Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: Zmrs2sMdnglO4YHCB1cAdnEYpHDcwfm4sseXI5YbeGM=
Subject key identifier: BB:F6:86:1C:3B:70:E7:D7:0D:B9:9E:47:41:E7:F8:97:BA:E6:B7:B7
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 0196835A428FD30258919716C20F6C23737A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 04CE
Signing time: Tue 29 Apr 2025 21:00:52 +0000
Manifest this update: Tue 29 Apr 2025 21:00:52 +0000
Manifest next update: Wed 30 Apr 2025 21:00:52 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: fJCMA6/yuciZ+2/z0VcN5paS9/ZZgymGjAUTEQd5rUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:5a:42:8f:d3:02:58:91:97:16:c2:0f:6c:23:73:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: Apr 29 21:00:52 2025 GMT
Not After : Apr 30 21:00:52 2025 GMT
Subject: CN=bbf6861c3b70e7d70db99e4741e7f897bae6b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:e8:ac:bc:b0:d8:c1:9f:53:f4:10:ce:57:
e7:ab:96:2d:fe:0b:ba:19:a9:67:ad:11:83:f5:3e:
56:c4:7d:74:eb:ec:14:e9:fc:39:25:9d:cd:e9:a2:
88:d1:7a:e4:90:5e:6f:86:40:9a:fd:7b:95:21:07:
3c:9c:a5:d9:3f:ca:ec:d4:b7:fb:57:b3:91:d1:cc:
81:b1:15:b2:68:1c:41:8a:a5:aa:98:93:16:b6:09:
55:48:0c:ba:a9:19:eb:49:d6:7f:bb:da:f2:7d:e8:
70:31:84:8d:51:be:4c:90:03:cc:d3:85:6c:31:64:
16:f8:0b:2d:86:7a:ae:42:7a:2c:c7:50:03:b5:58:
03:ca:5b:53:13:70:6d:97:b7:5e:99:94:22:45:6b:
c3:64:c0:89:b6:43:ce:ec:41:12:72:74:7b:66:60:
3c:e8:12:49:a9:b0:14:84:22:e5:cd:04:2f:b1:de:
8f:e2:f2:24:f1:b4:fb:c0:dd:e3:6c:ca:c9:f8:bc:
ec:f6:48:cc:5f:45:b8:52:09:62:c8:94:72:99:2e:
cf:11:fe:75:98:0f:ad:5c:ca:4d:75:c5:49:6c:b9:
22:c0:23:c0:ef:07:a6:8b:3f:6f:e8:88:ae:5b:64:
d4:17:36:2c:b2:81:80:e3:02:44:17:40:3d:99:ad:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F6:86:1C:3B:70:E7:D7:0D:B9:9E:47:41:E7:F8:97:BA:E6:B7:B7
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ad:7c:68:07:a4:aa:be:17:fe:6d:1f:fe:4d:77:68:65:3a:
1c:f2:6a:8b:ef:ab:04:7a:34:3d:43:26:06:a8:82:c5:ad:e0:
a7:4e:30:dd:80:b9:81:ec:f0:33:26:2b:16:db:cd:42:5d:d2:
a9:8b:15:bf:06:89:b6:d9:b9:6c:88:c6:ed:59:0f:a7:03:94:
a6:0e:67:6f:c7:3c:dd:f3:d6:de:51:88:61:92:03:46:5b:69:
31:6c:74:e1:30:c6:cb:0d:3a:ce:0f:38:57:eb:62:e6:08:2b:
dc:d0:d1:9e:e1:77:b1:97:f6:78:77:d9:cb:64:a8:db:d6:cd:
64:51:ae:2f:bb:ab:20:34:5a:f8:78:c0:8f:d9:fa:61:c6:e0:
9f:ca:96:cc:b7:de:7b:bd:c0:00:36:73:a4:99:ac:48:94:03:
4e:e6:e1:aa:94:c4:da:f3:ff:56:d3:af:b0:f2:ef:a6:5b:bb:
fb:56:a7:f7:be:35:91:8a:78:f7:38:21:ab:dd:8e:4c:6e:a8:
5d:4f:a4:c9:c8:4a:c8:62:47:e7:f7:6d:ea:4b:87:0d:35:1e:
70:d9:3a:4a:ff:d2:a4:96:5e:a6:b1:27:8e:92:67:fd:60:0a:
d4:e8:2e:f3:71:9f:67:64:dd:28:87:3c:10:1d:5c:2c:01:98:
08:db:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:53:25 2025 by rpki-client