Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: PYhMi/thkkkgORDe9OTVeFA/n9wlxj73qB6gfK0SFV0=
Subject key identifier: E7:32:1B:E1:BE:6E:62:EA:92:45:64:0B:86:9D:99:37:BC:6B:48:26
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 01967D8EE801406B07A6DF3F7A808B443D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 1280
Signing time: Mon 28 Apr 2025 18:00:39 +0000
Manifest this update: Mon 28 Apr 2025 18:00:39 +0000
Manifest next update: Tue 29 Apr 2025 18:00:39 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: jZfFJtD2lKOmGQVzlJrZT/3/akmlBfUR23ocSVcO5S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:e8:01:40:6b:07:a6:df:3f:7a:80:8b:44:3d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Apr 28 18:00:39 2025 GMT
Not After : Apr 29 18:00:39 2025 GMT
Subject: CN=e7321be1be6e62ea9245640b869d9937bc6b4826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:db:bc:d9:5e:ce:cb:96:49:6d:8f:1a:ac:
62:33:ac:57:1f:12:c5:57:80:19:05:d5:15:4d:18:
63:ea:76:7a:6f:78:3f:1f:a7:c6:7f:0b:72:6a:86:
17:22:e1:75:c2:33:eb:ba:e8:86:66:16:4c:df:94:
5d:70:f5:37:a4:bc:03:4f:21:f2:50:63:53:6d:a3:
ff:9a:21:6d:12:d3:9e:b9:64:9e:67:33:30:3e:eb:
19:e6:c0:36:f9:ff:87:a1:06:5b:b9:6d:c7:b7:1c:
f1:2a:ec:fc:7a:f0:67:9f:1c:4a:eb:db:74:67:92:
05:d2:f1:d8:48:0f:3f:bd:54:27:09:fa:f0:e1:58:
8d:e6:14:bf:8a:be:15:6e:de:9f:96:09:21:75:37:
3d:0e:09:97:64:46:e9:4c:50:30:42:81:fa:d4:e4:
63:b1:a1:b6:7c:29:77:6f:89:c9:00:db:8b:c0:c6:
4a:1e:b0:d1:f1:d3:74:95:79:e0:4d:22:c4:6f:fc:
7f:7d:22:4e:02:3d:cd:02:81:9d:08:45:c3:7e:89:
bd:b7:a0:4a:41:99:29:cf:df:6c:51:c7:21:03:fb:
fb:f5:aa:be:e6:1f:89:60:3d:97:29:c7:80:48:01:
46:5a:c5:32:dd:35:2a:45:4f:d5:62:82:d6:2f:80:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:32:1B:E1:BE:6E:62:EA:92:45:64:0B:86:9D:99:37:BC:6B:48:26
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3e:97:76:9b:dc:f2:ae:42:47:1e:f3:5e:9e:ba:fe:c5:4d:
6e:e2:a6:27:a2:d5:f0:96:36:52:55:52:f7:a7:dd:5a:3d:b7:
4f:aa:0e:88:55:70:a5:1d:fa:54:53:d1:89:81:d9:e5:a7:e4:
66:91:bd:94:0a:fb:4c:2d:1c:60:b3:4e:2b:55:64:b4:19:80:
2f:ff:81:29:f5:0a:a8:79:04:7e:83:8c:2c:79:9e:6d:09:8f:
35:c1:8f:59:d4:10:56:5f:a9:f3:ef:a2:f2:fd:88:79:bf:4e:
4e:67:97:88:8d:b8:54:b0:c2:d4:c6:9a:71:0d:73:26:a9:b5:
ff:27:4b:a8:5d:3f:21:f6:df:ae:21:fe:13:05:cc:bf:cf:6d:
26:8c:ad:60:59:10:36:d1:c7:bf:e7:62:5e:b2:d1:ae:1c:03:
c1:20:b3:35:b2:5c:c9:1b:5f:c7:b7:97:ef:40:e8:1a:59:1f:
cb:9a:56:f7:1a:7e:a2:64:80:5d:69:5e:6c:7c:b5:9c:cd:bc:
99:68:0f:72:05:6d:63:f9:94:6b:6e:62:77:09:05:b2:76:50:
77:86:54:a8:66:ab:88:e6:7c:0d:f8:36:37:d6:e8:5e:51:7c:
d1:76:b5:87:5a:fd:c7:1e:c1:24:9f:03:b0:7a:45:d2:1f:11:
92:40:83:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:03 2025 by rpki-client