Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
File: ZSXYt_GeL7dct_lXidkRj2sblwU.mft (raw, json)
Hash identifier: eSPy585FmuMIy1eMB7hHcpIyQGdzlEeTGqp4U9mgb/0=
Subject key identifier: 1C:AA:8B:16:34:3D:33:5C:5B:D8:24:33:FA:B0:0D:DF:1E:CD:0D:7E
Authority key identifier: 65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
Certificate issuer: /CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Certificate serial: 0196B1E9F3D8E712D18B24D8D827DC2325DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
Manifest number: 0A81
Signing time: Thu 08 May 2025 22:00:21 +0000
Manifest this update: Thu 08 May 2025 22:00:21 +0000
Manifest next update: Fri 09 May 2025 22:00:21 +0000
Files and hashes: 1: LsPOYMRIkwCviikK1SggYlQsE6c.roa (hash: C4ntpCFi4UgQNTh+MTX375uysoH85gdlFAEV6hZ2Gtw=)
2: ZSXYt_GeL7dct_lXidkRj2sblwU.crl (hash: 3xYGm/ezfJip3TFdfBDgfWYDuqKAQMTPuVJ11Qm8f88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:e9:f3:d8:e7:12:d1:8b:24:d8:d8:27:dc:23:25:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6525d8b7f19e2fb75cb7f95789d9118f6b1b9705
Validity
Not Before: May 8 22:00:21 2025 GMT
Not After : May 9 22:00:21 2025 GMT
Subject: CN=1caa8b16343d335c5bd82433fab00ddf1ecd0d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:fa:92:4e:8a:92:bc:bf:70:f0:cc:4e:3e:
79:d6:ca:91:b7:1a:4c:57:77:96:d6:84:50:8e:2c:
29:5e:5d:e9:e9:75:82:02:74:6e:90:80:89:b9:fb:
61:7c:e4:fb:11:35:c1:82:1b:b4:dc:c9:44:0e:70:
22:34:75:97:fc:ae:3a:6a:9f:91:44:04:62:36:e6:
87:59:4e:49:04:07:04:3b:5e:07:5d:92:4e:3b:27:
ba:17:e1:42:9f:70:49:82:ce:fa:96:2b:80:fa:35:
3f:56:8e:e8:c8:4b:58:39:67:b8:a5:0d:2d:26:bf:
c7:eb:3e:90:24:a7:6c:52:4d:f8:8f:3c:be:bd:3f:
a8:e8:c9:6d:b8:e8:6c:d1:7e:3f:a4:1c:b3:66:74:
18:2f:2e:50:50:00:10:ea:b4:31:7d:92:ef:fb:cc:
be:f5:85:75:66:bb:66:80:67:4c:3c:64:dc:3c:29:
8f:14:86:cf:f3:87:66:36:50:42:99:c9:7e:dc:da:
50:5d:02:68:f0:fc:06:3b:fb:bb:6b:c4:1b:87:ed:
97:26:9f:a8:98:05:31:73:c8:3c:a4:cb:3e:e4:62:
ff:a5:31:17:22:e0:47:73:ac:a2:80:dd:ae:0f:fb:
f4:d5:e6:03:13:b0:ce:ab:83:17:86:8c:5d:7e:dc:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:8B:16:34:3D:33:5C:5B:D8:24:33:FA:B0:0D:DF:1E:CD:0D:7E
X509v3 Authority Key Identifier:
keyid:65:25:D8:B7:F1:9E:2F:B7:5C:B7:F9:57:89:D9:11:8F:6B:1B:97:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSXYt_GeL7dct_lXidkRj2sblwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/caa385-b2a5-4323-adc5-46603de805ec/1/ZSXYt_GeL7dct_lXidkRj2sblwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b3:5e:4f:fa:1a:73:d4:24:f7:23:c6:37:aa:74:53:32:25:
5b:1b:b6:1b:28:c7:a6:5f:42:ab:6b:39:6b:46:79:db:c9:d0:
c2:31:7e:4a:4f:e1:08:25:a1:7a:84:a9:4d:f5:c8:c4:49:26:
db:ba:98:b0:ca:b7:3d:72:55:87:10:6f:f7:ef:e3:66:8d:d3:
ac:eb:58:be:08:c9:a4:33:eb:76:ed:5d:07:03:93:8d:b7:15:
a5:fe:02:6a:da:e5:8a:5c:e3:79:1a:46:24:7f:0c:1b:f9:66:
bc:fe:b1:cf:63:6d:d7:ac:ae:7e:70:ab:30:a1:2f:f9:ec:12:
9b:c8:e8:88:3f:97:f1:1c:fb:ca:06:6c:84:ae:d1:e5:b3:ef:
43:4d:1e:1d:b1:0c:b1:06:81:d1:bd:51:c5:d9:23:8f:07:2d:
92:f9:97:a8:58:30:65:e1:7d:31:79:24:14:09:fc:f5:16:e6:
91:c8:a9:f3:84:1d:e1:61:02:26:fb:22:50:f7:56:88:34:76:
4c:4c:cd:96:30:e5:65:67:11:b3:51:8e:50:c6:5f:b9:18:33:
16:94:30:f5:5a:4b:95:e5:b6:60:03:35:06:98:c9:33:dc:b2:
68:64:ef:aa:c6:cb:06:60:fc:29:74:55:4e:08:52:ec:9f:47:
d9:98:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:58:43 2025 by rpki-client