Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
File: zZFzvIKKtx2i68r6f4mOxqoe6nY.mft (raw, json)
Hash identifier: LHAWP+j7UEBzvYKM+Kqvdij8eSj98i5H9BJBA4QEQ10=
Subject key identifier: D4:57:E0:67:56:5B:67:29:57:5B:3C:12:31:42:B2:D2:5A:D3:B7:9C
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 0196BDB71D68E9AD73AEA93D9026A02D27E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
Manifest number: 03C2
Signing time: Sun 11 May 2025 05:00:16 +0000
Manifest this update: Sun 11 May 2025 05:00:16 +0000
Manifest next update: Mon 12 May 2025 05:00:16 +0000
Files and hashes: 1: RtwNd0kIIB4fJfHreOuMYKMR7lc.roa (hash: qbEtbkjwEQIcvAZsD7fY24iBMXF9LqUeMZOAB812XzU=)
2: zZFzvIKKtx2i68r6f4mOxqoe6nY.crl (hash: zGp9r/Z39EbgOTxb7Xk4aeGo8ScyAzCtyGd/k+x6X6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:1d:68:e9:ad:73:ae:a9:3d:90:26:a0:2d:27:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: May 11 05:00:16 2025 GMT
Not After : May 12 05:00:16 2025 GMT
Subject: CN=d457e067565b6729575b3c123142b2d25ad3b79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:f7:69:33:e4:73:e5:33:26:81:30:38:c3:
47:02:fe:fe:50:a9:a1:f1:ce:09:a6:10:e6:d2:59:
a4:ad:7b:38:cf:d6:ea:0d:a6:e2:1d:1f:4e:4c:96:
41:ac:88:78:d2:9b:35:17:5f:6c:fa:c6:57:7b:6a:
1e:0e:5a:96:e3:05:ba:93:b8:6a:ba:55:24:0e:3b:
40:20:d8:b8:b3:67:33:d8:aa:08:44:26:25:a9:07:
c3:3e:77:16:40:94:1b:b1:8c:dc:92:e6:0a:f4:c3:
42:8f:62:7f:05:4f:1e:96:16:b6:29:95:ab:01:7b:
67:e9:f6:77:dd:84:ee:b9:b5:bf:90:12:95:6a:5c:
ce:93:6f:a1:3b:45:f2:eb:d3:52:cd:90:73:c3:58:
08:df:df:fa:b5:6a:e3:7f:58:e8:a3:26:3d:dd:9f:
4c:f9:09:3a:73:db:ab:00:14:4d:ef:e0:b7:e3:a9:
0c:d4:eb:11:cc:30:f2:37:2e:7f:22:30:8e:54:7d:
eb:93:49:05:cc:01:fa:63:89:93:1e:b2:2f:c4:19:
1e:5f:e6:d1:5b:bc:01:e3:0a:90:37:86:62:e0:84:
8e:4a:95:9e:73:5c:f9:cc:13:b1:4c:6b:73:3f:5a:
9d:a1:e6:b3:40:73:89:a8:13:10:94:96:8a:ce:fe:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:E0:67:56:5B:67:29:57:5B:3C:12:31:42:B2:D2:5A:D3:B7:9C
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:dd:b7:83:d0:34:2b:61:4c:fa:30:d6:a6:a4:f9:fd:f3:06:
33:1c:92:df:93:44:43:7c:81:e9:4a:33:b9:77:d9:ac:f4:1a:
fc:d4:8a:fb:9d:66:1f:3c:90:1c:23:f5:11:68:a2:e8:f2:3e:
aa:10:47:86:5e:be:65:08:8e:5d:eb:e7:01:92:11:8a:00:2b:
81:ac:b7:7e:06:3e:25:05:2a:9c:74:3f:f3:c0:18:ff:a8:96:
7d:66:c3:95:dd:5e:03:68:85:88:41:78:07:a2:f9:e7:9d:b9:
8e:29:fa:c2:74:5b:8b:68:8f:4c:30:c6:1c:05:63:71:dd:35:
0f:e5:56:e8:0b:ad:6a:4e:22:85:8e:c2:b4:3d:f0:f7:21:ee:
91:78:2c:45:dd:1c:68:17:8a:ae:68:d7:68:ce:ad:a8:2b:8e:
1b:47:f9:54:b6:20:0e:d5:c7:c8:11:d5:b5:d1:b5:e8:fe:72:
80:de:94:0c:0d:8b:34:f3:01:d5:96:a9:9a:76:ff:1e:af:0c:
a6:f0:f0:d0:f5:0f:dd:7c:f4:0a:6e:b9:9b:5d:d8:4f:f9:bc:
c8:61:e2:c0:2e:5d:41:32:8e:40:fd:52:99:e2:4d:09:e1:1b:
fe:1b:f9:07:b4:60:7f:ad:70:c8:c3:8c:b0:98:ca:39:58:d4:
50:6b:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:02:46 2025 by rpki-client