Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: QHOglZLlCjnKD1zpti+muaNGLvG4YlgDFY80PrHnG8w=
Subject key identifier: 31:77:6C:FA:C1:02:DA:D8:13:54:AB:87:8B:91:76:4F:99:B3:B3:14
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 01969E9A49FBD0B0D77386B57CA52736E521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 14B6
Signing time: Mon 05 May 2025 04:00:33 +0000
Manifest this update: Mon 05 May 2025 04:00:33 +0000
Manifest next update: Tue 06 May 2025 04:00:33 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: a/yc+WD+BLrfppShuJ5jfbjiF6+Os7PAnmCD0hCjicE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:49:fb:d0:b0:d7:73:86:b5:7c:a5:27:36:e5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: May 5 04:00:33 2025 GMT
Not After : May 6 04:00:33 2025 GMT
Subject: CN=31776cfac102dad81354ab878b91764f99b3b314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:d1:5d:91:02:8b:f2:27:bf:e9:2a:00:e4:
77:18:05:63:dd:07:31:3c:0c:2c:98:32:6d:43:8f:
77:51:37:f2:af:7b:cb:ae:d6:d4:1d:c8:b6:4f:df:
9f:6a:aa:cc:ae:dc:c3:33:34:57:04:ee:d4:f2:3f:
d6:a0:4a:bd:dc:4c:46:f3:60:cb:76:61:a7:dc:b7:
fc:59:3d:db:6e:15:d0:75:e0:51:4c:b7:1c:84:4f:
2c:cc:3d:dc:4d:88:74:e1:53:d5:37:10:fb:bb:b5:
ea:f7:87:93:26:a0:fd:23:96:5c:f9:da:02:e5:85:
31:68:8a:d9:37:96:b7:55:78:b7:d0:e0:ba:43:cd:
2d:22:3f:59:86:42:d4:69:49:7f:01:3e:54:f1:fb:
d9:ba:01:e6:6f:17:aa:d4:ba:4f:ac:b3:ce:22:13:
c4:15:e9:ce:65:3b:7b:43:79:77:29:12:e5:08:57:
ff:26:a7:da:f8:86:da:79:d4:e0:f8:f2:4b:ca:e7:
60:7c:66:65:9e:58:17:88:04:22:52:75:00:0d:25:
8d:eb:32:5d:87:68:d0:03:26:f2:de:a7:d7:62:37:
50:9c:f1:90:04:f1:97:d3:f4:37:35:63:8d:be:a9:
17:43:40:6c:d0:d7:3d:61:6c:2d:f3:b1:86:91:bf:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:77:6C:FA:C1:02:DA:D8:13:54:AB:87:8B:91:76:4F:99:B3:B3:14
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:13:58:57:a1:d1:9e:c6:c7:19:ca:80:d1:f1:66:71:55:35:
b6:d6:9d:c1:db:80:a5:b2:70:f9:ee:d8:e6:06:92:e8:af:d1:
6a:97:f9:40:58:8b:5d:19:0e:52:90:61:93:c3:1b:32:a8:8c:
eb:73:79:5d:f5:37:07:85:57:71:15:58:fd:2a:e0:df:f6:51:
82:15:f0:28:69:22:5c:fe:df:8b:38:85:46:94:5c:37:36:45:
34:a8:9e:34:fc:7a:9a:97:31:6e:82:5f:e1:1c:4a:42:1a:46:
88:38:c7:cc:ed:ac:cf:58:a8:68:01:a5:ba:41:26:68:b3:60:
29:23:2f:56:2c:67:34:1c:76:1a:e0:47:e9:de:fe:6e:ff:70:
97:1a:a6:63:2c:4b:c8:71:80:13:5b:a7:8d:93:a3:da:67:ed:
68:93:9f:3b:33:e5:9c:1e:d9:37:ed:30:35:c8:fc:df:ec:ce:
9a:d3:66:b6:74:17:a5:c8:a7:06:b9:c2:88:25:fc:09:a0:04:
bb:38:bf:b9:3c:dc:17:6b:d5:0f:cc:38:6d:42:10:f5:e4:fb:
05:cf:a0:f4:fc:af:c0:f9:ef:d2:54:08:ad:06:d0:24:b6:a8:
8d:9b:6d:83:39:3f:0f:de:64:9e:e6:12:fe:eb:88:e6:8d:d9:
39:92:b4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:36:16 2025 by rpki-client