Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
File: ZGASnCIfekeBKIWmSDixLuaxXtU.mft (raw, json)
Hash identifier: NyUg2L5DRMpr3EVXM77ltB++qgSGHVchgY5t9TWy2wM=
Subject key identifier: A5:C1:F1:9E:B6:36:4E:D6:42:41:F9:59:B0:9F:89:C0:3D:A9:B4:96
Authority key identifier: 64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
Certificate issuer: /CN=6460129c221f7a47812885a64838b12ee6b15ed5
Certificate serial: 01969E9A28E0682D569F6DE8B8E1BB141C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
Manifest number: 0B3E
Signing time: Mon 05 May 2025 04:00:25 +0000
Manifest this update: Mon 05 May 2025 04:00:25 +0000
Manifest next update: Tue 06 May 2025 04:00:25 +0000
Files and hashes: 1: JmllacFYtWc-oOoWU-KiBC-dzBI.roa (hash: ofZ7OlX/Buue/GMQQmZdmktJZ/jzN3/Huw6iGY9j4no=)
2: ZGASnCIfekeBKIWmSDixLuaxXtU.crl (hash: 2ap63XjxZ1ueJlwHncTXt/aDeDjlJrOEwSVT36odd1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:28:e0:68:2d:56:9f:6d:e8:b8:e1:bb:14:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6460129c221f7a47812885a64838b12ee6b15ed5
Validity
Not Before: May 5 04:00:25 2025 GMT
Not After : May 6 04:00:25 2025 GMT
Subject: CN=a5c1f19eb6364ed64241f959b09f89c03da9b496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:0b:2e:88:e4:34:d4:ac:ca:09:c6:34:e8:
da:e4:d8:fb:8f:92:21:79:9d:b5:ba:37:2c:0b:d6:
8d:f5:77:e9:b4:e7:66:02:26:1e:d8:7d:4a:a6:56:
cf:d4:08:68:22:6b:64:6d:5f:12:37:bd:ce:23:26:
84:3a:bd:70:f8:e1:38:49:08:ea:8f:57:e6:cf:30:
9b:47:10:8a:80:51:cc:6c:f8:56:40:01:bf:43:a4:
59:f3:18:cb:38:de:f1:1a:16:91:df:a9:ab:a1:10:
da:a0:6b:97:9b:a8:ac:32:71:8d:47:75:0d:fa:44:
c8:10:8d:52:b1:12:b2:c5:75:cc:c0:f7:67:c7:35:
f9:97:b3:0d:06:a6:f8:13:7f:e3:a1:a9:b1:18:e2:
b6:9c:e3:ef:8b:b9:a5:db:e8:f0:e7:b8:ea:6c:60:
7a:28:40:eb:ec:aa:d8:2e:e6:40:8c:27:20:52:97:
62:7c:85:06:ec:11:7d:7e:5e:90:bb:c2:32:f5:dc:
4f:c0:20:9a:5c:54:32:c4:92:4b:b0:6b:7b:70:65:
36:52:25:39:ea:61:ec:21:9b:4d:eb:76:c8:a1:f0:
80:24:0e:51:b0:56:0a:a8:53:e0:6a:9b:90:98:6a:
4a:c6:d8:6d:a9:aa:8a:ee:df:74:bf:6d:23:32:56:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:F1:9E:B6:36:4E:D6:42:41:F9:59:B0:9F:89:C0:3D:A9:B4:96
X509v3 Authority Key Identifier:
keyid:64:60:12:9C:22:1F:7A:47:81:28:85:A6:48:38:B1:2E:E6:B1:5E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGASnCIfekeBKIWmSDixLuaxXtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a646af-e61d-48b6-89d2-eba988a548e7/1/ZGASnCIfekeBKIWmSDixLuaxXtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e2:8c:2f:3c:5d:86:97:bb:00:96:ae:c3:c7:c2:37:82:fe:
79:8e:09:e7:4a:e5:72:f4:f4:23:84:c3:6a:36:b8:34:67:2c:
55:d5:91:63:da:cd:08:1e:22:19:64:0d:61:b7:39:6b:80:e1:
04:df:b8:f2:8c:d7:f1:c4:2a:91:93:94:98:bd:0e:da:70:ee:
f5:d1:af:36:ab:cc:21:35:e4:e9:ac:da:71:bb:88:1c:12:3c:
b3:da:9c:40:3a:45:31:3a:08:e5:87:c6:ea:e5:aa:c5:e0:e9:
95:6e:b1:dd:f7:6d:08:05:9f:85:34:61:04:81:65:5d:b2:ec:
72:91:20:d5:8d:e7:b9:fe:3d:af:0b:2f:41:6f:5b:70:59:d4:
e5:a4:05:ce:1a:5c:ab:87:d2:28:76:25:d1:18:7a:63:02:a5:
03:f2:df:68:2b:8c:5b:8a:57:03:b5:09:a4:b1:79:00:1f:e5:
8a:eb:3e:c9:63:0a:8e:af:16:5b:4a:0d:8c:a0:66:89:87:c2:
f2:1c:de:e0:d6:07:c8:f5:78:56:5f:48:e0:a5:4b:4a:0c:70:
8c:32:3b:f4:e0:f8:67:7b:f2:5a:98:e4:ed:1b:62:11:a1:80:
5d:52:14:68:bc:ba:88:2a:be:65:65:d1:58:bf:23:af:b2:a8:
d1:fb:c4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:24:06 2025 by rpki-client