Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: 4q5wJ5vmlTQqSrALIUvI5w97D+KaXV9l6/BMcNUhbxg=
Subject key identifier: 22:93:99:7C:05:68:2A:80:6E:7E:EA:92:9E:F3:BD:CC:35:78:ED:C6
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 0196771EEA3A666EE0E85E9FBDAF8E962B02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 0228
Signing time: Sun 27 Apr 2025 12:00:36 +0000
Manifest this update: Sun 27 Apr 2025 12:00:36 +0000
Manifest next update: Mon 28 Apr 2025 12:00:36 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: cwZemD3v0mVczxM/cdxWpo0W2OdqjTBAe8w+dzMH5/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:ea:3a:66:6e:e0:e8:5e:9f:bd:af:8e:96:2b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: Apr 27 12:00:36 2025 GMT
Not After : Apr 28 12:00:36 2025 GMT
Subject: CN=2293997c05682a806e7eea929ef3bdcc3578edc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:14:29:9d:67:6e:fd:12:90:11:11:b2:15:
b5:ab:11:ab:d6:4a:56:85:ee:a9:19:ea:7f:1c:8c:
ea:6c:61:1b:a8:d4:ab:da:f7:fc:2b:57:b0:bc:2b:
f7:8f:82:31:cd:21:c0:3a:74:2c:63:ce:ee:fc:9f:
c7:9f:ba:b5:95:0c:1a:fa:95:2f:c2:70:70:45:3d:
a6:97:8f:fb:ce:3c:e7:8c:e6:a4:0a:26:15:35:34:
1c:ae:5a:8f:e5:8e:3d:0e:5a:18:59:ac:45:02:19:
6b:99:27:a6:e6:44:ce:cd:51:ce:a9:2c:8c:24:0e:
98:d1:7d:0f:09:be:37:84:0a:fe:8e:d8:48:6d:26:
09:aa:7b:40:f0:4d:e7:4e:bf:e1:8d:83:9f:f6:2e:
07:5d:5b:c8:e1:79:1b:28:2c:c8:3b:72:1d:26:f1:
98:a0:fb:b8:dd:08:a7:1b:b9:52:1a:aa:3d:0c:6d:
d5:d2:f7:91:dd:9a:10:c7:66:74:f1:14:52:92:ed:
df:c7:12:c7:1c:6d:1d:b3:49:bc:de:9e:91:39:61:
14:fa:93:9a:c5:95:48:70:37:3e:cf:16:32:99:8c:
bd:4c:d7:3c:b1:79:75:6f:80:e0:32:f4:f6:ab:cc:
29:3c:52:d0:4e:16:50:e2:43:9b:be:38:0f:02:f5:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:99:7C:05:68:2A:80:6E:7E:EA:92:9E:F3:BD:CC:35:78:ED:C6
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:47:7a:2f:49:b5:99:5c:1f:d1:de:42:7d:f6:3a:1f:df:70:
ca:91:5d:fd:b5:2a:9c:3f:2f:0f:4b:f6:c2:a6:95:a4:da:63:
31:62:19:e8:7e:a5:83:38:1d:1a:1c:c5:cc:f0:b1:df:06:cb:
5e:0e:0f:ca:fa:44:be:38:cc:40:36:6b:9c:69:5e:22:59:1a:
0e:66:3f:a3:ff:fd:39:d5:68:87:8e:fa:aa:68:5a:be:ea:7f:
83:37:8f:4c:55:a4:7a:0d:39:f7:c5:b6:03:ec:b1:1a:af:be:
29:72:7c:7f:df:c7:dc:35:86:59:21:8f:00:92:21:93:cd:62:
8e:0d:3d:a2:c4:77:f3:ce:b1:9c:02:f9:ba:0b:2b:03:12:41:
ba:4b:ec:75:97:33:7a:07:82:a4:d8:ee:2d:43:54:2c:b2:8e:
25:40:39:10:87:2f:af:fb:a1:e3:64:0b:23:eb:42:49:38:39:
c4:b5:2a:ab:fc:64:b4:d6:02:19:32:ac:b5:17:7a:5d:cb:1e:
0b:73:41:91:f1:ae:de:4c:5d:78:46:8b:42:ce:07:68:cf:35:
64:96:cd:49:ea:4e:30:9a:88:2e:90:d7:fc:26:c3:b9:76:07:
49:92:ea:4b:7e:97:49:71:5a:2b:0b:a1:18:62:11:71:1b:f8:
98:83:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:07:31 2025 by rpki-client