Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json)
Hash identifier: emDk5gEeORc8A1vh5HQZZdO6wMA09ThmUaqybbDQbYY=
Subject key identifier: C3:93:82:26:DB:4A:7C:67:C0:17:51:58:53:6C:37:E9:09:9B:FA:D7
Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Certificate serial: 01969D51171E264E4532122F6B72D891CE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
Manifest number: 11E3
Signing time: Sun 04 May 2025 22:00:59 +0000
Manifest this update: Sun 04 May 2025 22:00:59 +0000
Manifest next update: Mon 05 May 2025 22:00:59 +0000
Files and hashes: 1: AalZ3RZGPmVBPL8EbkB-YzwV1bA.roa (hash: xQN6NagFLnVfkOh0FRJ47TszfhI1OJXGBTnKGRr5AuM=)
2: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: g+2XlHToMbH2EkFMACzruMJggn7QGbigoHNmzIo5jAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:51:17:1e:26:4e:45:32:12:2f:6b:72:d8:91:ce:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3
Validity
Not Before: May 4 22:00:59 2025 GMT
Not After : May 5 22:00:59 2025 GMT
Subject: CN=c3938226db4a7c67c0175158536c37e9099bfad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:ab:41:e1:ed:f7:06:4e:60:63:df:b7:ed:
dc:2e:69:32:6f:05:7c:47:31:1c:03:58:c0:d7:97:
f4:da:d2:72:6c:6d:8f:20:c6:8b:2b:b8:72:5f:bc:
01:f3:74:64:49:a4:27:6f:3b:17:5c:df:af:2d:5d:
8a:5f:8f:8b:0e:bd:9c:ec:41:c1:da:f6:4d:ff:78:
20:a9:4c:7b:17:61:48:2f:01:d2:6d:f8:0a:27:7b:
e4:18:10:41:89:2e:59:aa:19:e1:63:85:db:99:16:
1b:5b:d7:57:87:ab:8d:dc:72:51:9a:d3:68:34:1b:
a6:da:af:25:56:90:d3:41:55:1c:a7:d4:8c:06:4f:
43:e5:01:2b:9b:3e:68:65:7a:ba:ff:1e:39:c1:c0:
df:66:3b:0f:d8:41:f7:03:77:ac:ed:6d:ae:aa:cf:
ab:89:ce:b1:c6:90:36:3f:6f:65:04:9b:07:64:2b:
b3:07:5e:1b:b3:7d:9f:e8:60:ce:90:39:d1:e8:e2:
05:ec:1b:f3:ab:e0:fb:a4:8f:e1:cf:a2:e4:e5:42:
81:84:53:cd:a4:b2:4a:ac:09:1a:fa:72:84:a4:96:
ab:bc:1a:bc:65:8d:0f:65:ef:f1:ff:c2:71:8b:f9:
69:90:44:5f:aa:96:f7:da:1a:ea:21:d1:bb:2e:de:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:93:82:26:DB:4A:7C:67:C0:17:51:58:53:6C:37:E9:09:9B:FA:D7
X509v3 Authority Key Identifier:
keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e5:fe:df:e1:f2:5d:4a:07:88:77:87:05:78:7e:a9:4f:8a:
7e:db:57:59:f2:53:a9:d5:e1:6f:84:62:30:5f:04:5c:95:1b:
d9:16:0d:93:40:8d:22:11:24:43:7b:fc:51:67:3b:c0:4f:b9:
89:ea:ed:b2:99:cb:e2:61:00:9d:59:c0:fd:6a:47:ca:92:ff:
19:d4:55:fa:4a:2d:2e:f2:ae:99:b0:50:e0:9e:13:4b:93:6f:
c4:d5:be:d5:f7:cd:ae:8a:9b:29:5e:f7:f1:ac:cc:e8:07:f0:
cc:ed:cc:45:92:36:4d:06:0e:c0:80:87:e5:4b:85:7d:c0:d7:
46:eb:86:a4:84:90:28:c8:11:e7:32:85:9d:cc:6c:fb:a4:27:
3d:31:f6:2e:18:13:18:3a:19:0a:1d:db:7f:0b:9e:6f:37:d9:
11:43:42:00:e8:d1:a1:5a:f7:63:3f:5d:a8:f0:64:d1:47:c9:
18:9b:b8:cf:3a:a5:0e:b5:29:23:70:eb:47:39:fe:82:58:90:
87:4b:46:ae:1e:51:44:9e:38:6f:ce:da:e6:8a:35:52:d5:ba:
34:eb:c3:42:6f:75:39:f0:6c:7e:3a:76:98:3a:87:7e:59:e5:
0b:6d:08:ac:96:d6:d8:77:db:0b:8f:7e:9f:a3:ef:f8:78:1c:
ef:e6:a7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:20:41 2025 by rpki-client