Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
File: Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft (raw, json)
Hash identifier: aalF/Om6iPbvOKpEOYGD3fz+gSf4Idu/YjdNGHAeHX0=
Subject key identifier: FB:03:62:16:47:37:19:98:ED:79:AC:9F:86:8B:09:2D:C5:09:A3:1E
Authority key identifier: 66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
Certificate issuer: /CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Certificate serial: 0196B6D95D2DC2F117663047DDFC0CBC95AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
Manifest number: 1537
Signing time: Fri 09 May 2025 21:00:20 +0000
Manifest this update: Fri 09 May 2025 21:00:20 +0000
Manifest next update: Sat 10 May 2025 21:00:20 +0000
Files and hashes: 1: 8VKbbYixNDCpMWrK8Sk18PBt9UI.roa (hash: Y+EwSEC1feZ0TsmplFocxAWfhhAkFX7OxAfih+EUUq0=)
2: 9iP7WJpaeB_-buLXK8znbS1Ia3M.roa (hash: WfmJ7gmjlOFm1xY2ae1k54FPRmlhbu8yzibRgq+Obrw=)
3: KO1YGIQXzqmCT0PfoP9U_bP8Ik0.roa (hash: snMWMSvb7n+P3ZpH6VNK6nVq04jDlvUE+5CJBun4qik=)
4: Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl (hash: xk7rklpOXuJNwKbe4hXPDyD/hMYyHAntx5KQsTDhi+U=)
5: cvFT9U6f9q2iEs9qYdY5pICL5uA.roa (hash: rpF3ncfSzctaMA19sRq+0rLTTnT49oldb4WYIOd4jLo=)
6: j97-8Fr-iu2JkstPIny1GyoUCWs.roa (hash: hG141yU64tbNFyVwR3WNdvmuMd8XffVyyIfIeXPsAX8=)
7: oCb6cpOKxQ3hs0Wd_KXRQQOGUOY.roa (hash: nIAMXpEpkh1hhboO/mB9TQEizUmas4RdDtRm1RU1TV8=)
8: tOlreYPe7u67idbXYncHUQK-mIo.roa (hash: KU1u5Wpoy603w8tu9YwxwROqP4UYKqLHuGvfzTsDk/c=)
9: zegOmVW3er1W7JPzrg42o5wEwdQ.roa (hash: 4d7Zk0b0nBk4WIXJdlH8YvyzxungmG127NYOALKCd2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:5d:2d:c2:f1:17:66:30:47:dd:fc:0c:bc:95:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66de1d9dcdb25c1e532c5c9b69dfa757e306210e
Validity
Not Before: May 9 21:00:20 2025 GMT
Not After : May 10 21:00:20 2025 GMT
Subject: CN=fb03621647371998ed79ac9f868b092dc509a31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8b:e1:7b:0c:db:2a:78:1f:08:be:ca:35:06:
55:49:00:b2:34:ae:d4:de:ce:6a:fd:1f:5a:c2:e7:
fe:84:f4:a5:3c:1f:5c:d8:b5:13:22:76:45:7a:d2:
cd:3e:55:1f:45:ee:74:f6:f3:9f:9a:bb:66:00:a6:
3e:04:82:a6:87:b6:e6:9f:eb:b5:31:51:f0:31:86:
88:91:7f:7c:64:64:a4:ea:de:79:3a:de:9f:3d:ea:
da:ef:af:27:76:cd:c1:10:7d:cb:10:c8:e6:ff:7a:
37:fd:20:1e:1f:a1:7c:1d:d7:4b:8a:d7:5d:f2:60:
e4:77:e0:c5:c3:8c:89:bc:4d:3c:3a:89:b4:a8:97:
89:4a:56:1a:0e:c8:31:89:42:89:ae:ac:be:6e:d7:
62:8c:d6:de:2c:ab:43:0e:cd:a5:fe:e2:6d:83:04:
58:7a:34:0b:93:ef:28:5f:e3:e7:21:75:e5:25:20:
73:fe:15:38:05:83:f8:42:f7:0b:ef:27:e6:b5:8d:
2b:91:c3:d4:f5:c4:4e:2e:f5:8e:b4:59:a3:41:2a:
e9:a1:13:27:e8:1d:fa:fc:9c:c9:10:df:75:d1:12:
1d:f7:db:0c:64:bd:12:ff:7c:74:20:86:30:70:d1:
20:6d:b3:90:d5:2c:22:3a:9c:99:21:b3:94:20:1a:
f9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:03:62:16:47:37:19:98:ED:79:AC:9F:86:8B:09:2D:C5:09:A3:1E
X509v3 Authority Key Identifier:
keyid:66:DE:1D:9D:CD:B2:5C:1E:53:2C:5C:9B:69:DF:A7:57:E3:06:21:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt4dnc2yXB5TLFybad-nV-MGIQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/60fcfe-7b2c-4672-bc2f-40479870976e/1/Zt4dnc2yXB5TLFybad-nV-MGIQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:ca:f3:77:ff:5a:98:86:89:6d:4e:68:64:27:10:6e:23:
05:9a:43:52:18:fa:a4:e4:20:72:e8:7b:d9:23:46:09:54:12:
79:5e:e3:75:81:91:ac:b3:81:3f:65:cf:c7:fd:0b:ab:5c:f8:
9b:45:ae:59:3a:5b:cc:12:35:3c:2f:f6:24:ae:c8:8a:a2:2c:
2b:25:67:39:c4:a9:9f:f8:78:6c:38:18:7b:4b:72:c3:c8:0e:
3c:fa:68:bd:71:e8:4d:27:6a:e8:e9:d8:3c:8f:1e:35:0f:2f:
cb:98:5e:d6:ab:21:d7:8a:70:d5:29:14:c2:53:7b:6b:72:a8:
34:29:fd:0c:bc:df:c3:59:e8:92:1b:c7:89:df:a8:90:2e:07:
9d:d3:b3:f3:eb:bd:00:8d:7a:c6:32:3f:3f:d0:a3:65:9a:9c:
e2:5e:f0:dd:6a:e1:26:58:81:07:86:85:60:25:8d:73:86:cf:
09:3a:db:cb:cb:fc:0f:c7:59:be:bc:74:b6:ad:37:d6:95:72:
5a:db:ff:8a:82:f1:34:2f:10:c4:25:19:64:72:af:b1:d9:9e:
2b:3d:f5:b6:7f:42:85:31:b8:0b:bd:8d:68:91:f9:52:96:1b:
4d:85:d6:f3:ea:8b:69:38:9b:f3:db:37:8a:b3:a6:1e:05:8d:
9f:32:8b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:07:57 2025 by rpki-client