Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
File: zGUyZJpq70cUhBucj1RmDYibBik.mft (raw, json)
Hash identifier: B4mwv22xuQJEj6MYzCKIepj4IS5MpmQ3/o9q5HVHA5s=
Subject key identifier: 63:01:9E:9C:4F:01:09:04:3C:86:D9:40:94:8B:5D:FC:BA:BD:D0:3B
Authority key identifier: CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
Certificate issuer: /CN=cc6532649a6aef4714841b9c8f54660d889b0629
Certificate serial: 0196BBC8DC5D347163F7A3E264385DEBC0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
Manifest number: 0AE1
Signing time: Sat 10 May 2025 20:00:25 +0000
Manifest this update: Sat 10 May 2025 20:00:25 +0000
Manifest next update: Sun 11 May 2025 20:00:25 +0000
Files and hashes: 1: KciWQRUUKA8G37qpiXIJOStEILw.roa (hash: YmPZf2aHwh91FO6k/J1ZnsKw+UadvZ5IXF9CJ4jQgGc=)
2: onkr1ceIBIpKPgL3tDwWHACVi7M.roa (hash: EEvxEqVipQPJzVBh5cB6I21KRgxyU4/cw+o/6DWEUyk=)
3: zGUyZJpq70cUhBucj1RmDYibBik.crl (hash: nbKFUNQbWMAh0oFB4IQr0x0rMXS/a7Uf+/7SOghOHDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:dc:5d:34:71:63:f7:a3:e2:64:38:5d:eb:c0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6532649a6aef4714841b9c8f54660d889b0629
Validity
Not Before: May 10 20:00:25 2025 GMT
Not After : May 11 20:00:25 2025 GMT
Subject: CN=63019e9c4f0109043c86d940948b5dfcbabdd03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:55:96:ba:68:64:62:a9:a0:e4:b9:90:68:
91:94:41:62:69:ac:06:40:05:f4:a5:07:1f:fa:e0:
26:6b:f2:c8:64:b3:89:cf:fb:e7:c2:b7:67:36:5e:
d1:5b:16:c3:66:68:19:00:25:4c:41:83:06:2d:99:
84:59:00:c0:56:5c:4a:a6:46:2b:26:c4:69:35:a1:
3c:78:f5:f2:a3:3a:c0:35:ce:86:6c:ed:97:a4:f1:
31:f0:94:99:f7:22:9e:78:e4:49:25:5a:0c:6d:b1:
a5:35:07:62:92:1f:d7:76:6e:fd:c6:f1:4d:fa:e2:
f9:bc:cb:e1:55:b2:8a:0f:9b:84:02:be:23:97:60:
74:7d:3a:1a:df:76:d2:64:c3:4e:26:59:a9:70:da:
a6:e1:90:ea:02:09:95:e7:55:13:a7:84:57:11:5a:
ef:ae:1c:f7:63:64:71:d6:9c:99:c6:77:6c:9d:b9:
b6:cd:06:7f:db:47:af:c6:31:2b:ac:d4:09:f3:78:
77:bc:b9:cf:92:2d:30:90:25:36:63:a0:e7:b3:7b:
ef:6d:4e:4b:7c:bf:e5:2f:71:16:55:f4:86:32:58:
d2:fc:cc:8a:04:15:1c:ee:7b:16:7c:0c:23:6e:89:
21:90:5d:c5:d5:b5:3c:4b:4b:98:7d:60:bb:78:aa:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:9E:9C:4F:01:09:04:3C:86:D9:40:94:8B:5D:FC:BA:BD:D0:3B
X509v3 Authority Key Identifier:
keyid:CC:65:32:64:9A:6A:EF:47:14:84:1B:9C:8F:54:66:0D:88:9B:06:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGUyZJpq70cUhBucj1RmDYibBik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/310d34-f5d8-4e96-9b7c-648f501afae5/1/zGUyZJpq70cUhBucj1RmDYibBik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3c:23:0b:f7:cd:7c:98:75:7f:7e:6b:0a:27:55:2e:70:8d:
1e:0e:d5:92:ea:cb:fa:87:3d:f6:a5:7b:d5:5d:e1:b6:f4:6c:
6a:12:d9:e9:c8:0a:fc:d1:82:19:5c:93:e7:16:3e:d5:e9:90:
4d:a0:ba:e4:c0:62:92:b8:02:87:67:65:b3:03:89:5d:ad:92:
1c:c2:28:3f:23:f0:d7:9b:07:93:8a:6a:cf:ce:98:54:60:f8:
b6:a4:28:ca:bf:64:c0:3a:cc:4c:50:8a:c0:14:00:8a:0d:e3:
bc:58:63:4e:79:96:ea:1d:4c:37:61:85:c4:8c:94:55:69:b0:
4b:06:5b:db:6a:c6:e1:39:1c:e5:c0:d1:37:3e:4e:de:b2:f5:
9a:e0:46:c6:52:c5:98:0f:13:87:ac:ca:e2:9f:53:88:f2:63:
33:ea:e5:f8:38:41:5b:39:03:e4:83:62:e3:ab:39:8e:7c:a9:
10:1d:0b:d2:99:f7:bb:d4:e1:8d:9e:44:e9:28:c5:d1:5d:a4:
d1:fd:c4:14:00:aa:5c:19:cd:51:ad:a6:4a:4e:69:fb:20:16:
fe:ba:31:04:74:f4:72:c7:c0:e4:c6:d3:c0:10:68:a5:a9:31:
88:f6:06:b5:95:15:e6:ce:d3:cd:ed:96:df:28:dc:d0:30:32:
20:04:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:58:35 2025 by rpki-client