Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
File: zxhBQM0aIj9ji3mW9UifSF2O5ic.mft (raw, json)
Hash identifier: e0whFu4F8jx9W+5nHpWa+CAShozaVMa8wnbW66fS5c4=
Subject key identifier: C5:74:4B:81:E4:03:3C:26:AC:4B:09:B0:BD:A9:FC:B3:7A:BD:42:D8
Authority key identifier: CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
Certificate issuer: /CN=cf184140cd1a223f638b7996f5489f485d8ee627
Certificate serial: 0196C4273A940CBA9113F6E48AC6756B57CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
Manifest number: 04A9
Signing time: Mon 12 May 2025 11:00:27 +0000
Manifest this update: Mon 12 May 2025 11:00:27 +0000
Manifest next update: Tue 13 May 2025 11:00:27 +0000
Files and hashes: 1: FnA6f4DOd265nGzqUSApRurvL20.roa (hash: CKai/Ita+qQk4qWCNkCUXx6BxPFuVd8UKoy7z8Mf368=)
2: zxhBQM0aIj9ji3mW9UifSF2O5ic.crl (hash: 7YTfqrmoG19aIIHStfZ82L/x9zPyJZz2fck7VuJeWvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:3a:94:0c:ba:91:13:f6:e4:8a:c6:75:6b:57:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf184140cd1a223f638b7996f5489f485d8ee627
Validity
Not Before: May 12 11:00:27 2025 GMT
Not After : May 13 11:00:27 2025 GMT
Subject: CN=c5744b81e4033c26ac4b09b0bda9fcb37abd42d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:53:d8:3d:38:4f:27:7b:d4:ac:81:3a:44:
4c:6a:a2:97:9c:e8:99:dc:aa:2c:8a:cd:1e:a0:28:
0b:75:8c:1e:13:5a:a6:66:ee:72:d4:44:5b:bc:96:
c7:31:13:66:ab:ff:15:e1:61:36:62:5f:90:15:81:
9a:0a:02:de:60:f8:5f:aa:2a:03:57:aa:5b:55:8f:
71:d3:f3:42:a6:12:88:b6:6b:3a:9d:9c:6a:f7:32:
57:49:45:3e:29:c4:e8:a8:b5:5c:28:e0:cc:5e:cb:
11:df:07:52:26:73:6c:f6:b3:7f:51:4c:95:3e:d9:
d5:82:8e:92:69:a1:42:56:1f:82:54:1b:82:11:02:
c0:da:65:a3:d3:93:ec:5e:7c:19:a0:8e:f5:33:aa:
b7:e5:49:c5:3e:3c:c6:96:42:fd:66:1d:94:09:da:
58:f6:4b:f4:35:63:c6:0f:33:e7:2f:5a:4b:ce:42:
01:36:a7:2f:d3:0f:b7:89:9b:2c:74:a8:3c:8a:96:
0e:4b:57:de:81:d3:49:da:f9:48:da:49:c4:23:be:
9f:7e:e4:22:36:3d:b9:0f:72:58:ee:0f:9d:f6:41:
12:88:b0:a1:59:0a:e5:38:ca:84:f7:51:47:58:cc:
05:05:06:17:9c:c4:dc:9e:96:f3:1d:22:b0:4c:df:
1e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:74:4B:81:E4:03:3C:26:AC:4B:09:B0:BD:A9:FC:B3:7A:BD:42:D8
X509v3 Authority Key Identifier:
keyid:CF:18:41:40:CD:1A:22:3F:63:8B:79:96:F5:48:9F:48:5D:8E:E6:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxhBQM0aIj9ji3mW9UifSF2O5ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/07bf29-07d1-4daf-b3bb-cbfb2c7fbadd/1/zxhBQM0aIj9ji3mW9UifSF2O5ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:17:15:a8:b6:db:5e:c7:e9:96:69:fc:63:45:cd:da:45:d0:
df:c5:59:9d:6d:b6:d4:22:16:42:f1:8c:56:3e:8d:b7:25:77:
48:00:ab:d7:7e:16:86:96:83:ce:96:5d:e7:bd:85:0c:b4:f7:
b2:9a:1f:9d:c7:61:5c:7c:f9:85:97:c4:51:7c:8b:83:6e:93:
f6:82:31:41:34:f5:6c:fb:e9:a8:9f:d0:4d:37:97:a5:da:8c:
0c:fe:27:77:d6:94:71:ce:5b:c8:6a:5b:dd:12:ab:f6:b1:fd:
34:39:5d:4f:16:5e:69:c3:8d:3b:0f:00:34:b2:41:b8:3c:19:
e6:86:be:95:b7:b7:9f:99:29:a8:84:e4:ab:44:df:b5:f9:00:
23:bc:c9:6b:d4:47:07:12:50:a5:38:91:36:9a:d1:89:97:52:
95:75:1a:1b:bc:f0:ff:a7:df:e9:a8:72:6c:c3:48:bd:9d:5a:
54:57:02:58:cc:91:1f:2a:bc:7f:fe:79:52:fd:78:65:f0:9e:
37:c6:51:a7:5e:4a:6b:a2:4e:4e:31:1d:a3:f1:c8:43:22:df:
85:9c:ab:9d:ca:a3:db:d7:f5:65:0c:20:ad:59:72:77:11:c7:
d1:d3:d0:d9:3f:df:e2:35:06:b2:24:a8:f1:35:c8:40:e2:9f:
cb:c7:4f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:51:01 2025 by rpki-client