Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: TK5Gnv45AJIdqKSQFWrFdDcBBTb1yXoc+wGtEiIo8ko=
Subject key identifier: 07:D2:CD:DE:D2:66:B4:92:27:99:E3:57:88:46:8D:AA:81:8C:14:87
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 019680C73A2F8D236BFA36B46A78568E1E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 09:01:02 +0000
Manifest this update: Tue 29 Apr 2025 09:01:02 +0000
Manifest next update: Wed 30 Apr 2025 09:01:02 +0000
Files and hashes: 1: VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa (hash: Nan6DQGHyzFA7VJDUyPb17ZowHybZxaUB4pA1mJmnaY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: pCycKZqMW112ckO7TAUgNRiAv2qes8PBnTpZvzA3LdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:3a:2f:8d:23:6b:fa:36:b4:6a:78:56:8e:1e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: Apr 29 09:01:02 2025 GMT
Not After : Apr 30 09:01:02 2025 GMT
Subject: CN=07d2cdded266b4922799e35788468daa818c1487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:0a:53:b9:34:12:2c:e7:8d:72:b0:41:be:
b4:64:97:ce:7d:d0:32:94:a0:c3:96:c9:fb:97:52:
54:e8:7b:e3:9d:3d:e0:69:70:2f:fc:b6:17:25:99:
c3:08:2a:d4:5f:20:c2:92:3b:ff:30:25:02:82:5e:
cf:cb:5f:10:02:13:a4:16:9b:4f:20:09:5d:96:50:
be:32:cb:6e:a9:01:4b:31:ac:f3:cf:ce:f0:f3:3e:
54:b4:86:f0:5d:38:4e:8e:92:86:29:d5:eb:08:05:
f2:99:49:ba:3d:57:fa:59:a0:85:35:81:96:4e:16:
4e:5c:54:f2:ab:3e:f5:f2:7a:e7:4f:7c:e2:9f:98:
2c:92:a2:3f:39:c9:78:68:17:d3:26:d1:09:73:fe:
19:56:d9:5c:6f:80:91:74:7c:e5:17:4d:91:5d:4e:
34:36:a1:40:39:3b:45:16:e8:59:d0:51:3a:19:72:
12:b6:4e:cb:8a:de:30:91:e6:b2:04:f1:67:06:44:
34:e4:3c:6b:1e:cc:2f:dc:d4:76:d8:75:4b:08:3d:
f0:0d:82:41:46:26:46:cf:3d:e1:26:4b:f4:67:d1:
59:76:c6:27:88:9d:83:0b:8d:09:74:e1:0c:c4:68:
9d:28:f4:3c:66:63:46:11:d5:76:a3:94:fc:06:9c:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D2:CD:DE:D2:66:B4:92:27:99:E3:57:88:46:8D:AA:81:8C:14:87
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c8:1b:59:7b:89:67:6c:ee:88:2d:60:9e:83:ff:33:db:9b:
65:d6:6f:c5:89:c7:15:a4:e8:a6:1f:dd:6e:2b:3e:1d:6c:a6:
f3:b8:69:6a:7f:0c:06:11:4a:70:2c:30:5a:e4:3b:79:da:97:
98:71:10:2c:fa:7f:07:f2:8f:a1:85:ab:06:3c:ef:06:ca:e2:
45:b2:c0:08:44:73:14:ae:74:f0:3c:72:44:cf:7e:5d:2f:93:
a2:68:79:64:10:89:fd:3c:3c:73:6b:f8:8a:19:8a:4a:d7:cc:
c2:6a:4f:d0:ec:d0:7d:74:16:ca:08:07:6f:70:c8:e3:8d:96:
d5:57:71:e6:43:5e:4a:36:1e:b0:7c:4e:23:70:2b:63:2f:ec:
68:72:0f:f2:96:a1:b2:76:8c:5c:57:6f:06:5d:10:8b:2f:15:
d3:f3:52:6a:d9:e0:c6:d7:87:1e:99:3d:d8:99:a8:a6:c2:48:
ec:71:dd:0e:e1:16:aa:93:51:2a:50:1c:bd:bd:9d:51:a2:30:
b6:7d:ef:7f:81:95:dc:29:34:08:ad:82:df:3e:c1:12:6c:63:
ca:64:ec:7c:89:0d:14:2e:5f:f1:cd:ac:77:85:c5:20:3a:3d:
18:d8:28:f1:6b:4d:df:7b:01:f0:df:67:5e:03:94:26:70:ae:
88:d5:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:33:56 2025 by rpki-client