Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.mft (raw, json)
Hash identifier: fyoRYyR+iODJLkdxjzcx4V47n7wwwr8Sh9CORCHaSAQ=
Subject key identifier: 6F:9A:46:23:7D:8A:05:43:22:43:C3:1C:67:1C:99:9B:CE:38:DB:1D
Authority key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Certificate issuer: /CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Certificate serial: 0196C314753133EE5FC08211E63FEDF7A9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
Manifest number: 04EF
Signing time: Mon 12 May 2025 06:00:19 +0000
Manifest this update: Mon 12 May 2025 06:00:19 +0000
Manifest next update: Tue 13 May 2025 06:00:19 +0000
Files and hashes: 1: kXpu7lVaQ9ZKyQqNGsFeLghZlmk.roa (hash: 5AG9No2Gmu6sX+Z3CUtVryFAua3rZfXlsvQoqxyaRko=)
2: zTzXxNyVyz4NTocD7wFAT-CnB4A.crl (hash: RVPK/EOYJKrFLhz/gHX3tTLJaccpkSiGXNVEPtUddts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:14:75:31:33:ee:5f:c0:82:11:e6:3f:ed:f7:a9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Validity
Not Before: May 12 06:00:19 2025 GMT
Not After : May 13 06:00:19 2025 GMT
Subject: CN=6f9a46237d8a05432243c31c671c999bce38db1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c5:d2:1e:39:a4:6c:35:cb:09:1d:30:65:a5:
11:d7:80:fb:fa:d8:1e:a6:32:6f:dd:7f:17:7b:18:
14:bf:87:c0:23:c5:b0:51:a6:2f:e9:bf:3f:8b:67:
0c:41:55:27:84:67:ad:87:8c:ae:82:52:2d:45:43:
60:88:49:4a:df:f2:6b:ba:99:c5:08:b5:eb:23:40:
df:f1:ec:fa:47:77:78:0c:e5:0a:a1:ac:3a:3e:af:
f5:c8:0f:02:9b:2d:62:f5:d3:10:3e:89:12:9b:83:
4b:a3:8c:6a:7b:94:27:e9:26:04:55:19:33:b3:77:
f5:fb:f1:08:5d:4a:a1:08:c4:9d:87:e5:c8:12:f2:
74:c7:1b:9f:27:9d:c2:e9:b1:e2:00:79:a6:e7:d8:
96:3c:a0:4d:62:a3:63:d6:12:d5:cb:26:76:e8:9f:
d1:19:44:80:e3:46:27:57:6c:6f:0c:42:88:f1:8c:
c8:da:2f:14:53:8d:70:16:3d:93:68:11:d2:33:7d:
64:3e:f9:68:77:11:bd:e2:fa:8f:eb:df:3e:d7:70:
da:7b:25:f6:39:e4:e8:b6:bb:c3:31:5e:87:fb:b5:
41:67:4e:23:c9:20:8b:f1:b4:7a:a5:e9:78:cf:69:
87:70:2a:33:3b:67:7e:81:c2:76:b6:0a:89:33:99:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:46:23:7D:8A:05:43:22:43:C3:1C:67:1C:99:9B:CE:38:DB:1D
X509v3 Authority Key Identifier:
keyid:CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:25:8d:ab:e5:76:b4:c9:ea:fc:35:51:15:a0:8b:7d:4d:13:
7e:6b:96:cf:9f:5b:76:0b:c6:a5:30:43:71:2d:0c:b4:01:be:
f0:90:e5:55:ae:50:69:cf:e9:3a:0f:18:6f:94:39:d3:14:60:
1b:57:c2:ab:e4:7a:58:19:d2:6c:42:75:71:9a:f7:4a:c1:bc:
41:e6:89:8e:8c:0f:44:64:9b:d8:54:23:70:30:0b:1e:34:ba:
d9:4d:52:98:91:79:4e:b4:1b:19:70:d8:f4:ab:e5:31:ed:45:
e3:73:06:a7:e0:74:7d:d8:2a:e5:33:3e:11:58:93:1f:85:73:
6e:7d:fb:b4:cc:21:98:db:bc:4b:af:77:22:7b:3c:b8:f5:05:
8c:68:61:3a:48:67:71:e7:8a:99:5d:4c:00:ee:d0:56:5f:64:
cc:ab:b0:51:e2:d3:d8:58:ab:f0:c1:47:a7:5c:6d:f4:53:37:
10:01:4c:b9:27:9d:b0:a0:99:f8:7d:37:26:a5:fa:0c:76:87:
85:a2:f8:a5:37:c8:00:57:43:e3:a0:85:42:72:15:65:82:ca:
6a:93:64:d9:fe:8b:68:85:64:2f:f8:e7:37:34:3c:96:2f:4f:
23:a9:93:66:98:f8:43:12:ee:09:91:28:c8:be:12:3c:1e:90:
a1:ca:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:36:48 2025 by rpki-client