Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
File: zJxBoSN2TPfcDy25hB9zKjuWE0M.mft (raw, json)
Hash identifier: ATYih+9njQZ1MJPXV6NeKzkk0z13koIj9NHsaNLQDtY=
Subject key identifier: AA:E7:A0:F7:2B:A3:B0:E0:AE:A8:E2:15:30:1B:DC:60:AB:AD:C0:E0
Authority key identifier: CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
Certificate issuer: /CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Certificate serial: 0196B7B4FF7F7A96170CB688BC073BBAA3A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 01:00:14 +0000
Manifest this update: Sat 10 May 2025 01:00:14 +0000
Manifest next update: Sun 11 May 2025 01:00:14 +0000
Files and hashes: 1: B8c-KiiuWVbKdd6Eyr8wAePUEWY.roa (hash: 8i+mj8IGmve8qUZWFCAwe3JPzP0zTBzNHkZJDJW66Pg=)
2: zJxBoSN2TPfcDy25hB9zKjuWE0M.crl (hash: uuTq60VOWnnxJ30Nd2hpWvwWVLRwQ1z2FIhv07nncIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b4:ff:7f:7a:96:17:0c:b6:88:bc:07:3b:ba:a3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9c41a123764cf7dc0f2db9841f732a3b961343
Validity
Not Before: May 10 01:00:14 2025 GMT
Not After : May 11 01:00:14 2025 GMT
Subject: CN=aae7a0f72ba3b0e0aea8e215301bdc60abadc0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:a9:9d:ee:3c:11:5f:4c:7b:27:dc:e3:9f:
1d:a2:aa:b2:8d:78:35:00:ee:aa:a7:85:8a:c1:cb:
e9:5a:67:cc:c1:09:47:f1:b7:ab:81:41:a4:2b:28:
e1:e6:ea:68:da:ed:3b:06:75:e0:2b:76:45:ad:c4:
ef:1a:57:0e:38:99:a4:b9:a6:09:f2:29:c8:58:50:
2d:76:3c:eb:6b:52:60:37:51:99:ac:41:f8:5e:7b:
6c:9c:64:1b:64:af:3b:37:e3:7a:8e:cb:37:da:a2:
97:a8:be:39:40:12:d0:77:fd:c1:84:6f:52:c6:17:
b8:a0:e0:21:01:4b:44:f2:7b:7f:0e:f5:31:47:fc:
24:40:98:e3:3b:31:13:27:b4:49:1b:07:39:c8:36:
92:c1:e2:9c:f4:90:d9:1e:01:18:1a:da:0c:28:f2:
2e:da:1c:67:8f:4a:0c:e4:d5:50:98:38:a4:9a:42:
f5:f2:60:a3:71:4b:b3:e4:92:ac:4b:23:f4:77:9d:
65:ee:34:2f:8d:2c:bc:8a:bc:68:90:5d:9c:ba:eb:
50:9b:cb:e0:8a:3c:07:7c:41:4b:b4:c2:b0:52:cf:
f5:90:dd:25:7c:41:2e:61:6d:ef:a2:0e:6f:52:3b:
77:84:f5:73:f3:9e:b4:e9:12:16:9c:00:c8:31:55:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:A0:F7:2B:A3:B0:E0:AE:A8:E2:15:30:1B:DC:60:AB:AD:C0:E0
X509v3 Authority Key Identifier:
keyid:CC:9C:41:A1:23:76:4C:F7:DC:0F:2D:B9:84:1F:73:2A:3B:96:13:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJxBoSN2TPfcDy25hB9zKjuWE0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0feb89-7d8c-4300-99b5-06247a978d69/1/zJxBoSN2TPfcDy25hB9zKjuWE0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:86:0e:91:17:9d:05:91:4e:d6:a9:4b:01:9d:82:db:2a:8c:
cd:b5:1d:e7:e1:7a:0f:ab:63:67:e2:09:0d:c1:be:05:b3:5f:
b5:87:a8:be:68:7b:42:44:85:0b:9d:92:e7:c8:bd:c0:de:ac:
fb:28:e2:a1:e7:02:e1:eb:2a:0c:c5:9b:68:3e:1e:62:21:24:
f3:83:2b:e4:09:e0:3a:2b:f7:57:55:92:39:9b:b2:d4:cb:38:
c3:d3:8b:b9:66:c9:e5:34:1f:5c:13:1f:d2:26:fe:31:fa:c9:
f2:e9:94:94:05:00:d7:54:aa:18:77:bb:25:51:49:12:1f:2f:
d2:a2:23:39:a6:a0:37:55:c3:3e:92:31:08:d5:42:56:4a:25:
47:67:2f:c8:49:1c:44:99:34:35:29:6f:20:6b:fc:f4:d6:d3:
91:6c:5d:b4:01:46:af:1f:de:69:41:b8:e6:0e:7f:77:d6:77:
59:c1:95:36:2f:52:6d:27:05:9d:c4:0f:97:3d:8d:cf:67:f3:
34:50:51:f9:17:00:0c:35:a5:f0:b9:65:1b:dd:88:01:b8:ee:
19:d9:c4:a5:3e:73:f0:60:45:93:13:e2:5f:32:b8:52:53:e0:
dc:6f:1f:00:bc:f7:bb:57:40:2f:1a:99:fb:11:ec:38:ad:e0:
c5:92:f1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:06:04 2025 by rpki-client