Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
File: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft (raw, json)
Hash identifier: bA7Npk2ut4WmXMFlHDIYMkyE/OlYzzSa95A+EWcyzXw=
Subject key identifier: DD:EF:5D:94:50:22:75:FB:2F:2E:DF:8F:1E:16:1F:42:8C:FB:3B:6D
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 0196B8C7C157F46E75F58898C31A94ED2651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 06:00:20 +0000
Manifest this update: Sat 10 May 2025 06:00:20 +0000
Manifest next update: Sun 11 May 2025 06:00:20 +0000
Files and hashes: 1: Y-fN4fkHcPUKcQjj7Sr2XkGHl3k.roa (hash: AGm7a+karsGXj1brZJla0akLv16UGZ06w+N3Iht2PgI=)
2: ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl (hash: 5Wo2FGWxBNszPtdTt5FGBsqm20jrTL/kuq2gzmtlCdc=)
3: vGzl2XHn-ouqEIIGqbsxm7i08EY.roa (hash: 4VVUoLGm+xrN9laAHbyRRBjWaA/AqDg3mY1vTaPgAZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c7:c1:57:f4:6e:75:f5:88:98:c3:1a:94:ed:26:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: May 10 06:00:20 2025 GMT
Not After : May 11 06:00:20 2025 GMT
Subject: CN=ddef5d94502275fb2f2edf8f1e161f428cfb3b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:13:16:fd:45:5e:81:a1:fb:df:08:02:92:
43:de:8f:00:a0:33:32:2b:7b:73:89:4c:d6:83:bd:
6a:e5:83:48:a8:fa:b0:66:f5:bb:a5:34:cb:89:be:
66:e6:61:8e:be:f3:8b:da:29:6e:84:bb:9f:c4:a4:
5a:bc:04:1e:c6:c5:e6:2d:8e:e0:4e:6c:2c:98:67:
47:d2:57:79:6b:ae:3a:d7:b9:ea:1b:c6:00:a2:af:
16:92:28:8b:c0:68:0b:7a:95:91:48:b1:c4:51:b4:
e6:8c:b6:3e:dd:3a:f1:74:ea:1a:d8:92:d2:a1:21:
dd:30:aa:2a:33:76:f7:60:9d:da:08:61:18:2c:b7:
8e:25:7c:45:cf:74:68:ca:10:37:12:73:81:c9:ce:
7a:4e:9e:09:c3:43:9d:2e:97:80:46:10:29:f1:49:
7d:54:f4:17:b2:c0:2a:91:da:3f:49:48:3e:ba:32:
4e:1e:40:4e:cd:56:87:ad:90:40:28:9e:f6:7c:bf:
d4:95:38:c8:93:15:a7:e3:2a:76:78:56:2e:6f:99:
0a:47:6d:77:23:e2:93:4c:63:a0:ad:ae:ff:dc:ee:
e1:53:34:ce:9a:ff:95:55:d3:16:b7:e7:7e:4a:cf:
75:78:11:c0:f6:68:06:86:c7:f4:85:89:99:cc:00:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EF:5D:94:50:22:75:FB:2F:2E:DF:8F:1E:16:1F:42:8C:FB:3B:6D
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4d:9e:a8:78:73:ff:18:5a:e5:b1:9e:c1:db:71:37:a6:18:
cf:2b:ba:f7:bd:86:90:23:41:24:48:44:f3:02:61:f0:54:3b:
41:9f:e7:c8:e1:4a:5f:00:2a:91:0d:41:60:cd:ed:89:c5:ba:
af:6b:e4:c4:2d:b5:ff:c3:51:df:61:28:fe:af:95:f3:6a:c0:
bd:ac:4f:ef:90:db:4a:2e:9e:6f:c7:82:a6:e4:83:8c:65:5d:
a9:06:65:13:c3:66:ca:29:51:be:cd:fc:93:51:88:f1:78:a4:
49:ba:84:4e:d4:85:63:77:b7:72:41:5c:cc:b6:e1:3b:7f:0f:
2a:12:f2:54:e4:7b:c1:cf:a3:f4:d2:9c:d8:cd:df:9e:25:b8:
62:4e:09:5c:a7:a3:6d:25:95:2c:3a:f2:6a:72:38:b2:d7:50:
a0:c6:ac:4f:a4:5d:8e:f9:94:e9:a9:eb:8e:8d:bb:68:ee:9f:
19:7f:e3:83:1d:b3:d1:e2:4e:24:b1:71:7d:0c:e3:d7:94:09:
4e:d2:27:9e:25:e6:b7:34:4e:1e:33:10:84:e2:27:60:47:83:
bc:3a:73:05:86:9b:f8:61:27:da:07:71:77:51:14:18:ce:a7:
71:62:2c:a4:55:20:1e:f8:a2:58:b5:1e:7a:2d:bf:b9:0c:a0:
b1:b9:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:55:17 2025 by rpki-client