Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
File: Zu8xraxmOFWz3dGTHETPgGTWpus.mft (raw, json)
Hash identifier: VWLgVSLahQVaGfoCbhIv9HQ4g4C4xrTORLsGvL8AyU8=
Subject key identifier: B8:55:AC:02:B9:28:D1:6E:8B:01:B8:A0:31:35:8E:48:6F:3D:85:E9
Authority key identifier: 66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
Certificate issuer: /CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Certificate serial: 0196A05198D480FB2B15988FE1D4F6CEF1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 12:00:24 +0000
Manifest this update: Mon 05 May 2025 12:00:24 +0000
Manifest next update: Tue 06 May 2025 12:00:24 +0000
Files and hashes: 1: XmInGKZQVpi4yiOnRct1YYYqWiE.roa (hash: R86EgdaEJJTkg9AcxCYcJUrFnlotYJxO2Dz2JbHzD6o=)
2: Zu8xraxmOFWz3dGTHETPgGTWpus.crl (hash: 2n29kOKlj03qPvXenE3ClS+IwhkjwcvDOtDip/x9Fic=)
3: quUKUBb4zZe6-7AC8l87cCVH0H0.roa (hash: GrPFGNPKw3mudZK+q8bDj+RCkl+C4u9ag/IOaEBEaJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:98:d4:80:fb:2b:15:98:8f:e1:d4:f6:ce:f1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ef31adac663855b3ddd1931c44cf8064d6a6eb
Validity
Not Before: May 5 12:00:24 2025 GMT
Not After : May 6 12:00:24 2025 GMT
Subject: CN=b855ac02b928d16e8b01b8a031358e486f3d85e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:fa:16:06:6b:e4:bd:ff:bb:e9:81:a7:7a:
66:20:f3:42:1b:14:85:41:0f:94:fd:93:ba:5d:78:
e6:dd:86:f7:40:33:aa:06:ca:1a:4f:97:c4:2a:9b:
0d:d6:fc:3a:19:db:b8:6d:60:6e:5b:7b:d8:b7:53:
46:3c:5c:f1:7a:64:c2:ac:3f:3b:be:74:05:bf:68:
c4:14:f3:8b:18:06:ac:1c:e5:cd:17:04:ba:44:34:
99:58:e1:c9:a7:e3:79:eb:52:44:98:67:4a:e7:55:
e0:fe:c7:57:aa:38:a7:cd:80:46:57:2c:59:8c:7f:
f0:e9:3b:b1:32:f9:4f:0b:36:89:76:62:47:87:83:
72:bd:6a:41:89:af:51:51:47:cb:8d:aa:63:f0:95:
b0:b5:47:29:c0:46:62:f4:bf:4b:4d:3c:5e:23:77:
7c:d1:f4:12:1c:51:3a:94:54:33:8b:60:ca:62:49:
aa:2a:9d:bb:2f:f2:f0:5a:b8:2e:0a:96:41:17:49:
fa:08:0e:fb:23:48:44:4c:30:50:fe:fd:38:72:05:
78:46:7d:36:d5:45:26:75:5e:84:e0:d3:f7:7f:2b:
b3:e3:d3:58:2a:58:7f:85:20:bc:6c:ae:26:fc:59:
9d:4f:db:2a:a2:2a:dc:5a:15:3a:1a:ca:50:2e:c9:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:55:AC:02:B9:28:D1:6E:8B:01:B8:A0:31:35:8E:48:6F:3D:85:E9
X509v3 Authority Key Identifier:
keyid:66:EF:31:AD:AC:66:38:55:B3:DD:D1:93:1C:44:CF:80:64:D6:A6:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zu8xraxmOFWz3dGTHETPgGTWpus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ed4da0-0647-446f-b065-db0dcc08f452/1/Zu8xraxmOFWz3dGTHETPgGTWpus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:92:d9:97:54:77:59:d3:12:3a:28:0c:6f:2f:4e:21:b7:be:
d3:f3:ef:60:08:ce:ea:49:f4:14:a6:0b:35:68:e6:89:93:31:
5b:ef:2a:c7:92:3d:13:1b:29:8d:0e:97:5b:42:22:22:8b:5b:
e8:7e:d9:70:cb:08:57:0c:02:7b:9e:34:25:88:f9:11:26:8a:
f6:4a:5c:a9:d5:44:59:98:e7:43:e5:ad:f4:a8:f0:e2:43:03:
a4:df:ae:d0:9c:5c:53:ba:31:4e:33:15:43:66:4a:74:89:d6:
e0:d3:e6:81:60:c1:fd:b6:63:ec:ac:9d:c8:b4:ea:59:c0:af:
a2:64:2d:56:7d:8a:99:6d:ea:12:7d:37:dc:64:af:9a:7c:93:
03:20:50:e0:5f:09:0d:aa:fc:9b:f7:1b:4d:c0:d7:e9:98:1e:
f3:75:69:57:d0:c5:72:c3:78:e1:1e:22:7a:e3:d3:05:10:60:
36:86:8a:dc:fc:c6:d9:bc:03:ef:8a:c3:f9:f9:9f:b5:44:7b:
46:db:87:86:b4:53:23:8b:c8:3f:04:99:b3:99:e4:1c:3f:07:
51:44:a1:cf:18:de:c3:a3:11:9a:f2:5d:02:04:4a:58:69:c2:
83:94:7c:3c:d6:36:5a:bc:87:0a:81:fd:1d:d3:c9:02:00:b3:
5a:94:69:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:41:23 2025 by rpki-client