Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: vSj94lq4MLwAzZJb4PatktjCnS83/a9FqG9VpZEN5bs=
Subject key identifier: 5B:1C:38:52:E8:FF:93:E8:5A:17:EA:75:B8:8F:23:A2:AB:5E:B6:A0
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 0196C2DDF82C76B3B80E2FD6F4E616231F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 02F7
Signing time: Mon 12 May 2025 05:00:48 +0000
Manifest this update: Mon 12 May 2025 05:00:48 +0000
Manifest next update: Tue 13 May 2025 05:00:48 +0000
Files and hashes: 1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: Z60cC3LvHvOQxMxRb9vxpghLbjiqEgdRoQRNPSdQm0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:f8:2c:76:b3:b8:0e:2f:d6:f4:e6:16:23:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: May 12 05:00:48 2025 GMT
Not After : May 13 05:00:48 2025 GMT
Subject: CN=5b1c3852e8ff93e85a17ea75b88f23a2ab5eb6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:bc:6e:33:5d:d3:b3:6c:33:56:b7:b5:a8:
64:46:3f:29:b4:b3:23:c9:19:f6:c1:6a:78:f8:c9:
72:6a:2a:66:8c:d2:1a:ad:bc:a2:7d:f7:d1:03:62:
c0:03:bc:eb:78:eb:a1:12:40:61:81:2f:18:cf:65:
a7:b5:b8:bf:60:d6:f7:5e:0d:7e:71:42:0d:cf:b5:
47:5f:63:d4:cd:44:b0:f9:f5:fb:ed:3f:30:5d:bf:
23:02:56:1d:3f:ad:0c:eb:eb:ac:e7:ab:d2:57:55:
4a:f4:22:16:75:39:18:ce:c1:bd:54:0a:d9:8d:56:
6f:c4:8f:f0:de:e1:32:4d:5a:74:95:8a:38:bb:c0:
f6:c3:2e:22:24:26:99:bc:8f:7a:f2:df:59:5a:b4:
89:be:0e:69:44:c9:12:f5:2b:f8:2e:04:aa:76:f2:
7c:db:60:df:d8:c2:19:4b:a5:07:da:71:32:f4:6c:
e6:6a:ff:50:57:b2:9c:8d:26:45:d5:c0:cd:5a:70:
b1:ac:71:cb:2b:4b:fa:2c:73:eb:86:2c:4b:79:12:
ce:6f:9a:0e:87:0b:33:91:0b:35:72:96:65:67:b1:
5b:c0:9b:ac:13:9b:7b:be:2a:c5:47:82:1d:eb:fb:
5c:f3:f3:5e:4c:d2:45:39:3d:10:f4:4c:e0:ba:d1:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:38:52:E8:FF:93:E8:5A:17:EA:75:B8:8F:23:A2:AB:5E:B6:A0
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a7:45:07:0c:87:ea:5d:af:4b:21:2c:3c:af:a5:82:4b:84:
4c:f9:3f:cc:1d:7c:87:1e:ac:35:8d:7e:fe:3f:8d:78:4b:aa:
c0:ce:4a:0d:da:8d:23:27:b8:de:50:5b:c0:45:da:71:d0:59:
57:84:fd:5b:06:67:c0:26:68:90:0a:69:eb:09:1d:a6:3b:fb:
68:0b:1b:87:6c:f9:f7:46:8b:53:f1:b9:25:00:bd:f2:51:d1:
cf:1f:33:98:8a:f1:a0:61:54:42:53:0b:eb:b8:a1:2c:08:09:
81:8b:d7:b0:b3:09:e6:ff:37:6f:ca:5b:15:ad:7f:ae:88:d3:
cc:85:b6:5b:ea:e8:9b:80:c0:66:5b:ce:8c:27:b0:c3:38:cd:
e3:5c:4d:2c:55:b9:b8:8f:f8:34:a6:27:7f:81:f6:e4:d4:32:
d4:14:80:58:63:9f:bc:8d:f4:cb:df:12:23:16:cb:4a:37:1f:
be:3c:51:b5:d3:e1:2c:2e:3a:c4:8d:4b:37:f2:8f:57:79:d4:
dc:4f:2d:e5:47:65:81:2c:48:e0:5a:02:23:0e:b5:d2:29:a7:
5c:2c:bd:7e:04:32:e2:b6:9a:4f:f7:38:ea:26:07:d2:cf:3f:
26:a7:66:e8:a4:b8:00:47:47:b4:70:ce:0c:59:48:76:9d:e8:
1f:e2:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:47:51 2025 by rpki-client