Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json)
Hash identifier: hVpxLfal0dSpHoMv6bBxsyoSLtVNDZFInGWUjGDy5HY=
Subject key identifier: 5F:E7:78:56:BA:24:27:91:51:36:59:A4:54:2E:30:EF:31:EE:D5:8D
Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Certificate serial: 0196CBE0F46BBFF440A56FC71204CA0AA4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
Manifest number: 0C39
Signing time: Tue 13 May 2025 23:00:39 +0000
Manifest this update: Tue 13 May 2025 23:00:39 +0000
Manifest next update: Wed 14 May 2025 23:00:39 +0000
Files and hashes: 1: NAw4Jpnd5IQpS_WN2-GbTmgKl1k.roa (hash: leptyc1ArNcvItJ2wmbr4PCi0dhI2TNC9iUamda0cJ8=)
2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: TMoquc+UDti2PMOqTmoJfBvktKIu4rqgPz0aq2HgTQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:f4:6b:bf:f4:40:a5:6f:c7:12:04:ca:0a:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171
Validity
Not Before: May 13 23:00:39 2025 GMT
Not After : May 14 23:00:39 2025 GMT
Subject: CN=5fe77856ba242791513659a4542e30ef31eed58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:06:01:68:90:b5:8d:d6:d9:9d:56:84:4b:9c:
e2:c5:76:41:23:77:9d:69:8e:62:65:b2:c4:6b:0c:
bd:3b:7d:7e:46:25:c8:65:b1:70:4a:aa:1b:c0:1c:
ea:5a:e0:a3:a6:57:5f:c2:d1:7c:8b:c5:9c:9e:ff:
f0:38:01:c9:e8:86:f2:16:fb:9b:36:ae:85:e1:08:
13:42:df:ac:60:2d:5e:8c:38:71:44:60:a5:9d:54:
94:f1:c8:ba:f5:08:a0:91:26:79:d7:0a:15:7b:2d:
c7:cc:5f:69:02:f4:01:6c:47:51:ff:bf:ca:41:02:
8f:f5:98:5b:9a:e1:dc:2e:71:7b:19:1d:e8:94:c0:
00:88:cf:b3:74:4a:12:da:bc:09:6a:e0:bf:94:cb:
00:b5:72:42:7b:e1:de:c4:17:e6:bb:a7:4b:e4:e2:
8a:ff:e6:3b:f7:1d:69:69:db:35:56:4e:37:93:6f:
5c:13:6a:52:5e:cd:d5:b0:5a:e7:ac:87:87:d9:05:
30:cc:06:6e:8c:2e:d7:74:44:7f:12:ff:e4:20:d0:
cf:b5:83:db:4d:ad:70:97:fd:33:6a:43:d2:f5:b2:
f1:fb:44:af:00:5c:38:dc:43:d9:d7:02:fd:7a:a8:
be:48:eb:31:b7:d4:ef:a8:82:95:8b:38:7a:3f:f1:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E7:78:56:BA:24:27:91:51:36:59:A4:54:2E:30:EF:31:EE:D5:8D
X509v3 Authority Key Identifier:
keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3e:41:f3:2c:56:19:e9:f4:30:18:16:5f:ca:41:bc:6c:ea:
4f:83:b0:db:da:7d:75:87:81:4d:38:ad:3d:a5:54:67:0c:9d:
03:59:a7:9d:4e:59:50:5d:8f:d2:2a:cd:07:bf:81:5f:4b:41:
39:ca:85:66:54:6c:66:eb:a5:98:2b:82:96:ba:b6:14:42:6b:
e9:ce:ff:dc:f7:15:dd:d4:98:3e:05:a4:03:44:f3:4c:4c:70:
37:fa:b8:16:0f:72:e3:cd:9e:a9:2e:73:28:71:0e:b6:a6:55:
64:29:31:02:00:3b:c5:15:8e:1c:b7:5d:14:65:2f:e0:db:51:
e5:87:75:69:bb:28:1e:4f:fb:c4:05:b2:47:90:eb:53:18:76:
2f:e6:2c:eb:da:7a:58:99:e5:b8:dd:fb:5f:42:ad:20:b8:09:
7b:7c:1d:73:fb:eb:56:be:ed:73:bf:8b:e1:11:1e:9f:1b:1c:
5e:52:b2:75:35:b2:48:12:98:c5:88:fa:d1:30:a0:2e:a8:93:
90:48:4c:e4:0a:54:50:4a:fb:b9:95:1b:e0:5f:b3:32:81:42:
4c:ff:c0:9f:1c:f2:87:af:ca:f6:1d:24:08:a7:d0:bc:97:59:
28:f3:39:fe:9c:9b:30:d2:e1:b4:47:ac:c4:6c:a8:b5:20:96:
8f:b9:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:38:59 2025 by rpki-client