Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
File: zXPyONls9npe_Aw3R2_TBgKa9VI.mft (raw, json)
Hash identifier: 4c8Y2gQwA8Iozdsubh1eRvHrPpFpjzFX8pAFVbS63ZU=
Subject key identifier: 80:15:AC:97:DD:EC:8F:DA:CD:9F:DB:2D:D3:80:5D:29:32:64:44:C6
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 0196BFA5B903306DBBE13E07CAED74C24F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 14:00:31 +0000
Manifest this update: Sun 11 May 2025 14:00:31 +0000
Manifest next update: Mon 12 May 2025 14:00:31 +0000
Files and hashes: 1: 1IglzTgNxvlQxtZzdqvHXP8KoF8.roa (hash: ONhCC/oPBTKCApZ6GbcEqvO3nMk4C52NzJJDkv5+JsI=)
2: BN93epoiflbuobmxVOrnJQZcb5s.roa (hash: tPBXpEVrebg3/mFW8ov1/UOfYTfxAPNL3JWDyTkPOJk=)
3: HT1N8Mmz6IMM5YW385P2T31kK7g.roa (hash: eDZrD7or10sxe0ZnfIhEw2KQZGg5eDEQrsVwHBWFKyk=)
4: zXPyONls9npe_Aw3R2_TBgKa9VI.crl (hash: HAqJbdHdwiYLUTeoIhUVLVr+pjLvV2zm7ZFr1F2eNVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:b9:03:30:6d:bb:e1:3e:07:ca:ed:74:c2:4f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: May 11 14:00:31 2025 GMT
Not After : May 12 14:00:31 2025 GMT
Subject: CN=8015ac97ddec8fdacd9fdb2dd3805d29326444c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:1b:2a:1c:3b:95:55:13:af:0a:66:82:0e:
be:55:c5:7d:d7:08:e8:fe:e6:27:94:b4:6f:65:44:
d0:5e:e7:c8:04:18:ac:f2:81:01:ff:73:04:83:d1:
3b:2d:cc:2f:0a:77:4d:c6:eb:82:13:0d:1d:f2:52:
0c:5e:a9:7d:1a:24:6c:c4:31:7e:c5:44:fd:ab:a6:
4d:0f:59:5e:47:59:bf:89:66:58:d7:88:e3:0d:03:
9a:97:01:5d:de:c8:ec:3a:06:0c:2b:99:fe:76:81:
40:e2:fa:f4:52:72:a7:7e:1f:11:dd:7f:d6:2b:53:
3e:dd:e5:42:99:06:db:e1:ad:1f:e4:f5:dd:49:ec:
0e:ed:fb:d6:50:62:12:6f:9b:9d:f5:f1:72:e2:63:
11:fe:d2:02:0e:b9:fb:64:fa:2a:10:a8:da:9e:fc:
10:1e:10:c3:63:2d:ca:05:a2:1b:93:e7:93:55:fd:
e9:69:e7:1b:cb:66:42:55:74:2a:c6:62:5e:9c:65:
99:eb:16:35:05:5f:78:cc:64:a9:63:40:32:bd:5c:
1c:f2:12:3a:81:aa:a8:49:18:7b:47:aa:4c:6d:2e:
ee:ad:3a:84:3a:2e:e0:85:34:e2:c1:39:a2:ce:76:
73:0c:78:4d:93:0e:53:aa:6e:5a:15:08:e8:bd:00:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:AC:97:DD:EC:8F:DA:CD:9F:DB:2D:D3:80:5D:29:32:64:44:C6
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e0:fc:a6:2e:cd:68:92:78:34:5a:9f:be:11:d0:12:d9:2e:
28:22:20:e9:12:9c:d5:b8:56:2d:9e:5e:30:04:7d:d7:98:84:
9e:0e:71:bf:61:f0:13:48:8f:87:2d:93:d9:f8:21:65:13:09:
07:a0:a8:2f:20:1f:c1:8a:b3:e2:3c:28:c4:ae:11:d7:b3:35:
27:3e:55:a0:7c:69:48:30:58:88:15:cb:cc:39:4e:69:6e:ef:
e5:90:d0:19:6e:5d:b5:48:a5:75:25:b1:0d:aa:c8:50:a1:2d:
0f:a5:11:f0:17:d9:b5:09:44:81:e9:bd:2c:7e:58:14:5d:06:
bc:95:81:5f:db:6d:c4:6c:b7:a1:6f:24:27:4d:32:bc:32:e0:
ba:9f:8e:2c:84:81:ad:7b:84:34:20:d3:c2:39:29:17:8f:7d:
1b:f4:dd:b2:bb:ba:af:e1:85:e5:5b:70:5b:8a:4b:28:16:34:
d4:35:6d:cd:a5:3c:a2:78:32:d2:88:4c:9d:9b:62:7c:d0:61:
bd:04:41:1d:de:b3:fa:d9:97:bf:66:7f:33:ed:b2:cf:b3:cb:
f3:97:95:fe:f4:c2:ed:50:d0:d5:03:c8:37:ae:71:81:8f:23:
5a:da:51:fa:ad:3d:2d:ab:e3:d4:ce:49:d8:80:9c:ee:35:83:
e0:83:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:11:50 2025 by rpki-client