Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
File: ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft (raw, json)
Hash identifier: bf/aJITsydTelzGYcP4E1zUrozS319YURdI7ca/Bg78=
Subject key identifier: FD:F0:02:A7:3F:99:B6:3D:55:DD:4F:01:E5:9C:C4:F6:3E:8F:DE:39
Authority key identifier: 65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
Certificate issuer: /CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Certificate serial: 0196C53AC6332BA0AEE76617F51C17ED0B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
Manifest number: 0CC2
Signing time: Mon 12 May 2025 16:01:25 +0000
Manifest this update: Mon 12 May 2025 16:01:25 +0000
Manifest next update: Tue 13 May 2025 16:01:25 +0000
Files and hashes: 1: Hetd0acGcft4F4TkCZSRchEWHjU.roa (hash: DfxL/5EFMBfWrjWF+bprxAQN9pcVeRj5qm/6i9xfMgQ=)
2: ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl (hash: wxg5XUF0ocCRGhu1f8r7txLoCzWxVvwnDIrs+Ov/vCo=)
3: zBgovtm1ad-0i6Hlr99dwqaZZ8A.roa (hash: zlvsRotYH5pOPVXr3W3IYM5PD6gCr9N8XLSfPQUKoN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:c6:33:2b:a0:ae:e7:66:17:f5:1c:17:ed:0b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658c0c499a8e69d9795f4bd0b5bf1682b1f00f9a
Validity
Not Before: May 12 16:01:25 2025 GMT
Not After : May 13 16:01:25 2025 GMT
Subject: CN=fdf002a73f99b63d55dd4f01e59cc4f63e8fde39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:ea:6a:70:9e:e5:45:d6:8b:ac:ed:35:1b:
c5:ee:04:79:f1:8a:34:da:51:40:1d:3e:86:4a:68:
80:32:54:09:ad:d7:c8:c9:ec:5f:09:8f:a3:c6:ee:
f4:76:9b:79:0d:ac:d0:2b:20:c9:2f:e3:2d:be:bb:
a7:cb:02:52:b9:6e:f7:93:4a:8e:22:43:b9:4e:65:
e9:3e:04:7e:e5:48:20:01:49:ca:e3:6a:75:1f:ec:
12:f3:51:ff:cf:b8:6b:d1:b1:33:65:1d:84:98:cd:
ba:0d:b3:38:59:c1:e4:d0:90:0f:dd:f4:f8:c3:90:
f8:0b:26:8b:98:4c:56:64:de:2a:60:91:41:ac:aa:
8e:3f:04:bb:e5:5c:8c:d4:68:c2:2b:37:b9:c4:80:
e4:e7:10:49:08:c4:bb:4a:93:51:e0:41:f8:07:97:
c5:36:1c:e8:37:0a:01:f7:76:86:11:67:0d:d9:52:
4b:99:72:1f:83:10:ae:62:38:02:f8:cf:b0:b9:26:
fd:39:46:05:3f:9b:53:33:59:4d:fc:4c:2e:6f:fd:
2a:61:da:55:06:18:cb:73:c1:20:e2:72:db:a1:1c:
fd:fc:f6:38:d8:c3:ee:86:43:13:9c:17:dc:9e:6a:
8a:4b:a0:a1:58:fb:2c:eb:d2:d2:07:8d:71:dd:d6:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F0:02:A7:3F:99:B6:3D:55:DD:4F:01:E5:9C:C4:F6:3E:8F:DE:39
X509v3 Authority Key Identifier:
keyid:65:8C:0C:49:9A:8E:69:D9:79:5F:4B:D0:B5:BF:16:82:B1:F0:0F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYwMSZqOadl5X0vQtb8WgrHwD5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e66913-8f5f-47ef-a730-32c1b2cee593/1/ZYwMSZqOadl5X0vQtb8WgrHwD5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:07:05:fa:19:11:53:f5:82:a4:77:29:ce:17:60:7f:cb:7a:
4b:e1:95:3d:a4:b2:ed:3b:f4:d6:46:9d:3c:1b:06:b1:37:27:
b1:81:ef:70:50:33:ad:81:b1:47:e1:77:34:3f:ba:12:d0:e6:
ce:8d:ca:5c:a9:ae:ab:d2:95:a1:e0:50:5e:62:d7:40:cf:84:
eb:78:c3:da:83:fc:fc:9b:77:91:f8:d0:e5:d9:8b:ff:0b:7c:
63:8c:c8:ca:e3:41:8b:d4:56:e9:3d:4a:4f:b8:6e:ff:30:84:
73:b2:d1:3e:9b:d4:49:91:0f:45:9b:67:78:4a:3e:06:b7:0f:
fc:9b:f5:be:3a:57:19:bb:77:79:e7:66:b6:7a:17:0f:3a:3e:
93:f3:94:59:e5:25:f7:76:f6:c2:e4:46:eb:3e:2c:5b:eb:0b:
08:a3:7b:b3:47:22:b6:7c:ba:99:27:e5:5b:05:f6:ba:75:e7:
c3:45:e2:40:ee:22:ed:cb:3d:45:d2:e5:9a:0d:36:39:c1:d6:
b3:b3:e9:e3:17:c3:74:5a:37:aa:e6:54:31:ac:9c:c3:55:95:
4b:76:cd:09:39:39:88:2f:33:f8:3b:95:43:a7:94:15:0a:b6:
83:6f:4c:ca:0d:2b:25:75:43:0d:f2:78:8d:9b:27:ee:f1:50:
3d:1c:5b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:51:38 2025 by rpki-client