Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json)
Hash identifier: Qs3Nd8C6HfD9bDNb+xT2EeRNWKwdIKj3l0wzPUXpLEM=
Subject key identifier: 89:78:66:A2:8D:CF:F6:DD:C8:3A:79:85:34:11:58:5A:CE:3A:4E:A3
Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Certificate serial: 0196C26FCB2C86282FE20723A803EF636C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
Manifest number: 024F
Signing time: Mon 12 May 2025 03:00:28 +0000
Manifest this update: Mon 12 May 2025 03:00:28 +0000
Manifest next update: Tue 13 May 2025 03:00:28 +0000
Files and hashes: 1: seG0cSvUmJpa8tNqX_V-DMKTXGE.roa (hash: 0BF0vQ0Y+DaO6qvrnPzJ13hBughhON940nySfXNNYFI=)
2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: 4yXFKnjNZwLP7MI8XIz6QXObf3mZyXDB1RXpg8Gy7VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:cb:2c:86:28:2f:e2:07:23:a8:03:ef:63:6c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b
Validity
Not Before: May 12 03:00:28 2025 GMT
Not After : May 13 03:00:28 2025 GMT
Subject: CN=897866a28dcff6ddc83a79853411585ace3a4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:ce:cd:c6:4a:78:a6:3d:28:6e:a2:bc:83:
7e:75:f7:ea:83:17:e7:d1:26:49:86:31:a7:b7:f7:
0e:a8:46:d6:50:9c:70:d7:5b:5d:28:6a:53:c0:89:
9f:34:a6:c8:37:0c:a6:03:08:24:6f:98:f5:7f:17:
28:e6:1d:4e:86:1f:93:75:2b:1e:3b:46:ab:4d:18:
1e:bc:7c:05:09:d8:1c:a9:b7:22:c9:d9:48:28:57:
89:29:74:13:a0:c7:c2:c3:00:6e:38:f3:54:bf:17:
3b:c6:5d:f1:99:7c:d8:00:7c:f4:93:9f:cc:52:63:
f7:ce:e4:cd:da:c2:42:26:24:f1:a0:e0:51:0e:e4:
c1:cc:05:8d:07:c3:92:4f:4f:48:7b:b3:53:6e:d1:
d5:85:98:09:ed:8c:64:26:f6:ed:54:5b:6b:7c:a4:
e3:6a:cd:92:8c:e0:a8:41:f4:19:6c:20:d9:81:14:
07:00:38:82:c4:49:0e:2e:35:77:d0:bf:17:64:35:
50:8c:63:07:35:06:f5:68:58:c6:97:70:0e:6c:5a:
54:ea:08:48:09:4f:27:e7:17:27:97:e9:40:25:d8:
5d:f1:a6:63:ad:e0:11:1a:ee:c7:90:a9:90:0b:fb:
aa:0c:5b:49:f0:26:9f:9a:25:b2:a6:05:27:5e:7e:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:78:66:A2:8D:CF:F6:DD:C8:3A:79:85:34:11:58:5A:CE:3A:4E:A3
X509v3 Authority Key Identifier:
keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:65:f8:e5:96:3f:ec:a5:5c:f1:d1:e7:49:60:82:23:fc:b9:
2b:9b:d6:86:2e:d9:ba:f4:16:d5:8b:e5:93:73:e1:67:18:7b:
83:90:49:77:86:16:ff:25:5b:3e:51:ff:77:ae:1c:40:f2:39:
02:bb:70:79:a3:2c:da:59:96:40:60:03:04:31:ea:cb:c9:b6:
1a:17:d0:36:4b:e5:ae:31:3e:3e:3a:7b:08:32:69:34:6c:5c:
09:23:94:f0:75:9e:2a:cf:3f:55:1e:bd:5c:a8:85:bc:d9:94:
b5:64:d0:05:85:ea:66:f9:64:ba:19:09:06:c1:5b:a6:09:88:
21:80:51:a7:46:50:5b:d1:f3:a5:82:f7:6e:99:12:09:9a:aa:
ab:80:b5:20:63:e3:0d:3a:a1:7b:17:26:9b:80:74:b9:a0:4a:
fc:4a:23:bb:07:10:9a:ed:73:80:a6:a1:cf:0b:bb:2f:69:a5:
84:3f:1e:af:44:7e:a9:39:05:94:ee:d1:b1:63:5f:f3:95:e1:
66:ee:53:d8:1c:dc:e8:67:8d:9d:8b:d2:3b:63:c1:52:ea:e8:
3b:fa:a9:0f:ee:ba:e4:b0:56:5e:a1:38:f9:90:92:96:cb:2f:
36:d8:d3:8e:d9:0c:3c:7a:cf:bf:8b:64:0f:9a:e6:c3:62:d4:
ae:6e:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:44:59 2025 by rpki-client