Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json)
Hash identifier: KzpEZ7vTC3EyRvU2PsQS4kOJGCm6jgnhjPwMdY7Pi2A=
Subject key identifier: 94:5E:F6:7B:62:4C:E1:F6:79:99:8A:98:32:61:5F:71:F1:B7:90:59
Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Certificate serial: 01969CAC88E0803E967F9E46B1DFF486945E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 19:01:14 +0000
Manifest this update: Sun 04 May 2025 19:01:14 +0000
Manifest next update: Mon 05 May 2025 19:01:14 +0000
Files and hashes: 1: J0wD1VHXSK8IW6oG7-DG_smgYpA.roa (hash: CViIeXhdVqcAItp5448I2Btx/FMsFejPzyYEyeUsBBw=)
2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: Il7xpZIyG2bTPZdtamxgvUHvUeGz4oMtLVEsNvVvIPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:88:e0:80:3e:96:7f:9e:46:b1:df:f4:86:94:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb
Validity
Not Before: May 4 19:01:14 2025 GMT
Not After : May 5 19:01:14 2025 GMT
Subject: CN=945ef67b624ce1f679998a9832615f71f1b79059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:a7:53:ad:83:6a:ea:73:f7:af:57:d1:cc:
1b:48:89:cb:16:c6:88:af:0a:d3:16:dd:c3:0c:29:
22:5b:89:ee:c9:6d:c5:ac:3b:d4:5a:e4:0f:c4:92:
b3:e3:e1:20:a1:f8:9f:07:d4:21:40:13:2f:1c:f4:
32:7c:25:d5:62:0b:fd:ae:c4:f2:63:ff:54:63:fa:
30:ba:71:3c:a4:25:68:b1:30:a7:7a:90:c6:11:87:
7e:d9:5d:ea:fc:21:fa:ae:5a:f7:24:f2:f1:e7:78:
52:51:d3:21:61:e4:e9:f6:b5:49:5c:b2:6d:4b:83:
84:73:39:44:3e:10:c4:cf:42:19:fe:1a:e5:a2:1f:
e6:d0:17:f5:fe:6b:10:b1:30:c7:ca:73:d3:e8:46:
12:95:0f:3d:51:da:3f:1b:86:d7:9a:b6:a1:f8:dd:
42:d2:e6:df:d0:97:e7:15:f1:98:06:77:76:24:08:
0c:a7:7b:ac:b5:f8:ab:be:6e:42:a8:02:63:9a:7d:
00:e5:42:74:8c:12:76:fd:34:a5:42:39:b2:68:85:
a6:b4:d2:72:04:c1:26:c0:2c:4d:29:aa:36:4c:30:
74:04:b5:5d:dc:71:86:c9:a7:77:49:0d:f7:20:0e:
eb:51:c4:c6:92:56:a6:ca:4e:34:25:19:9b:f3:2d:
69:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:F6:7B:62:4C:E1:F6:79:99:8A:98:32:61:5F:71:F1:B7:90:59
X509v3 Authority Key Identifier:
keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:9f:f9:23:68:84:8e:43:38:05:e3:4c:25:e0:e0:b2:b0:9f:
10:53:2a:cc:de:e9:d1:03:37:e8:6a:bf:9d:ea:86:ae:81:d4:
3f:32:19:0e:60:89:4f:42:f3:10:5b:61:d2:31:d9:5a:2d:36:
ec:7f:37:ac:de:48:2f:10:e8:9e:5c:af:52:dd:54:33:30:9b:
73:81:37:a0:90:61:70:f1:80:33:b2:bb:59:b8:7b:b7:5e:bc:
bf:25:a0:4d:0d:df:f6:4e:7d:cc:03:b6:ed:58:ba:6c:2e:6f:
a7:77:fd:53:c5:4b:63:17:48:c4:d3:48:5a:b6:ee:7a:0a:02:
7c:f1:1a:b9:4d:20:c8:66:90:77:5d:fe:b7:75:eb:8c:31:5e:
10:e3:44:a3:4c:e7:47:49:c7:43:ab:ef:2a:03:47:04:b5:2b:
e2:75:d4:ed:81:6f:c1:b1:7e:3a:ab:0b:5a:e5:ac:84:7b:5f:
8b:15:16:17:f9:b4:79:33:ea:56:37:6c:9b:94:33:53:3e:e4:
2d:95:af:cc:e2:e0:e6:60:1e:6a:e3:92:32:a4:bf:15:7a:be:
55:70:a8:e4:3e:34:e6:1a:42:90:94:62:dd:8c:3a:44:61:d2:
a8:a2:85:a1:3b:71:1b:35:bc:5c:5e:57:6a:d4:ec:46:a9:3d:
f6:2b:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:35:03 2025 by rpki-client