Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: P2wWyNLaoipk9BmAQAMpNb+G9l/7SeqyM5YUryawuP4=
Subject key identifier: 53:56:8A:DC:F7:14:E6:85:04:D8:ED:A9:25:0A:01:E3:6B:FA:1B:17
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 019683918E5593F20832F032D46535DFF376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 14A8
Signing time: Tue 29 Apr 2025 22:01:16 +0000
Manifest this update: Tue 29 Apr 2025 22:01:16 +0000
Manifest next update: Wed 30 Apr 2025 22:01:16 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: uzlohDjlsUxnj5OW3HIeAvYJzWrh1VCN8a/Z4EyE3Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:8e:55:93:f2:08:32:f0:32:d4:65:35:df:f3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Apr 29 22:01:16 2025 GMT
Not After : Apr 30 22:01:16 2025 GMT
Subject: CN=53568adcf714e68504d8eda9250a01e36bfa1b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:49:6d:80:8f:b7:25:48:e9:87:57:73:a0:
19:b4:9d:89:75:dd:ff:3f:3e:59:95:76:2c:02:65:
b2:42:32:8c:00:ac:1e:2d:00:ec:f1:08:6d:a6:fd:
a2:0f:85:bf:34:74:8e:01:20:3b:f5:3f:81:20:c3:
42:58:45:16:eb:bc:b2:ab:c9:44:c5:0e:b2:1b:34:
93:7d:e9:e2:96:65:b2:09:03:4c:06:56:cc:e1:a4:
f4:05:d1:5b:a7:5d:c2:1b:fa:0a:8e:67:67:cf:38:
58:21:0a:97:36:75:e9:0d:b4:f8:7b:ef:55:c2:96:
40:8b:2c:39:19:65:b4:35:73:3b:c1:9a:7f:e9:1b:
9c:92:da:fa:70:fb:cb:ec:61:64:ae:c0:f5:22:4b:
7b:e9:b0:9b:fe:c3:af:db:29:59:9f:3f:51:d6:b6:
32:03:1f:7c:01:e3:82:0d:84:60:f9:bb:87:c4:b9:
86:93:c6:90:9e:d9:ad:4a:9e:6c:9f:25:0f:cc:b3:
8e:5e:02:6b:21:f3:b4:f1:bc:e8:d3:22:0b:7b:c7:
94:43:76:d6:0f:53:87:35:38:da:5a:3f:53:5e:db:
8d:41:29:02:23:77:1e:9c:fd:e4:3c:d8:ca:c6:15:
8b:ae:95:d3:b1:f6:b6:84:7b:e8:a1:b8:55:e7:97:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:8A:DC:F7:14:E6:85:04:D8:ED:A9:25:0A:01:E3:6B:FA:1B:17
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0d:b6:2e:a5:0a:ca:a3:7e:cd:ec:7f:da:e7:07:4a:bd:df:
b0:a0:1b:56:30:a7:15:da:21:06:b9:68:48:26:c3:68:89:07:
c7:42:d8:1b:4f:a9:8b:13:dd:86:8d:c3:3c:61:b2:a4:3e:57:
af:9a:0b:e9:7f:e1:6c:f1:ad:cb:ab:3d:b1:4a:e7:54:ce:75:
b4:78:1a:fb:65:06:e9:b5:2a:e7:9b:ca:ca:09:13:11:c3:1e:
ad:1c:48:ab:45:3b:74:41:1e:18:23:c1:c0:18:f3:5b:24:6c:
e1:15:d2:6c:e5:1f:d2:13:68:e0:36:d3:92:74:a7:4a:ef:66:
c5:30:70:ca:b0:8f:01:05:b0:04:2b:56:6f:b9:3b:6e:d7:9f:
78:0f:a1:59:8e:72:68:e9:62:57:ab:47:10:43:c7:da:18:9b:
19:bf:89:6b:2b:b8:b4:4a:ad:fb:1e:f3:ed:0c:72:9d:a6:f8:
9d:38:29:eb:6d:97:62:22:8b:ad:e4:95:23:d8:ec:76:23:a1:
09:1f:d5:8a:7d:aa:c9:e3:b7:55:a0:f7:6a:c3:78:76:78:8b:
7c:a2:fe:6e:5d:f7:64:85:12:7a:3f:43:39:ed:87:2b:e1:40:
7f:2e:a9:b7:e0:13:0d:a4:c8:23:39:2d:e3:04:26:c5:de:dc:
00:44:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:50:52 2025 by rpki-client