Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier: uwMqDVm9lQXolHUnDxsrvtf3sE0AtR/MPowUBHM/kPY=
Subject key identifier: 51:2C:60:77:E7:A9:D4:35:6E:6B:5C:F4:3C:76:88:46:68:5D:91:D5
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial: 019685111C309C875834E6EEBD1851C1AE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number: 26
Signing time: Wed 30 Apr 2025 05:00:13 +0000
Manifest this update: Wed 30 Apr 2025 05:00:13 +0000
Manifest next update: Thu 01 May 2025 05:00:13 +0000
Files and hashes: 1: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (hash: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=)
2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: VOIEaHmXgNko54CcI89hR1HddCwpa9/rs4v3c3aGCf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:11:1c:30:9c:87:58:34:e6:ee:bd:18:51:c1:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Validity
Not Before: Apr 30 05:00:13 2025 GMT
Not After : May 1 05:00:13 2025 GMT
Subject: CN=512c6077e7a9d4356e6b5cf43c768846685d91d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:7c:17:05:be:8d:48:55:c5:12:ce:0c:e5:
f8:d0:f2:95:c0:a4:1c:93:73:62:b0:9b:f0:66:6d:
d8:56:b6:6e:5d:a4:ce:cb:98:18:ec:4b:e1:35:21:
e0:15:c9:de:ac:f2:a3:24:e0:90:dd:df:f3:3c:f8:
34:5c:13:58:27:83:07:6b:d7:9e:28:23:b2:1b:cb:
8d:b9:d1:6e:08:00:cc:80:73:2a:6d:03:a5:3f:92:
a5:6b:64:44:79:bc:0c:66:23:61:f8:a3:c3:c7:5f:
8a:32:49:30:3d:f3:ae:32:1c:c1:64:74:6f:3f:cd:
83:cd:af:84:19:e4:2d:cd:17:54:59:c0:18:ab:d3:
c5:37:77:d9:c4:f2:cb:70:26:d0:b1:60:fc:70:5a:
d8:53:50:66:79:46:ba:aa:a2:c1:63:a2:a5:04:ec:
8f:0d:55:67:e4:5d:8a:61:ac:68:fe:15:3e:b8:2f:
ed:44:fb:c5:5a:48:d9:32:8b:e3:df:8e:11:28:00:
d6:e5:f5:04:61:31:6e:98:30:78:85:4b:f9:ce:96:
c6:f1:c7:12:4c:17:33:fc:4a:d5:6a:6d:f0:d0:9f:
a1:1e:8b:b8:b0:09:e0:63:8c:32:3b:4c:87:58:4e:
0e:62:06:22:bf:72:fe:a4:d2:7b:7d:86:a0:69:64:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2C:60:77:E7:A9:D4:35:6E:6B:5C:F4:3C:76:88:46:68:5D:91:D5
X509v3 Authority Key Identifier:
keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:27:aa:72:e7:98:6c:c7:92:c5:b5:d6:2b:38:52:d3:8b:9f:
1b:d7:56:ab:58:04:a8:1a:ce:df:7e:97:f8:ee:14:78:f8:40:
ce:30:5e:58:74:8b:5e:a7:d0:fe:c1:83:cc:6e:eb:e6:a8:4d:
b8:65:4d:04:49:c2:b1:01:9a:c3:9f:f2:4e:46:51:9a:c1:72:
7b:fa:cb:6d:d4:1c:2e:5a:63:de:05:c2:cd:ca:1b:c0:d6:d1:
64:5c:36:10:05:4f:21:b2:44:b2:be:2a:ee:17:b8:9f:fc:1f:
24:14:4d:b4:2a:5f:9e:bd:9e:54:72:62:70:d9:88:58:a4:2b:
64:4e:5a:3c:1e:bd:d6:00:4d:14:72:95:43:2d:b1:71:b3:d4:
44:47:77:a6:77:ea:b8:d0:f3:0f:66:62:58:34:cf:9d:32:05:
d4:6e:39:2c:15:df:8c:d7:9b:f5:38:ad:e6:57:fe:47:ad:ad:
d6:90:aa:a6:4c:00:46:21:00:ee:8f:ce:ab:7e:6b:d1:eb:aa:
f7:ca:e8:84:39:b7:04:ad:c8:1d:4d:86:94:68:51:c9:a5:1c:
9c:be:08:df:63:21:ae:59:40:73:1c:4f:82:95:a3:9f:94:32:
02:bb:30:30:60:2b:44:c9:55:f8:95:92:6c:0e:89:db:c2:5a:
10:1a:ea:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:37:59 2025 by rpki-client