Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: O3wtJbcCiyr/FAzpERFIxj3mO9KYw8q5hWtfIFmDQA0=
Subject key identifier: 43:BC:33:A2:12:2E:FE:D7:B9:B2:A3:BD:EA:D5:54:C9:7B:87:F8:FB
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 0196789F807F19FA4A7900112CC0BC23E4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 02FE
Signing time: Sun 27 Apr 2025 19:00:41 +0000
Manifest this update: Sun 27 Apr 2025 19:00:41 +0000
Manifest next update: Mon 28 Apr 2025 19:00:41 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: uvA5koPKo2MQLruzmIXA+vtU1NunQUwRqeFBycJ9fis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:80:7f:19:fa:4a:79:00:11:2c:c0:bc:23:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Apr 27 19:00:41 2025 GMT
Not After : Apr 28 19:00:41 2025 GMT
Subject: CN=43bc33a2122efed7b9b2a3bdead554c97b87f8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:88:29:70:21:37:61:dc:85:f0:41:a2:1d:98:
88:b3:89:63:12:c4:d9:60:ad:f1:98:c8:36:a5:87:
b0:8b:82:d4:76:1b:0c:95:ae:fe:1f:54:54:85:b8:
26:b9:e8:8a:12:5f:a8:fc:a4:94:d8:6e:5a:5f:0f:
ca:f1:75:a1:e7:2c:40:6f:28:63:20:81:4b:93:98:
a1:0c:00:e6:b2:85:03:00:d4:fd:bc:58:5c:98:d8:
76:69:63:59:64:9c:5e:3d:eb:cc:14:21:75:98:02:
67:d7:cc:74:49:73:18:69:d0:2d:8a:b9:29:4d:51:
6f:12:9e:62:96:11:74:3f:7b:59:48:18:5f:9e:e1:
01:62:c5:5a:12:9e:8c:f6:5d:59:08:d1:e8:c3:18:
0d:36:ca:e0:c7:73:1f:a7:4d:db:a0:f5:b1:49:4c:
c0:33:af:0c:f7:57:6c:4f:cd:35:7a:17:63:8e:bb:
68:b4:ae:01:e7:38:a6:6f:4a:5d:ea:7f:a0:42:34:
fc:84:04:14:94:82:27:3a:a2:7f:66:e3:2b:67:3e:
7e:c6:89:24:43:cc:81:39:eb:cb:25:b3:ef:f2:fe:
fd:d5:31:62:ee:bd:36:4a:f9:76:65:17:56:64:f8:
70:e2:32:5e:71:47:2b:1a:d3:9b:1c:cc:dc:66:77:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BC:33:A2:12:2E:FE:D7:B9:B2:A3:BD:EA:D5:54:C9:7B:87:F8:FB
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5f:3b:b5:e9:27:40:da:cb:71:77:1a:c7:03:98:e2:7f:92:
79:9c:0f:24:67:ea:23:92:8a:fb:f6:04:db:93:10:2f:2b:c0:
f8:78:eb:41:e0:c9:ec:24:31:4e:21:26:2b:4d:65:89:86:57:
9f:bf:ae:e6:82:d8:ff:fc:75:85:6e:ec:46:75:57:66:e4:2d:
13:bf:ce:b1:de:60:e7:a5:5b:b1:e6:a4:f2:82:c8:9b:13:04:
79:00:35:d4:f7:ef:15:a8:51:f7:da:15:32:33:df:a9:be:7f:
bf:c8:ec:9a:9e:ce:b9:94:23:83:f9:90:12:d5:9f:82:31:54:
f1:a6:99:6d:86:3a:d7:f8:4e:59:19:a1:06:55:6f:3e:2b:5b:
e8:6e:e4:6c:99:9b:77:86:e2:1b:ff:de:88:1b:8d:5a:52:dc:
9c:15:d1:f3:89:8d:ca:11:30:a6:2b:70:8d:65:1b:6b:48:e5:
50:3d:30:a1:68:50:de:cf:98:11:43:d2:7e:8a:1f:45:46:46:
ac:de:ff:17:65:a9:9c:84:cb:4c:48:95:90:f9:38:d5:f4:36:
e1:d3:fc:36:bd:55:6b:3d:03:35:05:67:6e:0f:3b:b2:44:e6:
65:ab:c0:e2:7a:3a:8c:29:0a:20:73:eb:da:13:9e:c1:ad:4b:
50:bd:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:04:52 2025 by rpki-client