Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier: 9lpcK0Q/VL0EUhyT0XYseMsdJTeEezKJE6majtAum9I=
Subject key identifier: DF:8D:C1:67:03:75:EA:E7:86:08:82:ED:89:B0:7E:83:51:CD:74:D9
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 0196B9DAD2523AADD9275D1167811B64C040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number: 1261
Signing time: Sat 10 May 2025 11:00:47 +0000
Manifest this update: Sat 10 May 2025 11:00:47 +0000
Manifest next update: Sun 11 May 2025 11:00:47 +0000
Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: Hoxe6bhp/NiGONlFOjEA2n/iGtG6HIgPLmiOxewquhY=)
2: B9xdpXPKaKD7kATBDRUYPDrfJHM.roa (hash: xUpn/6yW+QKWLSXqnG2abjnoqVCxULjYMRU+slTa5PQ=)
3: YYzrkPDEMpFz0VlMFyfkPlvrIPc.roa (hash: ZTbSueGcUA5J+8KJD8a0DCRWPR/FrTGgSZg4efTERpc=)
4: z0hWnzSRmHLyAYMYl1nKCZOWbgw.roa (hash: GQY4W56WRkuweljajSL0/DPkbwKgksUsLIAtILepWM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:d2:52:3a:ad:d9:27:5d:11:67:81:1b:64:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: May 10 11:00:47 2025 GMT
Not After : May 11 11:00:47 2025 GMT
Subject: CN=df8dc1670375eae7860882ed89b07e8351cd74d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:93:f6:6e:c5:12:e9:2a:3a:8b:bd:be:7c:ce:
07:9d:8d:43:2b:b7:1a:c9:4b:a5:d9:f6:4f:7e:1f:
2a:83:d3:d4:ae:b7:ee:2a:bb:a2:41:56:dd:b2:09:
43:fb:fb:d8:84:25:6c:3b:60:ee:0d:13:83:3d:f3:
4a:5e:05:cd:2a:20:75:39:58:45:16:5f:c8:45:f5:
0c:7c:5b:84:33:2e:b1:9a:10:de:2a:7d:02:be:21:
b1:01:54:38:47:4d:2f:d1:ff:1e:31:0c:22:53:2b:
1f:43:d8:8c:99:db:12:0b:fc:b9:1e:3b:e7:58:f9:
ee:64:af:9b:ef:50:f9:c8:2c:19:55:b8:74:91:e4:
fb:a5:a0:48:7f:e4:fd:f2:1b:20:a5:b0:5e:3f:42:
bf:c8:89:ef:30:cd:95:d4:b1:20:ad:47:fc:3e:9b:
15:c2:b7:d2:5d:7f:00:41:e6:3a:64:59:b2:18:02:
16:64:35:f0:c7:62:86:0d:37:03:27:d7:0b:50:62:
9a:d5:d3:f3:c5:c3:31:27:4e:6c:3f:95:4e:a8:ce:
ec:43:a9:d3:34:5b:d3:48:27:81:f6:56:1d:54:9b:
4b:35:f4:85:10:64:e6:01:49:e6:2e:d0:2f:e6:92:
6d:d2:a2:09:25:dc:02:37:73:56:c6:ed:67:a3:c3:
09:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8D:C1:67:03:75:EA:E7:86:08:82:ED:89:B0:7E:83:51:CD:74:D9
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:67:4f:a4:30:b7:a0:48:62:75:37:82:5f:4c:ca:fa:69:d8:
47:e3:ed:41:6c:1b:c7:27:21:04:48:fb:e7:37:2d:ae:b7:d8:
e4:22:37:e1:e1:5c:4e:20:df:5a:01:6a:fb:a2:79:ba:45:03:
dd:3b:3d:c9:02:10:2c:00:5a:43:59:81:16:a2:68:c7:e8:4d:
fb:e2:e6:43:c6:9f:f5:44:57:9a:a4:13:ab:1d:b4:9e:84:dd:
9d:5f:58:b0:2f:99:37:b0:a3:3e:42:a7:e2:03:c1:23:72:7e:
b1:af:eb:c7:4c:72:ca:18:1e:af:04:02:db:8b:e2:70:ff:63:
c2:fc:77:6f:fb:98:25:51:63:d5:c3:2f:2f:c9:35:62:bc:b0:
be:cd:aa:5e:68:5e:60:23:c8:56:bd:7c:52:71:55:b0:34:e5:
31:a0:82:fd:45:9b:1f:fd:24:85:75:34:74:34:cf:44:ed:af:
c5:03:ae:e3:5a:92:9b:75:c1:7a:43:17:9f:57:82:62:0b:f0:
47:3c:65:c6:8f:f4:67:2f:ef:5c:25:51:31:9c:4b:70:00:be:
82:f2:1e:b3:f5:af:50:8d:4a:a5:4b:ec:3b:d9:80:d1:7d:85:
60:fe:2c:d2:46:e3:2d:12:95:a7:24:0c:6e:8f:9b:25:19:1c:
01:db:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:19:56 2025 by rpki-client