Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json)
Hash identifier: vMf+VtFV81T5wadY14WN5gFYnVCglcqA0sb68F0z7ts=
Subject key identifier: 54:2A:28:BD:50:D1:47:C3:84:6D:A3:21:89:1F:20:CF:AE:8E:54:12
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 0196A466429531A4690F6AB2CE875B36B1EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
Manifest number: 152C
Signing time: Tue 06 May 2025 07:01:27 +0000
Manifest this update: Tue 06 May 2025 07:01:27 +0000
Manifest next update: Wed 07 May 2025 07:01:27 +0000
Files and hashes: 1: Wi8TeX6HlCf6UscTIz-eiQunz20.roa (hash: iC2va1BTrYFKnldJrvaufKukdaOfozas1t65U+xf85Q=)
2: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: gtFCOjybhWUfeuRM5dpGEgKaQw25lBsTYAr0s3w5y+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:66:42:95:31:a4:69:0f:6a:b2:ce:87:5b:36:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: May 6 07:01:27 2025 GMT
Not After : May 7 07:01:27 2025 GMT
Subject: CN=542a28bd50d147c3846da321891f20cfae8e5412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:6e:05:cd:2e:b8:83:aa:86:83:71:25:92:
62:85:b5:b3:a0:4f:73:79:07:20:cb:9e:a4:e1:9a:
fa:d0:3a:e4:82:fa:46:f6:2f:14:d5:36:1a:d9:0a:
94:8a:95:cf:c0:f8:53:c0:3b:d5:26:08:8d:4c:b5:
6d:50:c2:01:c0:cc:c7:0d:8a:23:65:f4:15:ef:b1:
e0:b7:e4:e0:55:eb:bf:10:ab:49:39:36:cc:49:f4:
9d:50:85:42:76:1e:3a:f3:ea:fb:95:0e:54:d9:e7:
3f:4b:ff:f5:66:ca:d6:e5:eb:8d:96:b8:ae:4d:ea:
c4:7a:77:34:8c:f7:4a:be:05:8a:69:31:41:da:01:
68:a9:36:c1:3d:ba:60:d0:7d:7a:ec:25:f1:ba:22:
b5:1a:01:b9:1d:c7:f0:2e:f0:22:e8:11:13:2e:34:
89:27:a0:18:ef:32:f1:6c:c1:62:fa:f2:a5:1e:e6:
dc:09:08:26:69:64:68:72:4c:bb:af:75:4b:8a:1e:
83:89:0b:c0:09:a6:0b:c2:bc:57:fe:5e:c2:33:45:
80:d3:58:2f:64:64:56:84:6f:ac:e3:e2:37:5d:2f:
57:cf:f1:5a:5c:e6:8e:77:3e:50:02:7d:5d:a1:03:
93:85:be:dd:b8:56:2e:99:da:04:51:25:4e:f0:d7:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:28:BD:50:D1:47:C3:84:6D:A3:21:89:1F:20:CF:AE:8E:54:12
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:72:75:13:57:ef:df:37:40:cd:cc:99:82:9a:ce:76:5a:74:
80:65:cd:76:a5:4b:42:60:90:c2:74:0a:a5:3b:98:8c:b5:4a:
24:aa:b8:7a:51:77:ab:5e:4c:95:dd:32:2a:6a:60:6c:ec:58:
3f:26:06:f9:50:38:27:df:17:77:3f:5c:fa:c1:bf:52:2b:96:
9b:d2:de:70:2a:29:35:7b:b9:de:7f:09:58:cd:a5:1e:d0:c8:
1c:d4:4c:c4:a4:3b:a2:5f:d0:c7:ef:a1:d2:34:74:21:ed:4f:
b6:90:3f:53:b8:aa:c3:c4:73:f7:5a:38:86:bb:b5:9a:89:dc:
dc:65:54:a6:cc:b5:16:be:14:99:dd:2a:ef:d9:97:d4:be:4d:
1c:eb:84:71:b7:99:81:88:26:b3:e6:77:d3:fc:b3:e1:c6:49:
15:c7:27:11:dc:14:7e:74:bc:c8:1f:6d:41:f4:ca:34:07:ba:
d2:92:03:83:bb:60:07:ae:80:6a:7d:56:8a:00:43:86:d5:35:
b4:10:3a:a2:56:4c:55:72:72:4e:af:98:58:4b:76:7a:34:13:
52:e6:8f:71:03:77:c1:6c:0d:26:ec:52:15:fb:a5:08:ce:7b:
da:9f:e3:71:d1:b0:7f:2d:6f:0b:1b:ee:f1:1c:ab:18:e6:ee:
bc:61:f8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:12:09 2025 by rpki-client