Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
File: Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft (raw, json)
Hash identifier: oql+7/CFPxREozfdJ7W1B3NuMzSMkckZMvUXvGSSazc=
Subject key identifier: 13:28:24:44:74:B0:DA:F4:1B:92:0C:E5:9A:A3:8B:E5:AA:88:A5:2D
Authority key identifier: 66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
Certificate issuer: /CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Certificate serial: 0196A12D8CDFB5A8755FC99DC3763A2D2C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 16:00:38 +0000
Manifest this update: Mon 05 May 2025 16:00:38 +0000
Manifest next update: Tue 06 May 2025 16:00:38 +0000
Files and hashes: 1: VTMTtjqH-zixo9hQexyKWnuO0p4.roa (hash: QpOOm2VlJ9G/CZEjnwWuM3L+t5sPw22wtkcRl/OMgAk=)
2: Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl (hash: YBCS/XpiAhPwKyAjqL9wEyxQA+t6H0XX2LLXbthiKoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:2d:8c:df:b5:a8:75:5f:c9:9d:c3:76:3a:2d:2c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ff1e6a5cc3c0697629f4afbb0b07ae79133c5c
Validity
Not Before: May 5 16:00:38 2025 GMT
Not After : May 6 16:00:38 2025 GMT
Subject: CN=1328244474b0daf41b920ce59aa38be5aa88a52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:06:13:86:42:71:1c:a0:1e:15:02:f8:fd:
85:46:06:32:4a:73:a1:7f:85:c7:10:5c:12:45:8a:
20:00:41:5f:b8:7c:0e:77:fe:a0:a1:f5:9f:f5:e1:
7f:da:c2:87:4a:62:43:1d:cf:e7:d9:29:7a:4a:19:
d2:a0:a3:34:11:93:50:b5:18:32:67:d2:e8:39:da:
ef:30:c7:5c:e9:f5:27:b8:5c:e1:8c:7b:61:16:c5:
13:c2:6b:88:fb:e0:85:b6:f4:71:95:be:59:38:48:
16:93:35:66:c6:21:4a:28:b6:27:4b:00:e9:93:9b:
40:77:2c:32:52:0c:3c:85:10:2c:85:20:c8:e0:ac:
9c:9d:40:8f:09:98:02:b9:77:f6:dc:79:21:d0:60:
31:5c:87:db:06:4c:3b:e2:8f:9d:b3:54:ca:11:cd:
32:4f:94:6f:3b:1c:7d:9c:25:f1:45:da:26:29:c3:
53:57:f1:47:e3:1c:d9:8e:1b:8c:d3:39:18:4c:3d:
b3:c4:31:b4:c9:17:00:35:e3:d6:11:68:f6:2b:f9:
80:d2:f0:35:11:05:e4:0a:44:73:4d:3f:3a:30:ac:
0c:64:3e:b3:e9:00:dc:c8:37:71:9b:03:c2:c6:db:
13:ce:bc:21:f8:8e:70:90:c9:e1:50:96:0b:2b:74:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:24:44:74:B0:DA:F4:1B:92:0C:E5:9A:A3:8B:E5:AA:88:A5:2D
X509v3 Authority Key Identifier:
keyid:66:FF:1E:6A:5C:C3:C0:69:76:29:F4:AF:BB:0B:07:AE:79:13:3C:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv8ealzDwGl2KfSvuwsHrnkTPFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/07d5eb-6211-4d7a-a96d-ee42745d8fd1/1/Zv8ealzDwGl2KfSvuwsHrnkTPFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7f:e4:a3:ad:0c:55:d6:cc:43:c1:8b:02:d1:c3:f9:e3:99:
65:0d:cf:12:e5:ed:26:5a:b8:c8:c5:aa:84:8c:18:31:ca:aa:
ae:14:56:1b:7c:8d:e6:28:81:95:0c:d1:73:70:4d:f0:95:99:
b4:ab:50:90:80:12:ea:ed:e1:e6:9c:da:db:14:63:71:bb:b3:
51:a1:84:ce:41:52:99:c4:bb:9e:f2:f5:28:8c:d4:69:be:bb:
36:3c:c9:f1:1f:cc:91:de:43:23:9b:d0:f5:3f:5e:7f:dd:a9:
34:f6:0f:db:03:16:ad:5e:af:46:2e:54:a1:0a:06:51:ce:66:
bb:62:51:6d:5c:15:6c:26:66:4f:aa:3c:c9:5f:58:58:79:b8:
78:97:61:1a:e8:69:5c:4e:ba:55:ed:96:12:15:7f:96:3f:6c:
93:88:ed:6b:da:4e:ce:13:92:8f:26:93:a4:92:5b:64:41:21:
f2:7a:ee:26:c2:13:0f:f8:e3:f7:63:59:5d:cc:76:5f:97:ee:
01:56:ac:59:43:5d:07:4b:b0:71:cb:80:9d:cc:01:f4:c6:93:
6a:c1:2e:6c:49:43:cf:d4:74:ad:fa:e4:f9:42:50:99:06:0b:
81:ef:c8:bb:e7:a7:00:c1:c1:f5:24:75:59:1c:d4:3a:43:9d:
01:20:35:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:28:10 2025 by rpki-client