Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: g3O3WiWVlc1ELtPzi8JDqCMsJ4Lhsdwdx071iqiW1Og=
Subject key identifier: 22:82:60:78:A6:8B:78:A4:B1:0F:51:D6:F9:0F:CE:EB:FE:05:82:71
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 0196BE253AABF73525B5D7A7E41083E9124D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 07:00:32 +0000
Manifest this update: Sun 11 May 2025 07:00:32 +0000
Manifest next update: Mon 12 May 2025 07:00:32 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: 0lpHeNalOY9lz9AGC3LcM7WtLcUJhO9EolmIgv/NVsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:3a:ab:f7:35:25:b5:d7:a7:e4:10:83:e9:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: May 11 07:00:32 2025 GMT
Not After : May 12 07:00:32 2025 GMT
Subject: CN=22826078a68b78a4b10f51d6f90fceebfe058271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:ea:3b:99:59:3e:07:d0:75:f1:51:a8:01:
cc:91:e8:52:40:64:84:fb:cd:c4:a2:c3:8b:88:60:
8b:32:a6:fb:ea:39:99:48:d9:56:79:ca:df:ec:63:
01:7e:8d:f5:7b:f6:b5:0c:5e:ea:29:22:19:c9:f6:
fa:e4:b0:1c:32:48:e9:35:d7:c3:c3:70:ac:22:c6:
38:22:ea:06:f7:f2:9f:67:3c:27:3c:7d:d8:7a:6d:
77:93:b1:be:89:2e:9e:4d:7f:9e:34:8a:c6:e0:88:
2d:d5:56:53:a6:89:22:de:9e:3a:fc:0e:cf:4c:65:
99:80:e6:72:e6:d7:44:58:8e:d9:28:0e:14:6d:61:
78:40:13:61:c9:24:72:98:26:e3:1a:6e:3f:be:07:
24:23:44:9c:a3:3c:21:95:77:d6:05:fc:56:67:ff:
c4:14:07:4b:d1:d4:80:2a:c2:9b:83:03:3b:13:13:
78:8a:4c:ec:a9:4d:b3:71:cb:06:2b:1b:d3:05:a0:
73:4e:48:12:a3:fe:6e:e4:a4:ae:e4:7d:14:61:06:
7e:43:f6:a4:38:1d:92:68:a9:5b:ca:1e:3e:b4:5e:
38:2e:1a:a2:79:b3:3d:18:1f:14:1d:ff:1b:c5:cd:
49:0c:e3:fe:1a:29:f1:b4:89:0e:93:79:af:7b:d9:
84:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:82:60:78:A6:8B:78:A4:B1:0F:51:D6:F9:0F:CE:EB:FE:05:82:71
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d0:52:bd:d7:41:a8:4e:57:37:a8:4e:8c:3d:49:68:a8:7b:
cc:e7:0b:ae:2c:ab:71:52:09:60:01:ff:05:2a:98:0e:1b:ad:
a3:68:44:eb:f3:c4:48:bc:c9:e1:d2:04:cc:9d:ae:f2:48:c1:
54:1b:d3:e4:4e:dc:59:a0:c9:99:bc:1f:15:c6:29:32:f9:b6:
04:f6:f5:1b:e2:95:7f:07:3e:24:b8:a5:e9:4a:f1:ee:8d:75:
cf:b6:fa:a8:25:18:b1:78:9b:d3:fe:51:d7:aa:18:89:8e:ef:
87:66:33:05:80:cd:80:c4:3b:c0:4d:5b:5c:fd:4d:b9:f9:17:
2e:ec:ed:01:a8:55:d4:0b:57:d6:14:53:c0:cd:fd:35:4b:d2:
09:ea:06:f5:a9:87:a8:08:39:1c:d4:6b:15:5d:fb:80:d1:79:
a5:6f:c1:8e:15:66:eb:d7:a9:6d:b6:bb:7b:91:c9:23:97:7f:
15:d3:57:af:db:85:f8:95:5d:3c:08:84:cc:80:c6:e8:ba:01:
f4:0c:27:13:11:8e:41:5f:6d:ec:f4:58:c3:6b:87:ad:0b:48:
08:74:a2:5b:c2:57:dc:70:7d:e8:d4:e1:bb:1e:df:70:f6:eb:
42:56:27:ac:41:dc:98:ea:21:49:69:b9:e9:6e:44:98:25:b5:
a9:62:0a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:48:55 2025 by rpki-client