Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
File: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft (raw, json)
Hash identifier: DhqZtRmOW9SekcSHT7AD6wamG9pdxzRFv0siovtKf0k=
Subject key identifier: AF:43:AE:95:2B:C8:07:34:05:70:62:F1:63:08:96:C9:97:A3:17:A7
Authority key identifier: 66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
Certificate issuer: /CN=66ba8d64e901b39b501ed3693ec27430713886e3
Certificate serial: 0196CFF472F23D794059E6F556AC2C614222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
Manifest number: 0EAB
Signing time: Wed 14 May 2025 18:00:25 +0000
Manifest this update: Wed 14 May 2025 18:00:25 +0000
Manifest next update: Thu 15 May 2025 18:00:25 +0000
Files and hashes: 1: Fg0QsDS_oIn0AHFloFbOWLXLPYw.roa (hash: PCZ0sNE5BS8dEXbU+ksvDG3w1iOi7xIBrn9yDW7TZ/U=)
2: ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl (hash: iI3jfn1kFCKibxtuL/TMvOxPc4RZ/0mU7BaKRRYenjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:f4:72:f2:3d:79:40:59:e6:f5:56:ac:2c:61:42:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ba8d64e901b39b501ed3693ec27430713886e3
Validity
Not Before: May 14 18:00:25 2025 GMT
Not After : May 15 18:00:25 2025 GMT
Subject: CN=af43ae952bc80734057062f1630896c997a317a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:25:3e:76:33:6a:59:a3:21:e1:2c:76:45:
d9:5a:f7:c9:d4:a6:d9:9e:4e:e6:8b:94:02:d3:b0:
e6:dd:a7:d5:28:23:95:d9:80:39:c3:19:6b:43:a5:
ba:14:b9:dd:11:c8:9a:f0:36:1a:22:42:61:26:91:
8d:de:b4:ac:cf:2f:02:f0:dc:6b:af:e0:33:ee:9c:
7d:50:34:da:e2:8d:8f:78:bb:6b:cb:f6:d9:54:68:
37:56:51:e4:6b:dd:98:fb:fe:bd:44:48:07:7c:50:
49:95:33:72:05:ba:87:5a:83:36:6a:b8:d3:7c:6c:
6c:09:7f:84:cd:9a:b6:61:4e:21:73:65:f8:46:e8:
fd:9e:3c:97:b2:36:f5:30:60:0d:45:44:18:2c:13:
84:36:71:8e:d0:84:54:eb:be:47:2e:b7:db:5c:f6:
b0:62:a1:68:38:6c:71:23:cb:18:0d:bc:67:b4:f1:
86:5f:09:bd:14:a3:92:48:73:d5:8f:7a:2b:25:c2:
47:b7:31:e0:1f:c3:90:92:8b:86:a0:04:e1:14:c3:
b4:12:7b:bc:fc:04:f8:09:b6:92:c7:c9:82:3f:72:
ae:10:6f:4b:15:3e:cb:3c:1c:9e:fa:bf:45:06:9f:
d9:ec:0f:7c:30:0a:d1:c1:ad:73:6d:be:fb:54:49:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:AE:95:2B:C8:07:34:05:70:62:F1:63:08:96:C9:97:A3:17:A7
X509v3 Authority Key Identifier:
keyid:66:BA:8D:64:E9:01:B3:9B:50:1E:D3:69:3E:C2:74:30:71:38:86:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/aa7e53-490f-4177-8b11-0b3e7ebe4ac2/1/ZrqNZOkBs5tQHtNpPsJ0MHE4huM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:61:2a:a1:36:9b:d6:ad:b3:de:ba:11:a8:d2:4b:c4:c4:2e:
7b:00:26:42:e0:11:73:c5:43:ad:39:b6:50:72:69:0c:91:e8:
75:91:6e:71:ee:5f:47:d6:a9:cd:0b:20:44:4b:ca:b9:b9:52:
4e:94:9d:c1:50:2d:e6:71:a0:24:94:02:3e:8c:f9:cd:6f:86:
14:09:01:94:cd:16:ad:72:90:9a:07:62:2a:75:92:7a:98:e3:
0b:98:67:61:a6:c1:39:06:12:46:20:7a:1d:ac:32:31:f2:ac:
8c:cb:76:1e:40:61:9d:42:3c:6d:ac:d3:f8:85:03:bd:3e:80:
35:10:c8:53:72:ec:29:2d:09:4e:22:a6:98:3d:2d:50:d4:40:
a6:a3:3c:b9:6c:52:7e:42:ad:6d:d8:2a:e4:2c:28:45:0a:f0:
a1:5b:f3:83:54:ea:23:04:3a:1c:2b:a4:c8:b1:ea:24:9b:91:
9d:ba:a8:f0:4a:b7:02:e0:fc:dd:80:ab:81:75:09:f6:86:b3:
69:58:ad:fd:29:09:94:99:ca:7f:02:5b:85:48:8a:22:a0:f4:
80:42:40:b2:8a:2c:d8:b5:b7:3c:53:ab:06:45:9d:82:c8:3b:
e7:eb:3e:0c:96:11:be:c3:73:76:a8:37:7a:c2:2e:5c:ef:ce:
ac:75:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:24:29 2025 by rpki-client