Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: KdsK974FL8k4T9Jy38DUTTqeS+yWvfuhD7aeSzoOj2Q=
Subject key identifier: 7B:C4:B0:11:C5:2F:E1:FE:C6:B2:58:83:89:59:6F:BA:3E:F1:4B:A5
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 0196C7CD70671107AC6EC3ADC08FDBBB8B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 0327
Signing time: Tue 13 May 2025 04:00:51 +0000
Manifest this update: Tue 13 May 2025 04:00:51 +0000
Manifest next update: Wed 14 May 2025 04:00:51 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: hyjSW/YiOC4YZoSHcA4G419V2rIi+igkZIia7lY9Eeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cd:70:67:11:07:ac:6e:c3:ad:c0:8f:db:bb:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: May 13 04:00:51 2025 GMT
Not After : May 14 04:00:51 2025 GMT
Subject: CN=7bc4b011c52fe1fec6b2588389596fba3ef14ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:bd:92:9d:4d:19:1e:28:47:07:80:99:37:
6e:64:f9:ae:5f:09:5b:28:da:14:34:e7:a9:8b:ac:
5d:e9:fd:aa:9c:9b:e9:81:b1:14:6c:1c:6a:cc:87:
7b:0a:b2:2d:f6:f8:9b:b4:27:05:cc:a2:f5:c8:86:
37:6a:2f:90:69:19:14:da:c9:18:4f:d7:7e:8c:be:
2b:cb:cf:af:04:00:c4:6a:6b:81:e5:70:4f:56:6f:
cf:c7:ef:29:be:3a:f4:99:b2:3a:dd:a7:22:34:3c:
c7:ba:1a:d2:98:18:72:81:00:95:62:8d:5d:60:e0:
15:b0:3d:28:21:ff:18:2b:71:f4:fe:0b:cf:82:1f:
8e:94:8d:23:68:5e:7d:f3:a0:d8:87:e1:10:08:82:
cf:da:85:87:90:32:7a:91:13:7b:f5:78:f7:f2:03:
25:12:bb:de:dc:50:a9:74:52:3e:1f:a4:ca:e4:69:
6a:03:a0:7f:4a:bc:ca:83:19:db:92:3a:a2:0b:59:
60:05:36:b7:de:09:e1:ff:6c:1e:d8:fe:d1:34:9b:
b5:61:2e:ba:d5:48:b3:6b:00:d6:2f:a2:0b:ba:e2:
21:25:a5:0e:81:5b:14:c1:60:de:7e:62:06:bb:84:
26:5a:58:ce:c1:10:d1:9c:10:b0:3e:49:19:21:cb:
50:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C4:B0:11:C5:2F:E1:FE:C6:B2:58:83:89:59:6F:BA:3E:F1:4B:A5
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:01:61:98:9d:a7:8f:c5:5a:26:1e:c6:74:41:ba:b5:11:c4:
f0:6d:ea:6c:11:2b:d0:7d:c0:5f:bd:72:7f:16:6d:5c:b4:85:
cd:61:ef:7c:2c:f1:92:05:67:93:88:0b:ce:fa:93:a2:67:e0:
da:d0:3d:34:b9:a4:25:fa:83:41:6d:d5:36:ae:8e:f4:86:ba:
a7:2e:38:96:81:12:97:90:c8:87:41:2b:74:f4:84:d1:9a:1a:
0e:b0:33:ce:93:f2:4e:af:8e:97:e2:8a:d1:4b:10:d3:9a:f6:
e6:4e:34:b1:01:2a:26:84:d0:78:b3:32:15:85:fd:e8:e3:82:
55:7b:22:27:2d:4f:11:f1:72:41:d9:d4:06:f7:e2:d3:af:0b:
d1:9b:6a:c7:4c:c9:67:e7:c7:fa:e5:57:3b:4a:1a:73:f0:79:
c1:65:5e:ab:f9:81:b8:0c:33:98:5a:3a:4a:2b:b6:20:51:d2:
09:6a:8b:31:7b:ad:c1:28:74:64:70:60:70:77:1f:25:23:f6:
49:21:28:5b:b3:6d:91:b6:2f:8c:d4:16:63:dd:27:5e:64:59:
a8:1d:0f:5c:1c:4a:ab:3f:d1:2b:d1:a4:1a:ca:1f:62:56:97:
7c:15:c7:a7:94:9f:e1:9c:8b:9c:89:e8:78:21:fc:a0:71:0c:
35:20:4a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:28:31 2025 by rpki-client