Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: DDo+GSOG8CDZffovHqH2F/eiMCwFd8LOlqPPrW3OFY8=
Subject key identifier: EB:BE:C9:09:3F:33:3F:9C:9D:C4:B8:CA:16:72:B1:03:5B:2D:73:2F
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 01967F461F8059F3924E7B24695D37EE9417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 02D4
Signing time: Tue 29 Apr 2025 02:00:24 +0000
Manifest this update: Tue 29 Apr 2025 02:00:24 +0000
Manifest next update: Wed 30 Apr 2025 02:00:24 +0000
Files and hashes: 1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: DA4SMvm1lfkcDnrMce+ooernW8tb2rJeIuMrQRpDJVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:1f:80:59:f3:92:4e:7b:24:69:5d:37:ee:94:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: Apr 29 02:00:24 2025 GMT
Not After : Apr 30 02:00:24 2025 GMT
Subject: CN=ebbec9093f333f9c9dc4b8ca1672b1035b2d732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:90:5a:31:6b:2a:b3:be:d0:37:21:86:f3:
3c:ef:36:ba:05:97:8c:f2:ba:af:21:02:58:95:20:
7b:a9:2b:c4:cf:44:84:8d:70:84:8b:85:68:3d:5b:
bb:6d:69:86:5b:cc:e5:b7:a5:0e:a7:6a:6f:6e:c3:
51:55:71:1f:56:9a:38:06:16:dc:fe:11:98:30:d4:
e9:c1:53:53:d0:99:2f:27:07:d5:e9:14:3f:1b:a1:
cf:5e:bb:14:b0:64:54:ea:28:92:54:c1:1f:1c:64:
9d:4f:0e:c4:b2:3b:92:52:05:40:98:d3:60:72:8f:
18:24:c4:7a:2f:d6:57:60:c9:ab:f3:65:c1:e9:a0:
4b:c3:e1:99:80:54:91:b0:a4:f9:08:df:ca:3a:0e:
d0:11:67:c9:27:98:99:d5:f7:c1:54:80:91:8e:e7:
9c:f3:57:86:d3:cf:4d:aa:27:bf:30:85:c9:d8:10:
d4:91:74:84:c7:59:1f:2f:79:b8:5c:5b:46:0f:36:
2a:e1:24:ef:45:f7:d2:22:b7:15:a3:d8:89:43:f9:
5c:e8:60:de:ac:03:3a:8d:7e:de:32:43:c3:65:4f:
a1:f9:07:3f:c8:04:46:38:05:b0:8b:2d:82:f3:6b:
b8:5a:4c:2c:3a:ea:18:e1:67:16:c7:7c:4e:01:3f:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BE:C9:09:3F:33:3F:9C:9D:C4:B8:CA:16:72:B1:03:5B:2D:73:2F
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7a:1e:38:96:54:1b:13:b1:55:5a:c9:d7:05:40:f3:61:5b:
14:32:3d:cb:b8:51:e5:76:36:00:9c:56:7e:0d:69:7c:fa:9b:
bb:2f:36:b4:8b:f3:d9:55:60:ae:0f:9b:f9:47:be:34:a2:d9:
53:73:05:fa:5c:ff:35:a7:1b:81:ca:0a:1a:ca:b7:20:e9:89:
26:da:5d:3b:75:f0:e3:ee:07:a0:f1:0f:f3:38:be:0c:a3:86:
60:df:30:57:6e:80:a0:e0:2f:f0:02:af:0a:b3:47:00:fa:df:
2e:ab:3a:aa:64:80:83:dd:37:c7:e8:ea:2d:7b:d0:50:93:38:
03:f3:bf:ef:f3:05:dc:ad:ab:36:f0:ae:70:60:40:1b:9f:3e:
d7:d6:cf:24:4a:f5:73:24:dd:23:85:40:cd:09:2d:42:fb:71:
da:3d:9b:a0:74:bb:a5:14:c6:61:9d:90:72:16:5c:58:19:27:
23:8e:80:fe:cb:95:bb:1d:59:e4:bf:84:74:27:0e:e3:68:9b:
89:2a:08:eb:da:19:6f:4f:c3:7f:dd:93:56:c0:94:31:52:19:
41:80:fa:49:53:a2:2f:d2:a4:dd:63:90:a7:14:b6:62:ec:50:
8f:0a:29:8d:aa:c7:f3:e2:99:ee:d4:f5:dd:35:44:47:2e:92:
e8:73:02:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:24:17 2025 by rpki-client