Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: rm+bEdf4MJdiZGlnYaqRcdXBNujUxuYpiFRNwvC8H4I=
Subject key identifier: 8D:C7:D1:4A:07:46:3E:9C:1E:5B:7A:F4:B1:81:9A:B5:E0:CF:7A:D9
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 0196857FB7BD51C9F8316B0B707F946BA6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 0222
Signing time: Wed 30 Apr 2025 07:01:01 +0000
Manifest this update: Wed 30 Apr 2025 07:01:01 +0000
Manifest next update: Thu 01 May 2025 07:01:01 +0000
Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: Jv1fIZMJz0n26EvyBfvExI5HBlTsO0D2/sGXwXGXJpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:b7:bd:51:c9:f8:31:6b:0b:70:7f:94:6b:a6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: Apr 30 07:01:01 2025 GMT
Not After : May 1 07:01:01 2025 GMT
Subject: CN=8dc7d14a07463e9c1e5b7af4b1819ab5e0cf7ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a3:26:b6:2b:27:ca:d1:44:d1:ed:72:d3:f3:
95:c8:eb:ad:0b:f0:f7:f8:15:d6:bb:c6:a4:12:e1:
a7:e2:3a:fe:50:8f:80:f7:00:9e:f8:4f:de:23:90:
f0:93:51:d0:0c:03:64:2b:bd:2f:e5:6d:ba:44:de:
4f:63:05:4f:4c:27:f5:8d:13:f4:16:2e:79:28:2a:
12:09:5d:a7:52:4b:15:92:08:b8:61:a2:22:cc:d2:
41:b7:7e:b1:a9:1b:0b:c8:6c:c8:2a:ef:0e:76:22:
f9:61:dd:14:c5:32:f7:93:5c:9b:f8:07:8a:9d:11:
cb:fc:71:ba:68:dc:fc:3a:95:5f:0b:f7:b2:56:e0:
25:77:23:61:68:9f:7f:d7:cb:58:2c:5d:f4:5b:88:
3c:ae:f2:01:7b:6d:37:ef:40:04:9c:b4:4f:a6:74:
90:bb:90:30:d0:e8:3f:15:74:60:95:79:69:9c:24:
45:6f:b1:30:c8:03:1f:43:78:fb:ad:cd:3e:be:5a:
d5:f6:21:a7:93:71:78:43:e2:96:b3:c4:74:62:4b:
03:a2:7b:d0:9e:cf:3e:fa:68:eb:83:e9:2f:b0:75:
e6:9a:07:de:0b:ac:1b:81:b3:56:f7:26:11:a8:f1:
26:e3:9a:b7:37:5a:ed:83:c5:77:98:4a:07:42:cb:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C7:D1:4A:07:46:3E:9C:1E:5B:7A:F4:B1:81:9A:B5:E0:CF:7A:D9
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c8:9f:48:b9:18:c6:57:1e:cb:d5:15:46:88:75:8c:ba:b9:
3e:43:19:a1:5b:13:a8:b7:95:68:73:19:ea:cc:5c:e7:16:3b:
47:2b:72:27:52:3d:00:a2:eb:22:34:14:aa:10:c4:53:cb:0a:
08:af:0e:63:ae:24:be:1c:a0:9f:84:b7:8c:f2:c5:d7:33:c6:
03:bb:db:db:47:17:6f:e0:d8:1e:97:22:40:35:b7:c0:45:f3:
a3:15:a4:7e:e3:b9:c9:10:93:5e:33:bc:ec:e3:05:33:79:ae:
2b:6f:d9:67:d6:ea:30:e6:ad:a3:21:4e:98:01:24:f6:0a:0f:
41:42:de:be:35:28:6d:22:e8:9c:f7:ac:23:5e:91:72:d4:d9:
a5:bb:35:05:7a:ee:c4:41:65:9e:72:6b:1c:70:9a:af:fd:17:
de:cb:37:9b:1e:a5:12:8d:af:3f:2b:0e:f8:f6:09:2d:ff:25:
f7:40:55:dc:2c:e6:03:a9:51:90:52:f5:be:e3:73:a9:df:d7:
0d:5e:94:a3:d0:01:54:8b:e0:ad:86:84:4c:44:55:1e:95:88:
6c:1a:e8:2e:dc:86:e6:5a:98:43:89:41:1e:b8:89:79:86:b4:
e4:17:42:03:4d:68:96:6c:de:d0:94:46:17:2c:a0:62:14:4c:
58:bb:26:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:31:31 2025 by rpki-client