Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: h4nzSpTGacQ9GK8aNGtigpXngzaWmrj+9gXPm+SPKes=
Subject key identifier: 3F:D4:28:54:59:34:DB:12:18:A2:19:63:AC:E1:A8:A9:4A:B3:95:F1
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 0196CD612B085D60AB41C75271452E9CEB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 140F
Signing time: Wed 14 May 2025 06:00:19 +0000
Manifest this update: Wed 14 May 2025 06:00:19 +0000
Manifest next update: Thu 15 May 2025 06:00:19 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: 1Api92DguK+EuPqlU+0A/D4tyRXSWQrw93uwUHas15M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:2b:08:5d:60:ab:41:c7:52:71:45:2e:9c:eb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: May 14 06:00:19 2025 GMT
Not After : May 15 06:00:19 2025 GMT
Subject: CN=3fd428545934db1218a21963ace1a8a94ab395f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d0:3d:8a:51:4d:a4:0a:f0:9e:51:c7:77:6f:
a5:c6:96:a1:e4:c0:e5:93:63:19:d2:ea:0c:47:56:
db:37:40:79:9a:85:d4:7d:61:11:db:23:d3:b8:c5:
5c:3b:a9:33:7b:f8:a8:84:b9:c2:cb:96:63:90:67:
64:65:96:99:71:cd:9d:1f:ba:9a:b5:95:b4:57:61:
c5:47:63:33:99:48:c0:ab:da:eb:dc:29:90:bb:58:
94:f4:ff:32:eb:d4:37:dc:47:f8:5f:8b:8d:93:ae:
4f:db:c7:3e:fb:cb:0f:89:04:41:10:07:22:03:ca:
b6:df:51:0c:94:fe:f9:4b:7e:3a:c0:a4:27:75:c2:
21:93:9e:0a:c5:1c:bc:7f:aa:8c:9b:cc:ea:53:c0:
23:b1:4b:8a:aa:c8:e1:1c:da:38:1f:12:c0:3d:68:
6e:93:bd:d3:5f:04:8b:3e:89:6f:89:c6:8b:ec:2b:
13:07:9a:4b:c6:44:bb:c9:fc:dd:df:01:43:a5:a1:
a6:c1:c2:2b:71:33:0f:6d:9f:91:a3:54:0b:03:63:
25:b0:7e:3b:4c:15:1b:62:a9:cb:fc:3d:4c:60:a7:
3a:e6:af:fa:10:64:24:b1:cb:60:78:6f:2e:f3:09:
33:fc:53:f4:2b:5a:7f:59:43:6b:a3:d7:98:e6:03:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:28:54:59:34:DB:12:18:A2:19:63:AC:E1:A8:A9:4A:B3:95:F1
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:69:bf:01:f8:11:26:5a:f2:38:81:d8:39:b6:ea:24:96:df:
83:e0:fe:d5:49:86:2b:1a:5f:0a:7e:d2:69:44:6f:03:1b:d2:
2f:2c:62:1e:a5:75:7c:d5:e1:10:69:bb:b1:1c:f4:68:d0:81:
08:4a:72:d3:e9:42:27:9a:49:3a:da:3c:b0:e4:b7:53:d8:62:
89:46:09:f4:64:19:b5:70:bf:17:5c:e3:93:b9:75:b8:3d:41:
5d:8d:94:3d:02:0f:10:3c:a5:9a:12:dc:62:1b:16:06:be:c4:
a7:d6:5c:d7:8e:72:61:31:c9:c2:0e:e1:e1:eb:67:47:c4:c0:
34:2d:cb:93:c0:02:c7:01:7b:08:30:c6:75:64:4a:75:11:e2:
21:7d:59:a9:15:11:65:c5:90:5b:c4:0d:f8:fd:65:e7:f7:60:
4d:7a:33:c9:38:2c:79:5b:81:89:af:a8:a9:87:85:12:b5:2b:
2b:d5:1d:9e:4e:55:da:03:d2:57:41:3c:d2:01:0c:da:1c:f2:
b4:36:54:cf:08:04:77:c6:37:88:2c:f9:2d:fc:e8:1c:f2:04:
d5:7e:86:82:68:88:ff:52:b6:95:68:ac:20:6d:4b:2c:a5:21:
06:64:e2:b6:e6:67:61:06:0a:7d:ea:c9:74:4c:72:91:2a:3c:
60:f1:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:46:06 2025 by rpki-client