Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: F7oZtN9tT7Kypce+XIeICJlcS/S/VVrYHhlbJq2IJu4=
Subject key identifier: F1:F9:AD:8D:64:1E:B5:65:2F:47:0D:70:1B:35:51:6E:6A:1A:EE:FD
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 0196839108ADE808BEF1B4D781F3013DC765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 22:00:42 +0000
Manifest this update: Tue 29 Apr 2025 22:00:42 +0000
Manifest next update: Wed 30 Apr 2025 22:00:42 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: 2HkZ5/5J1Nz+LTJ+GfD/HG5aVgxRy/5XSH1NvJPDv5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:08:ad:e8:08:be:f1:b4:d7:81:f3:01:3d:c7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: Apr 29 22:00:42 2025 GMT
Not After : Apr 30 22:00:42 2025 GMT
Subject: CN=f1f9ad8d641eb5652f470d701b35516e6a1aeefd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:37:2f:2c:e7:eb:59:75:ae:e0:d2:ef:51:a6:
bd:41:80:dc:c5:22:02:35:77:cc:09:7b:0d:58:b7:
45:e5:2d:ac:47:9f:b6:71:f4:8d:82:fe:af:2b:08:
49:53:fc:2e:27:8d:ba:46:48:d8:98:82:1b:b1:51:
eb:06:0f:31:5d:1e:99:17:dd:5c:af:4e:99:dd:5f:
5d:d0:57:c8:a8:7a:7f:5a:f1:54:4c:24:6d:b1:4a:
ac:20:5b:4e:ea:3a:0d:49:f5:c4:da:27:d1:29:86:
ff:93:d1:1e:ca:2f:4d:bf:85:7c:62:86:83:cd:f3:
b9:3b:3f:06:dd:60:99:31:75:e0:9f:22:ba:e2:55:
e5:95:a8:33:c8:53:45:ba:08:f6:2d:53:73:72:9b:
d5:52:24:33:fd:8c:73:47:8a:30:f0:52:96:c2:d3:
95:e4:d2:c3:c6:9c:58:08:dc:02:03:ec:3c:0b:a5:
f9:c1:6a:69:dd:2f:e1:fd:35:e8:ca:33:82:b4:1e:
4b:63:62:2d:b7:5e:80:ca:b3:67:8b:95:80:e1:45:
ae:ba:b9:82:e1:b1:63:a1:dd:25:43:e7:7f:0c:9b:
89:88:4a:21:56:71:cc:11:ea:0f:bd:5e:cf:44:a5:
ca:fa:67:e9:d0:89:c9:96:9a:09:d9:48:61:ae:71:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F9:AD:8D:64:1E:B5:65:2F:47:0D:70:1B:35:51:6E:6A:1A:EE:FD
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:02:d5:eb:bd:70:3d:aa:64:f8:20:cc:21:1e:b9:0a:17:
cd:75:83:dd:1a:46:fd:3d:6d:b0:5c:6c:95:f9:4a:1e:e8:00:
a0:72:7c:92:cb:d7:8e:27:87:d0:fc:b6:9e:6b:0c:50:2b:28:
c6:c7:40:9a:5a:3a:3f:14:e7:7c:f2:13:54:45:41:ba:9e:df:
72:ff:76:f0:84:aa:2a:9e:c5:12:cd:4b:14:b5:1e:82:62:19:
10:b0:30:00:22:dc:59:f5:72:73:5c:a5:3b:90:e2:53:77:f4:
8f:05:d4:26:48:85:6f:ad:75:36:eb:c1:ca:a9:c2:4b:7c:f4:
39:2f:e9:a1:5e:fa:d4:54:d3:b0:90:6e:db:60:bd:fe:37:2f:
ec:9d:0a:ce:73:9d:fc:61:f2:26:8f:92:7c:33:57:a9:65:b4:
15:7c:75:b3:ed:87:cc:1b:bb:b1:dd:b7:0b:1c:b8:43:49:91:
69:45:0e:0e:3c:93:9c:fe:46:de:6c:67:a3:e4:8b:29:6b:f0:
d2:0c:ac:52:ed:6f:f1:b0:12:08:4a:82:62:49:70:56:d2:a5:
85:ce:2c:86:db:a7:4c:9d:b8:91:35:95:19:63:b3:cf:cf:8f:
78:21:0c:44:57:81:38:0c:5d:2a:40:d0:07:58:25:60:aa:18:
b0:bf:01:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:41:50 2025 by rpki-client