Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: Hz3wgbpxpZLXyd3wi/1EuPJUIOsVrXgPeweV2uXADKs=
Subject key identifier: 21:EC:0E:E2:83:09:01:87:5F:0F:2A:C8:B9:2C:B9:40:C3:60:B4:84
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 0196C64C94EAA17BF97DF5DBC15ACBBCB22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 0FF8
Signing time: Mon 12 May 2025 21:00:29 +0000
Manifest this update: Mon 12 May 2025 21:00:29 +0000
Manifest next update: Tue 13 May 2025 21:00:29 +0000
Files and hashes: 1: 1-OuknPy_I73ZJ_OK7-eydsH6EGQ.roa (hash: 1km3bnZmBhTCtJX0A5W/ri14NfTFKPNRu0kBcpb2/R8=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: 6vGkoBBkQZwxKLxfzJD2/D3RHkffwe/5GyUwWKcD9Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:4c:94:ea:a1:7b:f9:7d:f5:db:c1:5a:cb:bc:b2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: May 12 21:00:29 2025 GMT
Not After : May 13 21:00:29 2025 GMT
Subject: CN=21ec0ee2830901875f0f2ac8b92cb940c360b484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:9a:46:eb:b1:50:2c:21:2f:a1:db:c4:85:
c7:33:85:0c:38:b3:c0:fa:0a:f7:92:30:37:3b:ce:
0a:ad:15:e9:59:9f:a5:04:78:02:98:b6:55:f0:2e:
62:30:b6:f9:df:9a:e2:04:68:36:15:2d:b4:11:28:
91:f6:e4:af:22:1d:c3:20:a9:90:3c:0d:3a:09:16:
fd:0a:d1:5b:31:05:ff:ec:c0:d9:0b:b1:df:ef:66:
7d:dd:44:3d:78:eb:91:c9:cf:74:48:46:b1:ba:80:
1e:ad:f2:2b:a6:fd:90:4b:91:00:61:a6:fd:71:cb:
ad:2c:c6:45:52:03:79:90:6c:40:62:63:9e:3a:ed:
c4:aa:16:af:3e:77:4d:5a:ee:83:f4:6d:bc:d4:e5:
76:7b:59:6b:2c:51:31:57:75:c2:a4:fe:f7:85:cc:
59:65:11:8b:77:5a:d0:99:7f:59:af:b7:26:33:3f:
72:4b:98:f6:f5:e5:3d:70:9f:5f:8b:d1:30:a5:ed:
03:be:64:bf:fb:7d:78:a8:3b:c1:07:c9:7d:24:4c:
3c:66:62:23:e5:97:83:3c:2b:88:88:6e:d3:6d:12:
e9:64:eb:2e:63:42:24:ae:07:2b:8b:eb:00:8f:75:
a2:3a:31:0d:d8:45:26:af:3f:70:ce:c9:03:b3:d0:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:0E:E2:83:09:01:87:5F:0F:2A:C8:B9:2C:B9:40:C3:60:B4:84
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:2d:7d:55:14:99:ca:e4:b3:6e:0b:41:2b:81:31:79:20:
86:35:f0:5b:29:c8:da:80:11:8a:86:53:c9:2c:00:ad:6e:c4:
08:c2:ed:45:18:c6:67:bc:ec:5e:78:41:f4:3a:4f:25:84:86:
87:5b:1e:ef:60:65:df:83:03:13:3b:50:5f:01:e5:5b:91:33:
fc:82:0b:6b:b7:aa:8a:fa:c5:66:21:98:89:71:8f:cc:bd:27:
e9:ca:82:d1:66:a0:49:f3:e1:48:79:4d:ba:ea:a6:fd:9e:9b:
27:69:90:40:8d:77:72:62:14:4d:34:16:df:2d:4a:a8:ca:b7:
33:79:a4:05:52:a1:d5:40:e7:bc:76:ad:f3:63:53:11:30:11:
81:55:c3:c2:fd:f8:52:90:13:b8:d1:fa:61:fa:14:aa:21:1a:
ee:ca:0b:e8:6b:8f:ad:24:6c:ce:7d:da:8b:3c:eb:9c:21:d6:
0a:07:8a:25:74:29:73:bb:71:66:00:d1:2e:67:b5:f8:62:4c:
d2:da:c8:41:5d:53:c0:0c:26:85:6d:42:7f:83:ef:36:ef:70:
69:0d:20:2a:78:39:ba:e5:84:f9:e7:44:df:25:2d:47:cb:cf:
9a:37:c4:69:b3:df:b7:12:4d:67:ea:44:76:ca:7c:be:fe:ce:
95:8f:ec:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:54:30 2025 by rpki-client