Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
File: zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft (raw, json)
Hash identifier: RP9D5Qlkqd68LwYVgl3dFBKM6zMqN8pc5+OtPkgG3dY=
Subject key identifier: B3:C7:6C:22:5B:8F:93:E1:86:AB:08:6E:3B:BD:3B:B3:79:8D:5C:F2
Authority key identifier: CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
Certificate issuer: /CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Certificate serial: 0196BB2450A426C836E7796F88D971084BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
Manifest number: 6E
Signing time: Sat 10 May 2025 17:00:41 +0000
Manifest this update: Sat 10 May 2025 17:00:41 +0000
Manifest next update: Sun 11 May 2025 17:00:41 +0000
Files and hashes: 1: BE_olsmmnp-joM_N2rLYKLd8dek.roa (hash: ZleCTANKAgfaV22x6J6w6CdrHsjvtau2exHtj44bgPs=)
2: zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl (hash: D1rLyc8xLjXXlmr8YcWnOpY9LMy6OkqSExg9d7WsQXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:24:50:a4:26:c8:36:e7:79:6f:88:d9:71:08:4b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde4c465d2df3458c02610f87820c9bc2eb33253
Validity
Not Before: May 10 17:00:41 2025 GMT
Not After : May 11 17:00:41 2025 GMT
Subject: CN=b3c76c225b8f93e186ab086e3bbd3bb3798d5cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5c:b3:fe:7b:7a:1f:53:e7:33:ab:bb:7a:40:
45:01:fe:c2:a1:cc:de:66:a6:71:a6:c4:f9:09:47:
16:b5:f6:fd:a6:15:98:84:54:2d:23:62:87:1d:ef:
b2:61:77:02:99:11:98:3f:47:94:26:e8:d0:90:c4:
20:84:33:3f:00:91:40:f0:68:df:e8:91:82:21:f2:
69:5f:5e:9f:b8:1b:1d:81:ce:29:65:32:5b:82:8e:
93:3d:b1:70:3f:5d:9c:2e:e9:26:15:2e:8b:d1:7f:
5c:a7:b8:48:ed:83:1d:68:2a:89:82:12:d9:53:f1:
6e:5e:67:fe:13:9f:f3:25:11:ca:1b:ad:26:c2:60:
60:76:ae:ef:9b:a6:f0:77:c5:64:be:2d:ad:3b:fb:
49:d4:ae:dd:03:e2:bf:ea:06:41:88:68:c5:84:08:
7e:2a:fb:20:70:18:89:b5:c8:d1:91:04:1c:94:52:
19:9f:a1:d5:d2:3d:55:f2:bb:d7:4a:80:62:05:12:
d1:df:70:21:b4:f6:8f:eb:4a:14:71:28:5a:d5:43:
d7:fe:d5:d9:d7:6f:82:11:d5:2e:38:d4:06:bd:3a:
78:f6:20:fe:73:6b:59:d0:4d:22:3a:a0:34:bf:df:
00:e8:60:f2:04:69:22:b3:69:76:de:13:9e:83:dc:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:6C:22:5B:8F:93:E1:86:AB:08:6E:3B:BD:3B:B3:79:8D:5C:F2
X509v3 Authority Key Identifier:
keyid:CD:E4:C4:65:D2:DF:34:58:C0:26:10:F8:78:20:C9:BC:2E:B3:32:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeTEZdLfNFjAJhD4eCDJvC6zMlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/22b802-ecc1-41af-89ee-fc95468cb6aa/1/zeTEZdLfNFjAJhD4eCDJvC6zMlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:21:c0:83:1a:35:47:8f:67:13:1b:66:67:2a:69:75:d6:44:
29:d8:45:8c:25:9c:c9:98:0a:a7:14:8e:68:52:04:e4:c0:76:
19:e4:31:68:74:a7:9a:18:e2:12:70:fd:86:74:78:e0:69:65:
85:7e:e5:d7:65:e8:0b:2b:91:09:49:bb:d4:db:4b:7a:22:61:
c8:e8:98:52:9f:c5:6e:33:f7:b3:5f:70:99:04:58:1a:fc:d5:
4a:f7:9d:f2:bb:bc:a9:4c:28:95:9c:aa:e8:06:5a:6e:41:5b:
72:cd:85:94:1f:e7:a2:4b:86:72:ea:a6:34:cd:61:c4:3a:9a:
e1:14:b1:e9:c0:44:f2:39:ad:d0:2b:3b:55:65:50:33:d6:2a:
9d:33:48:98:ec:71:82:58:f3:06:de:f6:8e:10:80:2a:1c:26:
0b:4b:9e:59:d4:59:eb:fe:43:c3:d0:af:b4:56:b2:35:52:17:
c1:a7:b9:8c:a4:10:71:c6:b5:29:42:cf:0a:42:84:07:37:3a:
66:96:46:5e:f3:f9:79:12:af:29:cb:c9:6f:2e:a6:e1:91:fd:
4d:75:34:10:8e:d6:9f:c2:4d:7d:24:e2:36:7a:fe:6b:a1:f0:
23:52:1f:03:6f:19:5b:cf:f9:d8:d6:cb:8d:9d:6c:5f:b0:2f:
53:ed:57:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:57:29 2025 by rpki-client