Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: cw624Af5Xwkt5aHtlNl8aByoAKykCYb4IDdEhKD6RlQ=
Subject key identifier: 2A:46:B1:2F:B7:6A:37:BD:D4:08:A4:B3:DC:2D:B6:2B:59:60:2E:E0
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 01968E828DDB7271060753D655A2B0E56757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 1241
Signing time: Fri 02 May 2025 01:00:42 +0000
Manifest this update: Fri 02 May 2025 01:00:42 +0000
Manifest next update: Sat 03 May 2025 01:00:42 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: Q8xh93uhVpTPzQwphRiVhRvO50Cd/GMj8Q/7wzUy5ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:8d:db:72:71:06:07:53:d6:55:a2:b0:e5:67:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: May 2 01:00:42 2025 GMT
Not After : May 3 01:00:42 2025 GMT
Subject: CN=2a46b12fb76a37bdd408a4b3dc2db62b59602ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:18:d0:01:f6:e2:37:b4:a5:72:8f:cb:c9:
8a:90:af:d8:0f:d4:a5:c6:5e:12:81:18:2f:c1:07:
a4:cb:84:5e:78:20:21:a0:fe:14:58:00:30:d6:58:
c2:d2:42:c7:3f:fb:58:dd:64:6d:61:90:ab:a0:4a:
35:bb:f8:60:27:ec:d9:95:0c:ba:ff:dc:84:b6:66:
40:2e:5c:b5:02:16:1e:ae:9f:7a:5e:85:ff:93:06:
75:ae:cd:dc:88:f9:28:05:86:35:85:a2:14:a4:0f:
a0:d9:a3:dc:02:06:58:45:99:cb:44:c5:1c:8b:38:
36:81:71:e0:e1:03:67:fe:d8:81:00:48:72:24:fb:
9a:d3:30:84:61:82:e1:fb:78:ea:66:f7:14:88:a4:
11:2c:67:8a:bd:89:22:de:84:95:5b:91:ab:03:23:
ff:bf:8b:3f:1c:08:c7:f7:ee:b3:c1:ac:2f:25:48:
0f:57:48:18:c3:3a:85:78:82:99:56:ce:54:39:da:
f6:65:8b:86:d6:fe:a2:4c:ea:4c:b0:74:01:cb:40:
2e:8d:46:41:ea:80:5b:f4:d3:e7:76:2c:5f:5d:b1:
bf:86:cf:f5:6e:19:a5:b6:92:52:c0:cb:a9:4c:c1:
43:63:9c:63:95:fe:83:77:99:5d:6d:3e:b7:32:d9:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:B1:2F:B7:6A:37:BD:D4:08:A4:B3:DC:2D:B6:2B:59:60:2E:E0
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e7:14:c4:52:bc:09:39:cb:03:ae:48:ef:38:37:3f:72:09:
cc:73:b5:3f:8a:e4:d2:2d:fe:5f:5b:b5:e1:3a:5c:4c:30:33:
e6:ac:d7:6f:a0:95:f2:5f:49:15:3b:df:31:2f:b0:92:c9:99:
87:81:18:21:b8:7c:b5:3e:dc:de:f0:79:eb:40:b6:ca:50:22:
58:fd:5e:79:81:99:ec:2b:d2:93:aa:69:83:57:41:dd:8c:d7:
a2:8c:d2:d5:37:e2:e4:dd:56:84:aa:66:52:9a:38:52:db:d7:
1d:67:c6:6b:12:30:e0:c9:34:a9:04:13:67:60:04:2f:03:c3:
fe:52:de:0a:b1:99:ef:f0:8f:9b:67:7e:39:39:d2:52:7d:8b:
77:f9:50:9f:c8:01:62:89:57:2a:08:75:b8:10:1a:bf:22:20:
a2:49:97:26:6b:65:5e:ed:09:3b:1a:cd:a0:48:56:c2:69:84:
43:52:9e:1a:c3:1c:fe:46:e3:68:0a:d1:87:0a:e7:35:d9:bf:
8e:9f:fc:24:c5:be:a5:af:1d:56:63:1e:e9:f0:12:91:2b:e3:
dc:0c:51:cc:36:26:6e:c9:e1:d1:a1:20:aa:f3:c7:9a:96:58:
76:2a:63:0f:63:4e:50:86:72:26:a7:7b:b8:69:bb:ed:fe:b0:
70:83:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:50:50 2025 by rpki-client