Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json)
Hash identifier: jqpMgBZLKTlsJfYqo9JxPk3MO+PwXOCI0Jm7Yhsms9A=
Subject key identifier: 85:61:FA:3F:03:68:E5:37:95:90:78:72:E9:0E:01:4A:D6:BF:6B:46
Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Certificate serial: 01969D19CCBEFD3599A78242E02033983D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
Manifest number: 1523
Signing time: Sun 04 May 2025 21:00:35 +0000
Manifest this update: Sun 04 May 2025 21:00:35 +0000
Manifest next update: Mon 05 May 2025 21:00:35 +0000
Files and hashes: 1: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: 2h8JPAHPr1lgr9tccN11gdkwoB1QvGFBrZ1xC6Rc4aE=)
2: cO1AasGYHXhPsHKm3hi1TX9-Qos.roa (hash: CIc/4zinLVuL7fIWbIBFTK/p1pSlSm0f2NwdbryHRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:cc:be:fd:35:99:a7:82:42:e0:20:33:98:3d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba
Validity
Not Before: May 4 21:00:35 2025 GMT
Not After : May 5 21:00:35 2025 GMT
Subject: CN=8561fa3f0368e53795907872e90e014ad6bf6b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:1a:25:15:ae:22:8b:27:d6:8a:11:8e:85:
47:c9:63:f8:43:e1:e7:63:28:91:38:99:c5:91:39:
d2:e8:77:e3:5f:66:64:cf:cb:0c:be:51:e1:3d:7a:
ec:cd:76:00:09:1e:a4:b1:a4:f0:4a:d6:09:3d:e0:
78:af:d9:2d:1e:e3:13:bf:05:09:b7:98:5b:c2:df:
38:26:e4:c1:8b:de:0c:f3:96:9f:72:9f:b6:de:ba:
39:c9:01:14:ce:69:16:45:9a:72:d9:d0:cf:1b:1e:
a1:d2:ac:6e:19:63:27:fb:b2:05:d9:56:cc:6b:3d:
c0:88:4e:b0:42:dc:56:9f:91:ad:41:b6:06:67:8a:
91:4c:32:da:81:a6:6a:ab:3a:c8:89:f2:a2:8c:8a:
39:bf:44:32:74:e1:ee:eb:8a:c2:17:c7:ac:8b:23:
a3:d6:87:f7:e2:90:bb:cc:a0:a3:07:4e:c9:ab:10:
c0:0d:d0:66:9b:ae:f4:e4:9f:18:ba:d6:7f:e8:68:
23:59:be:86:37:c7:32:fb:29:f9:ca:24:4a:ac:b8:
7e:58:56:da:98:dc:bb:b6:9b:5e:d5:8c:f5:67:12:
82:45:e6:96:d2:53:70:94:e9:b5:28:cd:b8:57:3d:
86:df:84:8b:48:53:e6:d5:ae:bf:87:59:d3:b0:c1:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:61:FA:3F:03:68:E5:37:95:90:78:72:E9:0E:01:4A:D6:BF:6B:46
X509v3 Authority Key Identifier:
keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:8c:74:78:2d:29:16:95:9b:6b:af:a1:c4:2b:70:b2:ef:
55:34:43:86:c0:5c:fb:40:69:7a:10:af:ca:7d:20:1a:59:2b:
71:47:20:fa:68:e2:da:05:20:94:91:d0:cb:d2:5c:07:e1:12:
00:0b:2c:58:bd:26:0b:cd:01:19:c0:3c:41:29:05:fd:d7:c4:
d0:e5:55:f9:26:6b:71:59:fa:ca:8a:ed:34:58:08:30:07:62:
98:e9:2d:be:ae:dc:33:5b:c0:cb:df:91:7a:46:18:c6:c5:33:
b6:54:78:87:81:3b:ea:83:ac:f1:0a:2e:34:ed:a3:d8:8b:14:
60:08:f7:e9:62:5c:0a:41:cd:a7:e8:0e:52:ce:d7:f4:29:b7:
2f:0a:c8:96:1c:87:fe:1e:1d:b8:34:fd:62:47:d7:e0:7e:b1:
a9:37:95:ad:40:35:1f:5f:0d:12:cf:26:bf:92:62:2c:63:e6:
81:6e:3f:85:2c:e3:90:7a:d5:03:ca:b3:c5:31:53:65:d0:8a:
44:1b:dd:85:4b:84:e0:3e:4c:26:16:f3:86:54:65:e8:c8:1b:
3c:24:14:1a:5b:83:a9:af:52:89:5c:d7:f7:22:e6:7e:a8:46:
11:1a:7b:06:e1:e5:2c:c9:87:b7:e2:ea:ea:23:72:5d:26:5f:
4c:27:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:53 2025 by rpki-client