Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier: ZGm4g9o+ddJAYgUT57+5rFJV1Mh45AJQCb+wa34Cx5Q=
Subject key identifier: A8:F2:39:65:77:F1:B8:95:89:EB:83:7C:43:10:BF:3E:9E:1A:C8:11
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer: /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial: 01967C0E2B9EA8891A5A91E2C72FCF3B657A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number: 1031
Signing time: Mon 28 Apr 2025 11:00:25 +0000
Manifest this update: Mon 28 Apr 2025 11:00:25 +0000
Manifest next update: Tue 29 Apr 2025 11:00:25 +0000
Files and hashes: 1: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (hash: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=)
2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: piIDCCCdnlGgTcLTuVJZIwigusWG1TElMbKCLVH3xZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:2b:9e:a8:89:1a:5a:91:e2:c7:2f:cf:3b:65:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Validity
Not Before: Apr 28 11:00:25 2025 GMT
Not After : Apr 29 11:00:25 2025 GMT
Subject: CN=a8f2396577f1b89589eb837c4310bf3e9e1ac811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:7a:41:33:d2:79:78:b8:a2:20:ee:d1:eb:
71:ac:c8:4f:40:93:ec:5c:b8:fd:6b:0a:8e:41:37:
85:14:45:a2:8e:e0:e4:59:c9:e4:0a:9e:3f:81:c8:
3d:da:80:b3:54:e1:83:91:f4:7a:d3:f6:5d:c5:3a:
6b:43:6d:bc:b3:21:71:61:08:9b:45:c5:03:de:1e:
7c:8a:de:2b:cd:73:75:01:dd:20:3d:60:4c:f1:88:
e5:67:f8:e2:f1:a0:cf:75:f2:99:4f:94:bf:ff:bd:
94:6b:76:e9:fb:d7:04:72:dd:fd:d1:27:ac:00:b1:
d0:be:fd:6a:e5:0d:ec:c0:8e:27:a0:e0:0d:69:96:
53:84:aa:98:f1:46:f9:77:a4:9b:5a:3b:fd:a7:65:
6d:15:25:04:84:ad:38:a7:00:80:e4:f0:72:85:b3:
1e:48:90:6a:8f:cb:7f:0e:65:24:af:af:7a:c3:fc:
5a:7c:f4:e4:36:f5:54:65:1d:bd:4e:fd:2f:42:60:
73:17:7e:98:62:2b:8d:47:ed:be:c0:7c:7c:b6:99:
23:b5:74:5c:7e:e4:f4:6c:17:9c:01:88:66:ed:5a:
b2:6c:3e:60:1d:f3:ea:60:d2:db:ad:92:08:65:71:
9d:66:c8:73:8f:32:a1:42:2b:de:34:5f:54:74:48:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F2:39:65:77:F1:B8:95:89:EB:83:7C:43:10:BF:3E:9E:1A:C8:11
X509v3 Authority Key Identifier:
keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:10:f8:22:67:f8:b2:2c:8e:ad:e4:e7:2d:a0:a2:f5:82:78:
22:e2:fe:0c:eb:fd:05:c2:b9:7c:0f:20:dd:a8:99:7f:0f:e7:
22:56:3c:af:0e:1f:63:3d:d2:4e:a8:e6:18:79:4a:cc:c3:03:
29:04:36:cc:50:f3:e3:60:1c:e7:18:ff:7e:99:61:aa:49:d3:
61:a5:aa:c4:1a:cb:75:ed:bb:6d:98:a9:c7:9c:a3:00:cf:b5:
d5:45:59:8f:81:e6:fe:c9:b4:8f:9d:f2:9a:b4:8c:30:5a:a6:
b0:87:9d:0a:5e:34:56:77:3c:51:5f:09:76:a1:75:ea:18:6a:
0c:26:d9:96:2e:97:a7:b2:f5:71:90:7d:86:4a:42:d8:c3:8c:
8e:88:19:25:cb:a8:db:b3:b3:a8:7e:28:65:97:05:8e:b9:4a:
80:8a:3a:ad:7b:82:69:ec:91:d6:35:68:52:d8:14:9b:45:f2:
92:80:75:35:e6:9c:85:4b:e4:ee:4c:cc:b5:f2:f6:b9:4e:2e:
97:d7:33:06:fb:5b:af:45:05:c6:5c:0c:0e:57:2f:ef:05:28:
9e:30:a1:2b:3e:2a:f0:f4:28:da:47:eb:6c:dd:60:69:8d:5b:
65:0e:b1:39:1c:a0:e8:d9:84:2a:b8:60:1c:db:0f:21:41:a6:
cf:09:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:27:16 2025 by rpki-client