Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: 6afwzQI9pVYri7vOevfdobcKXBUzCNUQfWtUHZ1KJSg=
Subject key identifier: E4:5A:AF:FC:8C:39:FF:EE:D2:B8:EA:5E:56:B6:64:08:81:6B:D9:41
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 0196CACE6D005270B9A4554CCEDD9B13BB83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 0A00
Signing time: Tue 13 May 2025 18:00:47 +0000
Manifest this update: Tue 13 May 2025 18:00:47 +0000
Manifest next update: Wed 14 May 2025 18:00:47 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: N7AjloCI9MxW+6g149+XSfxx8JAUOCYyba9fd0ol7lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:6d:00:52:70:b9:a4:55:4c:ce:dd:9b:13:bb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: May 13 18:00:47 2025 GMT
Not After : May 14 18:00:47 2025 GMT
Subject: CN=e45aaffc8c39ffeed2b8ea5e56b66408816bd941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:2d:eb:21:ed:9a:d2:56:4d:88:c2:14:9c:
52:63:e3:00:84:1f:0a:28:2d:fb:33:54:4b:a0:a0:
74:5c:82:e3:f5:b5:35:e3:d0:4f:f6:dd:1a:d3:0d:
2b:62:22:e5:5c:e6:6f:4e:93:b5:53:a1:c7:d1:c9:
91:ed:fe:01:43:ce:03:c4:76:1d:2c:7f:5c:28:c3:
fa:71:47:ac:ab:a0:91:38:fc:62:47:27:f1:ca:c8:
de:36:1d:0a:2e:1d:36:7f:fe:26:48:17:a9:7f:1e:
08:3c:93:d1:57:8a:2c:14:de:e6:2e:f1:e1:48:59:
41:39:3c:47:15:88:0f:53:d4:87:57:02:d5:41:78:
c9:31:43:4a:a1:13:e2:b7:72:77:98:3f:4e:31:cc:
e8:d1:17:ac:8d:48:ee:24:7e:2d:14:d5:21:9b:c9:
c3:2f:72:36:7d:f8:2a:65:5f:e5:2d:6a:7e:ae:96:
ad:f6:d7:de:b9:9a:7e:c2:7d:f7:5a:b7:b5:81:d1:
1a:88:a8:4a:2c:70:ee:be:d1:8f:ea:cc:2c:b0:d8:
82:95:5a:af:14:84:fd:9a:3b:e4:4d:af:82:eb:3e:
b2:36:ed:44:8a:35:0f:d8:df:e1:da:51:ba:32:93:
f7:a5:93:cf:27:e5:d0:48:37:dd:e3:0c:07:0c:d1:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5A:AF:FC:8C:39:FF:EE:D2:B8:EA:5E:56:B6:64:08:81:6B:D9:41
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6d:16:71:75:5c:71:31:e0:a9:63:c4:87:06:92:80:8f:27:
75:72:17:bf:7e:7f:e6:54:84:24:51:6f:77:db:4d:5f:e9:22:
be:2e:aa:ef:ad:7b:82:35:be:b9:ca:89:99:07:3c:c9:40:db:
bc:c8:a4:b0:c3:2c:fe:ad:7f:4a:7e:eb:a3:c9:d6:56:4c:d4:
1c:81:dd:88:c4:42:c1:82:1d:c3:a4:f4:3d:5f:ce:5f:48:96:
c7:e3:d0:a1:c5:b5:e0:d5:2d:be:ce:51:6f:90:b5:00:97:bd:
7f:e1:3f:9b:c4:14:f1:3a:cf:93:fd:70:6e:2f:bf:f7:f6:ed:
8b:d8:e4:6c:97:06:73:97:b2:3e:8a:de:e7:cf:e7:aa:c3:47:
58:a7:8f:51:a3:8d:5b:d9:48:93:f2:bb:3d:78:16:7f:f5:e9:
49:c4:c3:1b:53:c0:dd:62:cf:10:eb:83:27:62:09:b4:70:64:
e0:4c:2b:77:38:4a:4e:31:5f:18:69:51:42:9e:3f:20:8c:b8:
39:aa:14:a6:22:aa:1e:1c:f4:ad:f4:4e:f4:df:20:91:36:5a:
ed:c1:43:a8:d5:99:df:aa:9b:7e:78:a6:8f:ea:37:37:5e:9f:
15:d0:56:32:27:1e:e5:3b:81:d9:1c:83:d9:d4:9b:7f:ad:29:
cd:37:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:47:23 2025 by rpki-client