:43:56:83:37:2a:9f:94:
79:a4:50:fe:47:d9:67:d1:43:40:37:b1:2c:4c:d2:
11:7f:dc:1e:04:ab:53:96:5c:3c:f6:61:77:5b:c8:
43:b9:69:63:b2:8f:78:3a:a5:4e:e3:ba:6e:13:36:
55:63:b9:3f:15:bc:5c:62:4d:b0:d2:be:94:f8:04:
15:21:3d:7d:bf:9e:05:e6:15:75:41:8b:ff:b4:05:
57:07:8d:7a:c3:6a:a8:40:80:1d:80:a5:b3:4d:55:
19:67:0a:70:3a:51:e8:3a:ae:4c:f5:c3:a7:69:7d:
2c:52:f2:72:0c:65:d2:93:f5:74:e4:44:b8:2b:d3:
54:a1:d2:97:f5:f4:58:78:7c:2d:18:e8:cc:49:a5:
20:16:57:23:0c:9f:95:be:ef:b7:73:e2:f6:f8:54:
50:4c:b4:82:9f:95:e9:64:1e:a4:07:16:42:10:77:
29:5a:27:e1:16:e4:f0:da:4a:79:02:58:cf:25:dd:
1a:29:c5:df:6f:00:ff:b7:90:52:71:01:de:b2:2c:
f4:ed:82:09:28:b8:51:4f:34:fe:d0:5b:80:34:55:
20:be:b5:72:e4:fd:74:4a:dc:84:c5:cf:56:71:81:
55:a3:0f:bd:90:e6:0e:2d:f6:48:07:10:5d:6e:96:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:43:11:17:A5:7F:08:4B:D9:F4:90:66:13:59:A5:F2:D7:24:04:29
X509v3 Authority Key Identifier:
keyid:66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:27:17:55:78:31:e4:55:98:36:42:79:42:cf:df:c7:99:6a:
83:f3:82:95:65:b9:e9:87:26:26:ec:d2:51:d3:02:92:6e:60:
40:d9:d0:f2:1b:9d:40:2f:30:a0:24:37:50:e0:75:6d:d4:14:
45:22:85:fa:b2:f3:78:f1:a8:4f:35:77:1a:1d:4f:03:8f:53:
bb:10:c1:47:b3:c4:11:cb:4e:4a:db:a4:62:5e:ad:0c:79:d1:
d4:2a:a5:c8:8b:d1:e2:98:a9:da:d5:20:2d:3f:44:a3:d5:9d:
57:6a:1d:38:f5:b7:20:7b:b9:d7:d5:3b:0a:8b:b4:ad:d3:a6:
83:80:fa:9e:77:3a:90:5d:10:3e:c0:b2:c2:ad:63:05:a4:91:
2d:fe:90:e4:de:d0:a2:1c:a5:09:cd:af:17:1f:87:ba:05:11:
bc:5d:a0:0a:33:c7:12:2b:fc:ec:b8:e8:60:36:96:ef:04:af:
08:1a:b3:d6:f6:6e:95:c6:e9:4b:df:25:26:4f:a6:5f:49:42:
e7:0c:2e:0f:d0:f8:cb:3a:84:c8:d9:96:f0:f8:73:41:f2:9f:
74:63:16:e5:14:42:4e:2f:e7:6d:fa:f9:12:7f:2b:2a:e0:72:
c0:b1:e8:a5:77:75:a6:8c:02:dc:13:7a:1a:15:c6:f4:0b:f3:
a1:98:c4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:19:45 2025 by rpki-client