Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File: k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier: q8WrgqWKlmhjGFQWyXh3ZIzJkwhpXtZF1wMGGLwbPXc=
Subject key identifier: 44:9E:0C:F2:1F:44:1B:2B:45:B8:DC:D6:64:B8:6D:80:2A:2B:71:34
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer: /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial: 01969F0882D0B035B54481ABDBF472D5C7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number: 035C
Signing time: Mon 05 May 2025 06:00:57 +0000
Manifest this update: Mon 05 May 2025 06:00:57 +0000
Manifest next update: Tue 06 May 2025 06:00:57 +0000
Files and hashes: 1: TP9gFKgxBg6Q0nRcWGidlz7qFCE.roa (hash: jhQI7t+AgP6hvPj91hzIOl0xoOYJULkePtGE660/ydE=)
2: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
3: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: CI8MSvc8cti02F9zcwRINVYpe731xRbYgSCi8iBPwK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:82:d0:b0:35:b5:44:81:ab:db:f4:72:d5:c7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Validity
Not Before: May 5 06:00:57 2025 GMT
Not After : May 6 06:00:57 2025 GMT
Subject: CN=449e0cf21f441b2b45b8dcd664b86d802a2b7134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:6d:de:bb:8f:26:c6:4b:d0:77:12:49:87:
29:c2:12:6d:83:c1:ca:17:ea:09:37:d0:31:55:b1:
9a:9b:c7:b0:38:e2:6d:bf:38:81:e3:94:1a:8e:1f:
0e:bb:47:20:60:64:e7:75:ab:0c:12:f6:6b:f2:96:
15:78:d1:b0:20:75:fe:27:bc:d2:ee:14:9e:8d:8f:
73:05:36:16:51:e1:26:4f:f4:36:e0:c3:0a:99:1d:
5d:32:92:83:88:10:1d:60:4b:78:c2:d2:e8:4a:93:
77:58:69:f3:a2:f3:05:6d:65:7b:25:3f:6d:f1:a9:
39:f9:f7:d6:9e:cf:90:f3:3f:0d:41:fe:03:b7:61:
3d:5a:44:fb:2f:1c:f2:ac:e4:e9:c7:6e:f9:0a:eb:
82:99:e7:0c:6f:47:46:18:c2:17:41:aa:37:10:a7:
ab:dd:b6:bb:10:e0:ab:c8:b1:ff:82:0b:48:63:78:
70:53:3e:f4:fc:8b:1b:85:8b:72:13:ac:e2:76:8e:
13:ad:c8:6c:94:89:81:5f:58:2d:f2:e8:23:34:f3:
ab:6e:f8:45:8e:b6:5e:bc:e1:89:15:e8:d7:dc:84:
7d:7b:c3:97:f8:a9:ac:8a:30:db:d5:1a:dd:18:08:
62:fb:78:96:af:79:4f:f7:39:00:8f:ec:2a:d4:3d:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9E:0C:F2:1F:44:1B:2B:45:B8:DC:D6:64:B8:6D:80:2A:2B:71:34
X509v3 Authority Key Identifier:
keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b2:96:7f:d5:88:d1:b5:ed:e9:d2:85:3e:bb:96:ca:b9:67:
ad:26:ed:e9:1e:98:14:8d:4e:a1:90:16:57:6d:c9:32:d0:bb:
dc:f3:90:a6:4d:8e:fc:55:19:84:4d:cc:03:91:3c:dc:db:18:
70:c2:6e:e3:1e:d1:0e:0a:28:5e:0a:78:b7:bf:1f:40:8e:ed:
99:94:12:7c:77:2d:aa:87:ef:5a:e0:bc:2a:92:13:00:ed:3f:
f4:e4:c3:3a:84:90:2c:8a:c3:15:00:24:84:3e:fb:29:5c:d0:
9e:8c:5e:79:57:22:81:6d:57:d1:68:c7:a6:0b:1c:f3:c7:70:
97:22:d8:3e:65:15:a5:14:04:f6:d9:d9:94:2c:2b:7b:ad:f2:
e5:1c:58:0a:b8:f0:89:b7:c4:d8:13:09:6b:31:4d:53:b5:ba:
64:85:d9:fe:fe:a1:b6:e1:29:cd:a6:60:be:cb:2a:2d:cb:15:
0a:64:3e:b2:f5:2e:9c:e0:9b:86:95:ca:bf:3d:dd:60:f4:41:
5e:6c:7e:e6:42:93:75:f0:f6:22:2e:ae:ed:5f:1b:bc:22:f6:
45:72:21:43:cb:5d:88:f5:6a:d1:1b:10:c4:20:51:fb:b4:2a:
a0:44:df:96:11:5a:4a:8c:4d:12:82:87:28:38:57:49:39:d9:
f4:be:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:15:44 2025 by rpki-client