Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier: X7dRTy07pjFvPPUPolL3sA6WmSiY14CiFsf2A703jPM=
Subject key identifier: 88:44:22:0C:AF:9D:5E:1D:6D:5B:F5:C1:99:26:60:2C:EB:93:9C:21
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 019676E7AB97587EF33B05EE9C26BCAFA989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number: 109B
Signing time: Sun 27 Apr 2025 11:00:16 +0000
Manifest this update: Sun 27 Apr 2025 11:00:16 +0000
Manifest next update: Mon 28 Apr 2025 11:00:16 +0000
Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=)
2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: TaLX6A7Qw/DPxaVc+38w/x2njy7PL3QTkV5E2aZjwGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:ab:97:58:7e:f3:3b:05:ee:9c:26:bc:af:a9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Apr 27 11:00:16 2025 GMT
Not After : Apr 28 11:00:16 2025 GMT
Subject: CN=8844220caf9d5e1d6d5bf5c19926602ceb939c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:3a:ed:37:01:a8:07:c1:fb:ab:cb:16:d8:
46:1a:ba:40:88:b7:23:d5:0d:42:c2:d4:6a:f7:1a:
21:cf:5f:5f:a4:63:db:48:46:d6:0f:59:5c:42:e5:
a5:30:7c:e5:36:41:e0:60:be:6e:dd:dc:be:2d:5f:
a0:29:bf:31:e1:fd:46:29:35:cb:f3:23:0a:00:5b:
e1:c5:e6:b7:88:cd:27:25:b0:00:58:8c:3a:00:d7:
84:13:1e:46:da:80:db:18:a2:2e:92:1d:ee:6a:e0:
74:ed:38:f4:cc:03:0f:c6:88:d7:f6:e2:b4:2c:e0:
b4:0d:dd:23:88:fd:f3:ce:99:2a:37:62:40:0b:e9:
61:00:e4:8a:46:df:fb:e8:9b:cd:3c:22:47:fc:10:
5e:f1:78:e1:76:2c:b2:25:4f:12:80:f4:3c:51:7b:
78:83:19:74:70:bc:99:e0:75:fc:3d:85:8e:71:62:
6f:13:7e:c2:62:f6:37:6d:6c:0e:ba:ed:4d:ea:f8:
d2:9e:21:89:a5:18:82:d7:9a:7e:21:37:6f:b9:3d:
fa:61:2e:58:b6:a1:54:6a:47:b9:72:1f:f9:3c:47:
60:b2:4b:8e:dd:98:4d:c6:52:44:3d:ba:df:68:6a:
25:94:d1:6f:13:87:c8:c7:1a:91:1a:36:d1:6a:1e:
12:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:44:22:0C:AF:9D:5E:1D:6D:5B:F5:C1:99:26:60:2C:EB:93:9C:21
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4c:03:ba:12:b6:ed:14:50:f9:f9:b6:f4:96:8a:f4:58:ab:
7c:32:e4:ec:21:7b:70:b9:00:43:a7:66:17:a4:09:99:ef:ef:
30:44:d8:85:85:37:cc:39:6a:0f:00:ce:ab:22:48:71:9e:52:
06:c1:6c:c4:dd:05:e3:f4:d9:5f:50:59:52:78:67:57:56:d5:
0b:cd:1f:42:3e:8e:b6:02:39:16:e6:fd:8d:c7:96:1a:8e:d6:
63:08:d2:28:d4:70:4e:bb:d5:ff:b5:51:05:3b:e5:21:5a:aa:
15:73:e0:c2:3c:78:76:a4:95:14:39:40:21:85:bb:3d:d7:9e:
4d:55:9c:84:2d:9b:1b:52:a7:81:91:3a:92:a7:e9:98:d1:34:
b3:17:03:d4:f9:75:66:be:0a:fe:7b:17:28:5f:76:f7:26:e1:
0e:3a:d8:aa:ce:9e:4b:e9:50:7a:51:56:fa:1c:cf:d9:cc:ac:
bf:a5:eb:5b:c0:82:67:7f:52:51:77:bf:ef:fc:ed:53:dd:44:
98:26:a1:6a:f2:bb:92:cb:bf:48:86:e8:7c:a1:7c:5c:0c:2f:
6a:08:e3:64:55:51:c7:8b:86:9f:7e:4c:d3:c4:37:aa:d5:8c:
90:95:0c:bb:ae:b6:d5:04:17:a7:b6:c7:6e:5a:a6:ab:53:49:
ba:42:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:49:34 2025 by rpki-client