Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier: F+mpKXMSrwEoNzAEfcRjSVS1J7GOUMAHisjijR5qDNs=
Subject key identifier: 82:11:BA:74:C6:CB:42:57:8D:97:53:C5:D8:C1:3D:01:5C:8B:D6:59
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 01967B32D88370B4D734C9F28445CEECE1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number: 0847
Signing time: Mon 28 Apr 2025 07:00:51 +0000
Manifest this update: Mon 28 Apr 2025 07:00:51 +0000
Manifest next update: Tue 29 Apr 2025 07:00:51 +0000
Files and hashes: 1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=)
2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: X4Raqo+HWu0C8sGpiieY8znj/kL2tuRB/SG4oWNi+R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:d8:83:70:b4:d7:34:c9:f2:84:45:ce:ec:e1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: Apr 28 07:00:51 2025 GMT
Not After : Apr 29 07:00:51 2025 GMT
Subject: CN=8211ba74c6cb42578d9753c5d8c13d015c8bd659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:ed:41:5c:83:23:f4:3e:ea:72:e9:4c:cf:
78:c8:19:a6:6a:91:3b:0d:ad:28:b0:2c:91:47:01:
e3:d9:66:15:da:59:f6:ac:fb:42:b2:71:39:19:b0:
49:60:34:8d:79:fb:4a:e5:c5:09:77:0f:42:cc:ed:
95:be:79:6c:18:a0:24:a7:66:70:eb:9f:b1:19:61:
53:6b:b1:db:27:9f:4d:59:01:90:2d:e2:cd:b4:fb:
36:e5:5a:8e:84:43:26:2b:ce:1b:ed:0e:7e:67:d1:
6a:e6:3d:82:6a:5d:d2:93:4a:ac:5c:d1:3f:5f:0e:
ec:19:da:69:a7:9f:21:c8:f1:08:e6:31:18:ac:1c:
1a:1e:2d:ab:b6:eb:4d:b0:f8:87:6a:69:21:b1:aa:
0b:ad:14:a2:9c:c1:37:70:f6:e6:7e:65:ad:1a:3c:
75:43:2e:f8:a3:99:ba:f3:98:62:53:f9:e6:65:ba:
68:4a:a2:98:86:c6:79:c4:85:79:bc:45:49:03:0b:
d1:0d:0f:a4:7b:24:59:43:f6:4e:73:92:e5:86:f4:
10:4a:75:55:19:57:47:51:24:5f:58:fc:4a:44:9a:
54:f0:53:7d:d6:31:f2:29:97:00:dd:c6:6e:69:94:
7b:02:35:6b:ac:b5:11:c6:96:d7:dc:45:f8:2d:cc:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:11:BA:74:C6:CB:42:57:8D:97:53:C5:D8:C1:3D:01:5C:8B:D6:59
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b4:8c:f2:19:9f:6e:8a:b8:7f:da:96:6d:1f:ff:50:42:ea:
b7:36:c7:c8:d8:20:cd:1f:d4:02:62:7d:a7:8f:6c:a3:fa:32:
26:f2:ea:46:88:7d:25:44:c9:61:95:b7:3c:8e:48:07:4f:b4:
1c:2f:2c:dd:4a:85:dd:f8:49:5d:2b:8a:9b:ec:7d:36:3b:65:
c0:5f:15:71:34:ed:9a:1a:63:b4:3e:86:e0:88:16:92:ca:3f:
10:ee:1e:2e:43:e4:dc:ad:65:99:fe:96:90:c4:95:54:3c:ea:
ef:5c:72:52:50:b1:78:59:62:48:0e:76:5b:28:51:6b:a5:f1:
e3:d8:9c:1c:8d:37:7c:0b:d7:fd:bf:d0:77:c6:23:1e:fd:31:
3b:e2:86:53:6e:73:de:cc:3b:5c:8b:ac:ed:75:58:4b:4b:f6:
67:fc:85:5c:ae:e8:03:d6:8d:f4:1f:a8:2c:ca:6d:fd:56:fb:
4b:f3:a1:07:52:8d:48:ac:b0:85:e5:1a:11:12:f9:f7:17:0f:
68:07:ec:6b:35:92:e8:71:bb:d5:1b:97:5c:77:1e:bb:7e:04:
e0:26:41:89:52:88:1b:8b:d0:d1:86:a3:d3:03:be:d6:94:16:
85:82:a3:86:e0:08:2d:59:0f:f3:de:8a:df:1a:3d:d1:54:f8:
f1:38:1f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:59:45 2025 by rpki-client