Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: cRtofqZhQuYsA8GMytga7gcJU/7qcU8TKzteEd3UY2M=
Subject key identifier: 0D:D3:7A:B8:5A:FB:DD:2B:08:13:17:92:C5:F2:0D:C4:07:E1:F8:8B
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 0196753086CF19C50D29491DCAEE075588C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 14A9
Signing time: Sun 27 Apr 2025 03:00:36 +0000
Manifest this update: Sun 27 Apr 2025 03:00:36 +0000
Manifest next update: Mon 28 Apr 2025 03:00:36 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: KRbX2QrQ5+XcrqcXcezqoHQ+R1Q6Wq4AU+zvp9tdM3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:86:cf:19:c5:0d:29:49:1d:ca:ee:07:55:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Apr 27 03:00:36 2025 GMT
Not After : Apr 28 03:00:36 2025 GMT
Subject: CN=0dd37ab85afbdd2b08131792c5f20dc407e1f88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:68:58:ec:4c:a4:5f:ff:c3:7f:8a:87:b7:
f9:1b:d1:e6:54:ec:78:06:39:d2:bf:a8:a9:6c:ab:
38:37:bc:aa:2b:fb:82:90:7b:10:a1:7e:ff:a3:ba:
4e:c2:c3:3a:c8:24:34:ab:5a:76:d1:43:25:a7:95:
99:6d:22:3d:8f:09:d7:93:c4:b1:a4:37:f7:85:70:
2a:3b:8c:29:c4:3a:06:ad:4e:36:35:fe:2b:5d:b1:
22:2d:31:96:9b:8b:c0:38:11:af:91:7f:e7:b2:32:
b0:25:45:5a:24:78:b9:60:1f:91:ac:54:91:61:c5:
aa:a8:65:31:9f:c0:e1:be:ce:55:b7:5d:c3:26:7e:
6d:02:a4:f9:0c:37:09:57:5c:1f:64:2c:79:e0:24:
78:6d:96:09:c2:75:e7:24:0a:71:30:66:f5:64:a6:
d6:a7:f0:62:10:16:7e:78:3d:f3:eb:c4:3b:ca:25:
4c:1f:2c:d5:64:cc:1d:53:c9:cc:a5:6d:0c:ac:f4:
54:f4:fd:09:b6:56:59:5d:df:a6:d9:5c:a1:32:a5:
64:a2:d2:a8:f3:7f:1e:e1:10:e4:4d:d6:43:ff:59:
37:19:c4:e8:20:c4:f5:26:0d:9f:a7:88:12:7c:dc:
d2:32:8d:a7:26:e7:de:da:90:7b:4c:63:2b:d7:80:
cc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D3:7A:B8:5A:FB:DD:2B:08:13:17:92:C5:F2:0D:C4:07:E1:F8:8B
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:85:08:51:ea:8c:d1:f2:0e:85:da:8c:6c:26:22:2b:6e:b1:
0f:6d:4e:c5:62:49:94:8b:55:1d:2c:90:b1:88:fd:54:72:86:
35:a6:9f:4e:92:3b:7d:89:65:6d:c6:cb:8f:b1:28:bd:1c:63:
06:ad:5f:ce:e2:dd:c1:b8:be:c2:00:3d:fb:ce:f2:3d:c0:dc:
1d:03:c2:83:2f:93:6f:d3:a7:c2:c6:b5:2c:21:7b:dd:73:cd:
a9:07:0b:41:fd:0a:06:af:6b:15:0d:de:fc:c4:72:85:d9:13:
ea:d6:61:b5:1a:7a:68:61:09:69:ed:1f:66:f4:42:3c:d0:0d:
93:56:76:3b:5d:27:52:d9:24:ee:c4:8d:d8:e3:d4:7c:2c:64:
db:62:25:e3:a8:64:fe:11:f6:ec:be:c5:54:6a:75:47:c4:63:
42:b5:d8:8a:af:75:2c:61:48:b3:7a:9b:91:4f:6d:c0:2c:57:
18:b3:23:ae:b9:56:e7:a6:5c:60:f0:48:7c:f7:6e:ff:bb:7e:
25:05:8c:1e:81:f8:6d:74:17:06:91:3c:ae:40:ee:59:1f:21:
17:dc:98:ed:a4:f9:b9:3e:0c:43:c8:9a:7d:77:af:41:2b:c2:
2a:49:a9:48:3b:44:eb:bc:56:3e:e2:f2:4c:1e:ea:18:39:12:
b4:4a:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:38:20 2025 by rpki-client