Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
File: Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft (raw, json)
Hash identifier: wZrrfK6VfcLvStFF69ZsPBT9MlV+DZHJLjVJCmdWcfc=
Subject key identifier: 1F:DA:41:E1:CB:A0:3A:AA:74:17:5C:87:F6:DE:99:4F:65:F3:E7:7A
Authority key identifier: 66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
Certificate issuer: /CN=66af1c224db29a5104a61aac32f60956025fad43
Certificate serial: 0196D0993E3A8CABA504ED2C06674331209F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
Manifest number: 018B
Signing time: Wed 14 May 2025 21:00:25 +0000
Manifest this update: Wed 14 May 2025 21:00:25 +0000
Manifest next update: Thu 15 May 2025 21:00:25 +0000
Files and hashes: 1: Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl (hash: /kP5fe5YHsJ+Hkygq0wqUkrS/ASpKYz3qJSmN0OGZ3c=)
2: gH87DnFCIVeDMCdzZgdgeo0PCRQ.roa (hash: pS4ieprkTVj7xtpm2D2Dk/zZSNZ4iIRcoOU3KEt530k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:99:3e:3a:8c:ab:a5:04:ed:2c:06:67:43:31:20:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66af1c224db29a5104a61aac32f60956025fad43
Validity
Not Before: May 14 21:00:25 2025 GMT
Not After : May 15 21:00:25 2025 GMT
Subject: CN=1fda41e1cba03aaa74175c87f6de994f65f3e77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4e:31:a8:91:a2:27:40:41:0a:6d:92:ca:85:
e2:d3:61:cb:fd:87:2b:57:90:27:ca:0e:68:23:f8:
8b:fd:11:43:b6:59:7f:c2:65:fd:07:97:62:a5:10:
28:87:e4:25:f5:13:96:aa:88:b9:79:99:24:fd:92:
75:ac:f9:54:44:a8:75:f5:6c:be:5a:6a:8b:7e:43:
e9:ca:f5:84:b2:8b:4e:40:e9:93:a1:8e:e0:a2:b6:
65:79:90:d0:99:ee:d2:aa:de:9a:98:b1:bc:c1:7a:
77:68:d4:8c:40:f6:78:dc:67:d5:8c:87:dd:cb:d5:
26:f4:c8:eb:1a:72:45:0f:19:34:98:91:f5:8c:7b:
cd:c0:44:69:07:83:be:c1:2f:1d:d4:d6:66:43:94:
da:55:c3:ad:ae:9c:70:d0:79:5d:85:fd:99:8e:50:
e3:18:ba:84:10:96:1d:98:d7:00:b2:eb:5a:15:c1:
f1:6c:d9:39:44:65:4f:a7:f9:e7:f2:b0:8b:fd:1d:
a3:8e:a4:71:4a:5f:87:0d:9e:c6:4b:3b:b3:68:0d:
fe:bd:e2:c9:84:e3:88:3b:81:16:a8:94:97:32:69:
b8:2c:b2:41:90:a0:86:c7:0f:f1:2b:3f:a1:4a:00:
c9:ce:29:98:90:09:fc:77:d6:ca:2a:d3:6a:09:6a:
01:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DA:41:E1:CB:A0:3A:AA:74:17:5C:87:F6:DE:99:4F:65:F3:E7:7A
X509v3 Authority Key Identifier:
keyid:66:AF:1C:22:4D:B2:9A:51:04:A6:1A:AC:32:F6:09:56:02:5F:AD:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zq8cIk2ymlEEphqsMvYJVgJfrUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b28a1d-f471-4eb7-a8de-c0c74809439e/1/Zq8cIk2ymlEEphqsMvYJVgJfrUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:44:61:a2:44:6d:b0:85:53:da:a1:7e:26:af:40:e7:b4:70:
85:28:23:a5:d3:1b:ba:68:64:5e:09:ec:ab:47:4b:ab:d5:e7:
5c:93:02:1e:14:d3:7c:ed:bd:08:46:24:0b:b7:6d:c0:a5:a4:
54:7d:da:1e:da:45:e7:c3:30:a7:4d:86:de:ef:17:52:42:b2:
71:98:cf:b2:9e:d4:98:80:dc:d7:48:30:66:36:3e:6d:81:17:
40:ac:b9:d2:67:8d:17:2d:a6:80:ba:ab:fb:27:ec:0b:5b:22:
7d:29:7b:15:b9:ec:10:ad:f0:20:b4:ff:d1:f2:77:ab:98:ad:
ad:c4:5e:c5:92:a9:41:c2:1b:5a:b3:99:b9:d2:0c:46:a6:8e:
58:9b:34:30:e0:cb:cc:7b:7b:73:75:af:d1:95:70:1b:da:7d:
11:68:b9:6a:70:3b:c7:dc:0b:ae:37:52:c5:40:1f:9b:15:52:
fb:08:d5:13:83:8c:98:13:b8:20:cb:92:d6:b3:a7:3b:9e:df:
c9:25:af:d2:c9:0c:63:cd:ff:4e:7c:0f:56:c2:53:00:52:f4:
3b:a6:99:6c:0b:12:f0:4f:e3:64:5f:7f:4e:6a:47:72:db:d2:
1c:5f:03:d3:7e:14:33:fc:63:fb:aa:53:77:34:26:42:89:af:
34:3f:66:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:38:18 2025 by rpki-client