Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
File: ZYFndLfFZl1nqGwgzrZIe1t4s40.mft (raw, json)
Hash identifier: 8Qb6t3goTVfFzEyFneQ9/RsUNQIRoWftlSew9xwEb6o=
Subject key identifier: 7D:E9:AE:9C:24:BC:7F:E3:FB:B4:95:CC:32:D1:D8:F3:99:9C:7F:BA
Authority key identifier: 65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
Certificate issuer: /CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Certificate serial: 0196BA7F8ECAAC64C548A35028B1835D5ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
Manifest number: 153A
Signing time: Sat 10 May 2025 14:00:43 +0000
Manifest this update: Sat 10 May 2025 14:00:43 +0000
Manifest next update: Sun 11 May 2025 14:00:43 +0000
Files and hashes: 1: 34m9tu8-VJMAF9BtHbwX9Jvv0x4.roa (hash: 8cDtrdeF9xJMrCFVsKTBOunUF2EsP6IX5xqHU+sWq6o=)
2: Cy2f1uXj9wbLpl4Aw6ZgdQs_Gm4.roa (hash: otz2U+ZxypMp06tq5uA+DLYREXHhlkXwvT+2vtKIHr0=)
3: L9Pl17zWKblG0Neut33hMgnvNwg.roa (hash: KjUxc5uZUEZddoMKFPfgxm4nuEI/U5FS/VZwNLhDnYw=)
4: ZYFndLfFZl1nqGwgzrZIe1t4s40.crl (hash: CW5bPM49CbJ171rOE47BzLPQ7Jgub6k+CwjlSMU/Noo=)
5: nHMt9tnZDRx6m3JgaG-0g5rC0g0.roa (hash: 1doY6wOIAWaSvtGgJud3474i9gzt/qEdhjfPhIJDXfE=)
6: pN9I61NTpOf1iptAeMEH4NWfXYw.roa (hash: /osyl/RRKnWZO9AXYWEI4cWy1HpYeLX7qYgqul7Ks0g=)
7: rVSBtBZCrH1-ozjLs4EWsLxZEKw.roa (hash: qYE3kOU/oBIWRjp9IVavev7WPsnGehT5UmTJ3lg1M9g=)
8: tonrQJbYKEeFepF8Mg5lWiEbslA.roa (hash: la8VTc6fuTFi7aBGI/izVEZyhP/KVuebx7O6/rsxC7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:8e:ca:ac:64:c5:48:a3:50:28:b1:83:5d:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65816774b7c5665d67a86c20ceb6487b5b78b38d
Validity
Not Before: May 10 14:00:43 2025 GMT
Not After : May 11 14:00:43 2025 GMT
Subject: CN=7de9ae9c24bc7fe3fbb495cc32d1d8f3999c7fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8a:dc:3d:9d:3c:98:a2:6c:c5:c7:56:bf:07:
b9:86:e7:04:8d:21:1f:87:7e:b9:1b:c1:7c:a9:06:
04:48:be:f0:2d:50:3f:90:13:1e:81:d9:1a:52:22:
29:90:89:dd:7f:92:62:54:29:d4:f5:46:f0:cc:ae:
ed:2e:bd:a3:c4:17:e7:8a:fb:f0:ca:55:b6:59:77:
f8:52:c2:b3:ac:68:4b:cb:93:d0:0d:64:52:89:88:
e0:62:82:62:81:9a:31:24:33:c6:85:46:08:9c:3c:
13:6f:98:bc:5f:4e:40:71:e3:81:1d:c3:b5:78:79:
61:da:6b:60:ab:d4:df:e5:3c:6d:fe:dc:90:c7:aa:
91:fd:77:d1:11:a9:05:d8:54:3b:cd:9a:44:31:7a:
01:d0:b0:26:69:d7:36:b1:32:33:1e:16:eb:c9:d4:
55:b8:f0:9a:eb:e1:9b:3d:6f:41:6a:cf:e5:2e:38:
ae:db:22:76:f6:e8:2b:00:72:cb:6e:d6:92:c7:0f:
e5:65:c4:32:3c:a3:40:fc:88:70:1a:d3:7c:63:69:
af:7d:b0:e3:98:03:32:0a:da:9b:da:ee:74:3f:0f:
b5:d0:75:13:d5:d7:a0:5d:4d:86:f5:e7:38:d8:7f:
c1:42:84:f9:d2:d2:e6:d5:5b:02:3a:80:02:72:2e:
24:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:AE:9C:24:BC:7F:E3:FB:B4:95:CC:32:D1:D8:F3:99:9C:7F:BA
X509v3 Authority Key Identifier:
keyid:65:81:67:74:B7:C5:66:5D:67:A8:6C:20:CE:B6:48:7B:5B:78:B3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYFndLfFZl1nqGwgzrZIe1t4s40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f3b825-cbc0-49d2-8b76-6b1469c3b95a/1/ZYFndLfFZl1nqGwgzrZIe1t4s40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e0:3a:bb:30:b9:f8:81:88:35:ab:32:a7:96:93:7d:9e:c0:
1d:6a:41:ca:1d:56:44:de:66:5e:f6:44:47:11:1d:83:6e:44:
f1:29:32:f2:38:6d:89:d6:ae:c1:68:b3:0d:e5:84:de:6a:99:
b8:45:28:60:b0:63:db:88:37:aa:d7:3f:9c:b3:61:0a:45:1a:
e5:a9:b2:91:f1:30:aa:4e:06:c3:9a:ea:8b:70:06:d5:5f:81:
bb:26:a6:1c:94:5f:40:49:06:42:59:2e:44:2d:9a:15:34:9d:
aa:e4:32:1a:bd:87:a9:71:ad:36:39:77:06:87:c5:4b:e1:a2:
20:39:89:98:d6:e5:72:d5:46:15:ea:e9:91:57:f6:4c:52:ef:
e3:7a:a6:b3:32:33:e4:cf:fe:13:02:1d:cd:8c:9f:2f:01:43:
c5:35:a4:62:b3:45:2c:95:04:0f:41:5f:07:c5:50:da:d1:c4:
60:4b:a0:f2:72:85:bb:d8:3f:de:91:44:22:f8:6e:54:29:87:
22:c9:8b:30:c9:f3:04:60:89:7e:98:e7:a4:ba:e5:6a:03:88:
39:fa:98:ab:b2:17:de:23:83:cd:3c:38:b3:e2:c4:da:3a:71:
6c:ce:3a:c2:6d:49:a5:e0:f1:04:75:7e:f8:30:0c:fd:0b:50:
6d:74:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:49:39 2025 by rpki-client