Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
File: zheeiaqi1Z7uS9aFj65bs_2nSWE.mft (raw, json)
Hash identifier: Thx9hcsBFrGH4znp9E4dCuZZNpo80gt/2ANZbdCT4GM=
Subject key identifier: EC:C4:16:E4:7B:47:76:7C:8F:C4:6F:41:6F:EE:30:A4:71:11:C3:4F
Authority key identifier: CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
Certificate issuer: /CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Certificate serial: 0196B890C72156E3A641198B0556535DD9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
Manifest number: 04D7
Signing time: Sat 10 May 2025 05:00:17 +0000
Manifest this update: Sat 10 May 2025 05:00:17 +0000
Manifest next update: Sun 11 May 2025 05:00:17 +0000
Files and hashes: 1: DAyoRGxiyUSOri-3K-BVUpwpyYY.roa (hash: +KqrZCct6zjyTbHGPjBd2ldOfCdTDJvohDZemG1iB18=)
2: zheeiaqi1Z7uS9aFj65bs_2nSWE.crl (hash: py31HgePG1Hmv98YJckKP9dJegeBjmBNLUuzfr3OpEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:90:c7:21:56:e3:a6:41:19:8b:05:56:53:5d:d9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce179e89aaa2d59eee4bd6858fae5bb3fda74961
Validity
Not Before: May 10 05:00:17 2025 GMT
Not After : May 11 05:00:17 2025 GMT
Subject: CN=ecc416e47b47767c8fc46f416fee30a47111c34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b5:bf:e1:8e:a7:38:b0:71:25:82:02:08:68:
4a:03:56:f8:ad:17:72:db:e9:37:9b:2f:65:6b:d9:
e5:e4:ea:d5:0f:79:21:2c:f9:6c:a4:ea:b0:58:41:
58:18:f6:5d:a5:80:e2:92:ad:ca:11:59:20:15:4b:
0a:d3:7f:22:b8:60:ed:c7:5f:82:2f:71:e6:64:18:
51:33:72:63:c2:51:8d:00:52:ac:1d:74:e3:e1:18:
ea:ac:e4:53:c9:99:83:67:86:bf:68:9b:61:98:79:
f5:b9:a2:7a:67:ff:93:d5:8f:d4:6e:80:26:a0:1d:
76:12:dd:96:37:12:fc:af:5d:b8:2a:3c:25:c0:c9:
cb:47:b6:d5:b8:67:04:e0:00:3f:bb:c9:fc:f9:b7:
1b:68:aa:e3:e8:01:87:9f:27:ea:3b:ad:76:40:41:
10:20:db:cc:93:79:fa:bf:22:f6:8f:5e:38:cd:ba:
ed:23:63:a1:b4:2f:10:06:6e:0a:99:40:09:1b:31:
c0:e7:2c:cf:92:55:35:55:6f:25:01:cf:c5:97:2f:
f4:c9:5e:3e:58:c3:63:6d:e9:de:e2:91:8c:bb:d1:
9b:2f:c1:03:a9:49:79:db:74:b6:c6:39:10:1a:a1:
ac:de:69:7f:4b:d6:2d:fa:a9:4a:d2:72:85:3d:5c:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:16:E4:7B:47:76:7C:8F:C4:6F:41:6F:EE:30:A4:71:11:C3:4F
X509v3 Authority Key Identifier:
keyid:CE:17:9E:89:AA:A2:D5:9E:EE:4B:D6:85:8F:AE:5B:B3:FD:A7:49:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zheeiaqi1Z7uS9aFj65bs_2nSWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/59e9da-9c2c-40cb-9a65-3d7965539bc7/1/zheeiaqi1Z7uS9aFj65bs_2nSWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:74:51:c2:44:79:ae:65:9d:7f:f1:4a:04:7b:9b:2f:f9:
be:68:e9:52:13:23:11:03:49:2b:a4:9d:ac:72:d8:52:4a:6f:
0d:35:e3:7e:76:bb:91:f4:8a:61:ee:14:20:cf:23:a0:35:00:
35:3f:df:71:1d:d0:ed:f5:07:01:7e:df:06:88:5a:82:36:b6:
0f:10:eb:d7:4d:5e:84:68:c9:f3:5c:cb:22:fb:78:be:da:3a:
ab:25:3d:cd:86:11:5b:0a:e0:03:7f:ad:bd:e7:40:e6:ed:93:
ca:6f:bb:3f:e3:0b:d4:81:45:02:c7:a6:05:ba:71:be:05:c4:
b5:d7:89:28:64:38:72:9c:38:e3:99:cd:53:55:55:9b:64:be:
12:a6:0b:8a:a4:76:91:c6:f2:de:3a:f3:68:98:d4:16:35:02:
bf:7d:d0:ee:4a:a2:6d:a3:33:63:2e:ce:3e:2c:28:b3:b6:fb:
a9:f1:57:47:1d:2b:c0:0b:4e:db:50:03:7b:8c:1b:8e:7a:0f:
d0:67:7b:a5:ff:20:4b:b2:1b:c2:18:c5:7f:2b:43:7a:5a:3c:
64:93:16:43:ec:84:6b:ce:d2:45:b6:73:0f:77:ff:28:dc:52:
b0:a1:15:74:a4:f1:00:33:7a:33:ed:be:77:3e:5b:d5:f4:8a:
d2:e7:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:31:29 2025 by rpki-client