Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: H4KH9hv5Lt1q3jG+9jf8V0GtGjWwk0poYMjN2KVm5Io=
Subject key identifier: 4E:13:BC:7F:33:AB:83:4C:DA:80:85:3A:3F:25:86:5F:A3:E1:D6:A7
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 01967ED848F41DB2070437F6E06D7B9E4191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 0A08
Signing time: Tue 29 Apr 2025 00:00:25 +0000
Manifest this update: Tue 29 Apr 2025 00:00:25 +0000
Manifest next update: Wed 30 Apr 2025 00:00:25 +0000
Files and hashes: 1: bL9XDxQqDi4zzbqIbwV9pxg-nag.roa (hash: vqETjbVoGoH82qeAvCJ8Sz1hJwZnPnltJtLCCK0jXFQ=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: n/LXdBnMuDgHPYiZpB3LO8uKFiXp5U4PV5XNaYV0DVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:48:f4:1d:b2:07:04:37:f6:e0:6d:7b:9e:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Apr 29 00:00:25 2025 GMT
Not After : Apr 30 00:00:25 2025 GMT
Subject: CN=4e13bc7f33ab834cda80853a3f25865fa3e1d6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:45:60:f0:c4:3f:0a:8e:06:c5:f0:a5:26:
67:de:1f:aa:4d:b8:e3:13:39:25:3b:3b:b4:c4:5b:
7b:3f:a1:08:e4:f6:35:d0:b6:7c:44:2a:b6:71:c4:
e0:f1:bd:39:29:93:a7:64:b1:d3:58:04:36:05:79:
e5:43:9a:60:7d:ac:06:94:aa:6b:23:c9:39:87:e0:
89:49:43:08:2f:df:37:e0:8c:61:c0:25:f2:e1:95:
75:38:29:2d:79:0b:46:05:ed:c3:c1:e5:62:61:33:
c4:b6:c4:2b:d7:05:80:81:f3:1e:8f:96:d6:b6:64:
14:28:6d:3b:04:ee:2f:6e:cb:0c:71:d4:e3:7f:a9:
23:e7:97:d2:5f:08:a1:6f:0f:93:cc:62:ca:bd:e3:
74:be:73:55:70:16:ec:a6:8f:d0:b8:99:a2:f4:38:
0e:aa:65:19:e2:dc:4e:f3:eb:a2:df:17:6f:83:6d:
02:d2:6f:27:ad:66:d7:7a:fa:cc:a2:bc:c7:d1:d2:
ea:5d:3a:b2:57:f5:86:e2:ca:01:89:6b:93:d0:62:
ed:98:19:95:9e:56:5d:55:8c:fa:a5:28:97:b5:c8:
ad:63:d7:bf:f2:b4:55:bc:7d:79:a4:53:03:e2:81:
5c:a6:93:bd:c5:0f:2a:36:6b:d0:7d:4d:60:f5:32:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:BC:7F:33:AB:83:4C:DA:80:85:3A:3F:25:86:5F:A3:E1:D6:A7
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:68:ab:94:06:b5:1f:24:73:ea:40:df:ca:26:cc:8d:aa:50:
1f:33:1f:c6:d3:85:c1:a9:08:9f:41:0c:38:86:ca:63:63:fe:
2f:2d:b4:33:e6:6e:b7:01:8f:b1:49:c1:70:5c:9f:c0:2d:a1:
af:dc:c6:77:53:86:1a:f9:ea:38:af:6f:96:9e:53:26:1a:d9:
29:9d:18:0f:64:ee:89:eb:df:ea:ef:95:a2:ed:86:e5:72:6b:
10:44:6b:be:2b:ed:d9:ea:08:54:1b:f1:1b:4e:09:e4:c8:2d:
ea:dc:63:1c:a3:e1:fe:45:5a:6f:71:80:60:da:29:5c:0a:14:
e0:e9:4e:69:aa:b9:09:eb:82:3b:3b:4e:fb:e9:8b:9a:11:45:
32:db:6f:79:87:22:44:15:10:95:be:92:2a:9d:5e:83:b3:e3:
d1:2f:77:44:9a:bf:eb:09:a7:4a:ed:52:15:53:93:3c:1d:0e:
e2:97:3b:a5:4c:ed:2e:2c:68:5b:e6:2a:a7:8e:27:d4:d2:55:
5f:67:40:23:d1:59:14:89:36:f4:6b:79:c8:1d:ae:ad:c1:86:
f7:9d:5b:8b:15:6f:a6:d1:35:1b:43:25:18:de:6c:57:9e:cf:
02:f7:0a:5f:a8:1f:f9:02:55:8c:53:fa:6a:2b:f9:8c:5f:98:
68:d6:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:10:19 2025 by rpki-client