Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: uqAd4MAyaErOqUkjYU+0Xc4pl8Oo8Oh9jCdxSmGx9iQ=
Subject key identifier: A1:90:1C:26:CD:20:B1:60:B1:A1:A4:E6:9D:EB:A0:05:7D:C5:C8:47
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 0196C4278292A56A5E35AD5865B151BA4CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 05B5
Signing time: Mon 12 May 2025 11:00:45 +0000
Manifest this update: Mon 12 May 2025 11:00:45 +0000
Manifest next update: Tue 13 May 2025 11:00:45 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: 7wp4lvQvo+bZFZqoUmFxuA0A+QBKSDQ8Nq0KaX4TsVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:82:92:a5:6a:5e:35:ad:58:65:b1:51:ba:4c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: May 12 11:00:45 2025 GMT
Not After : May 13 11:00:45 2025 GMT
Subject: CN=a1901c26cd20b160b1a1a4e69deba0057dc5c847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:60:4d:59:50:68:23:bb:be:9b:fa:a3:d0:
34:51:2d:6f:ba:06:a4:9e:95:dd:a7:56:89:ed:5b:
f9:ef:da:c8:e7:3d:8f:4d:32:df:d0:21:51:1a:73:
16:11:ed:1c:e6:7d:20:e3:1f:d9:f3:97:75:4e:f4:
93:82:df:78:7b:42:e6:db:f6:ae:78:8e:e6:be:c2:
f4:30:91:97:b9:b1:01:64:1d:9e:c3:c0:0a:8b:4a:
57:6b:3d:c2:2f:cd:33:83:71:f8:1a:26:45:f2:57:
bc:0a:c5:aa:e2:5c:ab:35:8b:1f:23:ce:99:41:8a:
ea:a9:ed:c5:e9:fc:17:f3:0e:e4:f8:95:26:6c:7e:
3e:85:73:9e:e4:fe:92:8d:70:8b:46:3d:20:12:61:
d0:78:d4:e3:62:86:0d:9a:06:36:73:56:19:3b:30:
9d:88:f9:7c:e7:cf:57:4b:8c:82:b4:8e:9d:e6:1f:
29:9f:f9:02:90:52:c1:74:43:fc:1a:7b:e4:79:7f:
c8:6e:fc:e9:8e:e9:82:90:49:2a:48:1b:ef:88:40:
96:72:a2:de:92:d6:04:9d:ea:87:3f:0d:6b:f9:8a:
bc:bc:24:a7:21:21:31:06:7d:6d:b8:bf:55:0a:55:
e8:70:56:3a:48:18:14:0b:d3:76:96:bf:f7:fb:4a:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:90:1C:26:CD:20:B1:60:B1:A1:A4:E6:9D:EB:A0:05:7D:C5:C8:47
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9f:39:ef:4a:54:96:4a:7d:f4:be:57:28:6d:a4:b4:11:cd:
74:ea:c4:16:7d:fe:aa:90:99:9a:5d:ab:11:7b:74:8e:7f:34:
25:cc:2d:64:95:cd:3d:0f:f6:7f:b1:8b:ee:a9:02:bc:83:d2:
2f:14:ed:27:b0:b2:0c:6e:bd:77:e0:17:2e:74:e2:9b:7f:7d:
d2:5f:b6:39:84:6d:a2:52:d2:87:7c:bd:45:dd:68:b5:05:ef:
b1:60:8c:48:af:51:d5:aa:49:bb:39:d8:84:c1:7a:7f:7d:80:
72:a1:87:bb:cb:c3:c2:4a:18:1e:c9:6a:0f:09:b8:22:4a:00:
ec:b7:5e:57:1d:64:c3:3c:35:73:0e:d4:5d:da:82:41:04:92:
ce:fd:0b:64:d5:da:94:be:d4:2b:bb:89:df:c0:05:6d:2e:cf:
da:80:3f:45:64:7f:9f:b7:ae:37:e6:61:41:68:97:28:3b:32:
a2:10:98:e2:3c:07:3c:71:10:f9:87:24:ca:0a:73:12:9c:03:
6e:28:31:b8:08:35:67:df:8d:51:69:87:ea:c6:c9:80:6f:17:
89:a3:a0:d4:b0:7c:90:d1:1e:e6:6d:ec:43:4f:5c:4b:da:f7:
f9:d0:fb:9a:4a:5f:3a:79:8b:a5:88:c9:08:99:dd:9e:aa:8e:
28:60:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:21:12 2025 by rpki-client