Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
File: Zd83n6ryEKcDbawF3mtXctvk3Ww.mft (raw, json)
Hash identifier: JtVAszpa/Jlrd7gk0afWoQQ44W2BlA2lw+CWsGnJJi8=
Subject key identifier: A4:D2:BC:02:98:A9:1A:C1:C3:41:6F:9A:C9:50:9D:C7:F9:33:E4:6C
Authority key identifier: 65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
Certificate issuer: /CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Certificate serial: 0196C013DA7B1B8D38574201DC635664AB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 16:00:48 +0000
Manifest this update: Sun 11 May 2025 16:00:48 +0000
Manifest next update: Mon 12 May 2025 16:00:48 +0000
Files and hashes: 1: Zd83n6ryEKcDbawF3mtXctvk3Ww.crl (hash: wJzlYv9C2nJTRUmsk6IVxHLvaq/84i7npYNH6iPEeWc=)
2: o8etAG8wVZ5Gzgc5gvkz3AEmY5g.roa (hash: A2h09hDnc623pPAi/KarvXmKS91Xx49mtAM/lILxzFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:da:7b:1b:8d:38:57:42:01:dc:63:56:64:ab:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65df379faaf210a7036dac05de6b5772dbe4dd6c
Validity
Not Before: May 11 16:00:48 2025 GMT
Not After : May 12 16:00:48 2025 GMT
Subject: CN=a4d2bc0298a91ac1c3416f9ac9509dc7f933e46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:1d:1c:ad:cc:fe:4b:b5:98:ae:6f:67:83:
81:4b:3f:dd:f4:43:6d:2d:c0:7f:cb:da:5f:4d:06:
7e:b8:44:5f:2c:77:1e:10:95:89:74:93:44:eb:53:
f4:07:1f:ef:bf:71:f6:a4:28:28:a6:da:a6:8d:49:
64:4c:ec:7a:e8:32:0b:b8:56:29:84:81:f5:a0:c0:
e5:70:e0:c7:f8:c9:cd:f8:18:f4:3b:81:c5:f4:d0:
b1:05:3c:81:4a:22:eb:4b:46:fa:5d:67:5f:e7:6d:
5e:44:c8:4a:61:f5:03:41:5f:d1:66:5a:55:7f:fb:
31:1a:e9:2c:7d:e0:d3:78:70:a1:dd:24:55:5f:cc:
aa:e7:42:89:ea:da:39:4d:9d:cd:0f:bf:d7:80:6a:
54:b3:8e:94:fb:03:0c:da:1f:f2:fe:56:30:cb:ed:
d9:f9:d9:6e:25:76:14:16:8d:01:38:f3:c9:23:5f:
85:ab:52:af:df:b1:70:4b:43:65:c9:7b:a1:00:2e:
9a:54:0d:f6:2c:67:12:21:f5:34:9b:d3:f3:c6:1e:
5b:94:73:34:64:f8:d7:59:61:8e:ec:80:ac:46:69:
a0:4c:98:f3:d4:f0:38:d9:e4:65:5d:23:be:7c:7e:
1a:ee:b0:a9:eb:db:98:46:5b:0c:8d:12:4c:ed:ea:
f4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:BC:02:98:A9:1A:C1:C3:41:6F:9A:C9:50:9D:C7:F9:33:E4:6C
X509v3 Authority Key Identifier:
keyid:65:DF:37:9F:AA:F2:10:A7:03:6D:AC:05:DE:6B:57:72:DB:E4:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zd83n6ryEKcDbawF3mtXctvk3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ed51ec-78e6-4ff0-ba58-076c88b8802f/1/Zd83n6ryEKcDbawF3mtXctvk3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:80:2c:62:75:e2:7b:a5:15:dc:83:1e:12:6d:0d:9b:34:1b:
e2:15:74:c8:4e:8a:7d:22:01:ca:cc:9d:71:92:21:21:99:97:
18:87:f8:97:a1:8a:1f:f0:ba:85:b5:da:71:da:51:c1:35:2f:
89:ba:41:6e:d0:cf:32:3b:e2:be:8f:26:5f:d5:f6:4c:66:df:
85:21:e8:dd:83:f0:e3:64:b4:ad:b3:e3:fb:4d:ac:2a:40:e1:
12:9f:7c:98:e0:00:3f:ac:88:71:6c:2f:05:1f:e9:27:ab:c9:
7a:37:1d:43:91:1f:10:7d:f2:66:eb:3f:66:f4:12:3b:20:e1:
d2:b9:13:78:f0:93:56:18:1a:01:9b:03:3d:ff:54:59:a0:47:
06:9c:8d:a9:02:da:c5:a9:a3:b0:27:21:52:f3:ae:48:40:8b:
0f:04:a4:8d:a7:56:78:10:f7:82:dd:16:87:8a:b8:83:20:dc:
63:f8:bc:78:e0:38:5a:c6:7c:f2:ce:13:ce:6d:fe:75:04:eb:
7d:fc:f0:35:55:21:de:83:40:74:47:89:93:d0:df:db:89:aa:
11:06:ee:e0:3a:cc:7b:e4:14:27:25:50:b0:80:d2:d4:e5:a4:
6c:d4:2e:ac:57:73:56:2e:52:ef:fc:81:c9:19:ff:40:10:f9:
0e:99:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:26:22 2025 by rpki-client