Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier: VmOkthJdrCXJVfTwDsDeiG/nmCq+nszAflqZx7wQDvI=
Subject key identifier: 17:49:40:B1:54:38:53:5C:DE:6C:2A:25:CC:36:2D:FD:D8:D9:89:9E
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 0196C1941A9C89FC8E08A9FEC7ED3C9922F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 23:00:30 +0000
Manifest this update: Sun 11 May 2025 23:00:30 +0000
Manifest next update: Mon 12 May 2025 23:00:30 +0000
Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=)
2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=)
3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: HzqyPI0FSh//OT85I8KOPT3IoRFJL0XyuWnj+Q2kaaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:1a:9c:89:fc:8e:08:a9:fe:c7:ed:3c:99:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: May 11 23:00:30 2025 GMT
Not After : May 12 23:00:30 2025 GMT
Subject: CN=174940b15438535cde6c2a25cc362dfdd8d9899e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e1:96:6a:63:be:33:81:a0:78:46:d8:8b:6b:
d9:f9:77:e2:27:d2:8e:cd:05:28:62:38:c8:dc:ba:
74:7b:e4:3a:92:a9:70:66:9e:ae:5d:aa:b2:2c:2d:
39:10:93:85:ab:ba:cb:16:04:88:49:ad:9b:58:4b:
06:0e:21:ee:b8:40:b1:6d:8d:0d:05:78:f0:78:b9:
e7:84:9a:62:c2:36:bd:10:08:4e:96:c3:02:a1:85:
49:49:25:8f:86:51:eb:88:22:aa:89:4e:a0:fd:31:
b2:f0:3e:b9:80:bb:ea:30:2d:88:e8:ca:b6:dc:4e:
c3:b1:cd:a5:5b:71:82:12:14:5b:4e:25:6c:71:ef:
ee:19:16:11:2c:57:ef:2c:16:7c:1f:e7:47:54:c0:
8d:3d:7d:f8:86:a1:51:34:4f:2e:61:33:7c:18:9d:
9c:35:14:33:29:7e:5b:ec:40:37:ee:dc:ac:7e:53:
9a:dc:1c:94:5e:a9:7f:e2:c8:8d:df:bb:2e:d4:88:
21:97:7e:ce:5f:fc:f8:30:0e:66:4b:42:9e:94:f0:
f3:f8:de:e8:69:c7:fe:e2:17:5a:32:65:79:15:10:
45:72:44:c4:2e:ef:81:26:96:61:15:3b:c9:c8:2c:
b2:5c:72:b6:a3:18:17:ed:f1:95:ac:cf:6b:cb:87:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:40:B1:54:38:53:5C:DE:6C:2A:25:CC:36:2D:FD:D8:D9:89:9E
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:84:25:f6:bc:52:a8:65:df:55:22:1b:97:fe:27:cd:19:15:
d7:d8:8d:a5:b4:4b:a8:c4:c3:3f:b9:a1:40:42:1b:41:fd:f9:
92:13:66:1b:bd:07:34:34:3d:f1:32:a0:23:34:46:e5:61:15:
98:65:bf:7c:7e:c2:a7:b1:3d:33:23:50:2a:45:47:72:2a:be:
78:e9:11:d3:e6:23:b2:35:09:ed:1d:d9:94:70:cc:38:0b:89:
37:f6:b4:4e:dd:fa:6d:e6:48:17:cc:19:79:7a:ee:c9:5d:1a:
03:b9:44:ac:e4:db:04:00:1b:d2:74:0e:2b:44:12:aa:c7:1b:
47:a4:52:79:ac:a1:52:4d:02:34:16:0a:93:98:83:f7:f8:8e:
42:47:13:a9:fd:68:67:a6:ef:03:b0:c3:7f:91:01:80:dd:76:
21:56:a2:e3:b6:af:2e:0d:bd:d6:b8:c7:ab:b7:8d:af:bf:9f:
e7:55:b1:41:76:5a:98:41:3e:5c:53:83:39:5f:5b:b9:32:a8:
4d:e4:89:8d:a2:e0:89:af:6d:ca:4d:49:53:88:15:48:19:e5:
8b:9c:df:cf:11:4e:fc:7a:fa:2f:5c:d9:33:d1:ba:db:6a:92:
c8:62:6e:cd:f2:ad:55:2b:f9:f2:5d:97:2f:6e:79:ff:6c:7f:
17:98:30:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:21:33 2025 by rpki-client