Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json)
Hash identifier: avsO95sZZrs9/LhfsL0LRFyYqKOqcTwzcEFU0tU4Jn8=
Subject key identifier: 45:CD:97:C0:6B:9C:9B:3F:77:73:10:46:DD:A7:58:C7:6F:65:B5:D4
Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Certificate serial: 01967DFC5E6B8C37B96A044CE7815660C525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 20:00:13 +0000
Manifest this update: Mon 28 Apr 2025 20:00:13 +0000
Manifest next update: Tue 29 Apr 2025 20:00:13 +0000
Files and hashes: 1: VI-dWQcY37xUT1kUINfwRf4ITOY.roa (hash: /K+hbbpjK6p98+FcPVOwuQPFXuHi6fBZ7x81PS6CuTg=)
2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: l3mdY8+xE75SnoSSMGyOWDycSGtc8pIY1LDdCGwFysY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:5e:6b:8c:37:b9:6a:04:4c:e7:81:56:60:c5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1
Validity
Not Before: Apr 28 20:00:13 2025 GMT
Not After : Apr 29 20:00:13 2025 GMT
Subject: CN=45cd97c06b9c9b3f77731046dda758c76f65b5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:cb:36:2e:aa:1a:be:a1:72:58:5c:f7:33:
d9:b7:1b:e1:98:26:f8:06:37:7f:3b:eb:7c:c0:b4:
1d:19:8a:25:d4:e4:63:38:84:5e:e6:b9:2c:24:dc:
9f:61:7f:41:a4:bb:4d:7d:e7:d8:3f:85:4d:78:36:
83:a8:00:96:2b:52:a1:c6:51:1c:b1:59:54:c6:3e:
79:d7:4a:dd:49:77:59:31:2b:9b:58:45:fd:b4:40:
42:5a:8e:4c:ab:c2:7d:c4:21:43:c7:c0:e7:25:a7:
a6:a4:c2:79:6d:36:31:5c:b0:82:01:37:6f:da:bd:
46:cd:32:f1:e6:4b:7a:35:79:49:8e:c8:94:a3:17:
ab:34:ee:93:92:94:fc:8d:a0:42:f2:e2:92:18:52:
18:82:93:45:7f:c2:0b:9d:94:10:1c:92:7e:a4:69:
71:90:54:1a:1f:85:72:2f:af:6f:dd:38:c5:43:d2:
31:34:14:cf:f9:07:8d:f2:38:04:f0:5d:3e:8d:85:
b8:eb:f8:28:e0:22:bf:85:05:8e:34:15:d7:7d:69:
a7:16:bf:a8:cd:3e:93:35:f2:ef:89:16:f7:02:5f:
48:c2:0d:1d:14:c8:c3:23:55:5f:a6:c2:49:55:9d:
32:40:e8:1c:6c:e6:7f:8e:a6:bd:69:c0:15:8e:e3:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CD:97:C0:6B:9C:9B:3F:77:73:10:46:DD:A7:58:C7:6F:65:B5:D4
X509v3 Authority Key Identifier:
keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3f:60:a7:b5:3b:cf:19:25:30:2e:14:8d:88:db:d7:db:b2:
3d:ed:6e:c4:db:9d:1c:83:77:9d:81:bf:ce:a4:a7:5a:e4:eb:
16:56:3d:0e:d6:3f:bd:db:54:fb:07:79:00:b6:3a:54:e3:9d:
8e:af:3d:21:47:ca:c7:02:04:ef:47:39:94:18:10:88:7e:79:
d3:3d:79:6d:fa:48:b3:cd:39:02:fb:70:44:c1:d8:f0:69:31:
9f:20:cc:ed:84:3c:f7:9c:31:47:67:11:a2:95:35:a8:39:ce:
a9:f7:23:08:76:30:46:43:bd:a2:a5:e8:4e:64:d8:50:85:fd:
b3:35:1c:56:e3:a3:9f:90:c0:1c:bb:df:9f:18:37:47:f9:a0:
0d:2d:b2:93:e0:f6:00:7b:14:4e:26:0c:13:ba:e1:90:07:e9:
5c:46:88:ed:7f:81:47:08:cc:27:1f:b5:57:0b:0c:0f:99:85:
8e:bc:27:ee:81:15:56:35:3c:43:50:9d:4b:30:10:4d:3e:55:
24:6b:f3:b9:94:ee:b0:ed:70:9a:fd:73:b2:f7:55:45:09:a1:
1b:12:ff:42:ac:d0:02:fb:76:13:7c:d7:d5:8e:6b:06:f2:61:
ca:fc:7f:e8:e0:c3:ad:1b:ee:23:1e:cb:18:ab:a9:3b:64:5e:
24:be:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:25:16 2025 by rpki-client