Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier: 8sn33ltYMZPRACSjT3GPUnr52kQOjKKe/UyqgUtI81M=
Subject key identifier: C1:64:5C:F4:E0:77:B9:2F:8D:93:F9:0C:D6:EB:E5:28:1B:5B:38:C7
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 0196B3A17F5E77BD508AA39155EB08F7F9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number: 02F8
Signing time: Fri 09 May 2025 06:00:27 +0000
Manifest this update: Fri 09 May 2025 06:00:27 +0000
Manifest next update: Sat 10 May 2025 06:00:27 +0000
Files and hashes: 1: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=)
2: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=)
3: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: Taw+P8oa6/nclyA4Yer+0bSv2i/h2gdNm08bC6t37dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:7f:5e:77:bd:50:8a:a3:91:55:eb:08:f7:f9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: May 9 06:00:27 2025 GMT
Not After : May 10 06:00:27 2025 GMT
Subject: CN=c1645cf4e077b92f8d93f90cd6ebe5281b5b38c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:75:dc:71:d8:f1:3a:d9:b1:0f:37:4b:1c:
07:3e:2d:6a:e3:03:16:b4:4d:68:ec:65:2e:bc:b2:
45:a1:c3:58:a9:e3:e4:a1:cf:dd:ba:a4:c1:e7:a2:
33:91:d8:fc:b2:66:23:a6:9c:2a:51:2a:d5:ae:cf:
76:92:3a:ae:b0:92:ec:f2:63:82:83:6f:28:f2:35:
60:0e:cc:bf:d5:7b:90:7b:d9:ef:90:c0:b3:e8:09:
89:79:f6:09:2c:3d:8c:0c:33:f0:e6:fc:fd:6c:e9:
dd:b8:fc:4f:9a:6e:08:22:57:02:7c:e4:1e:be:25:
9a:62:6d:06:fe:3f:2e:9a:09:57:d6:2a:aa:40:c7:
92:7c:d2:f5:64:27:44:c9:4a:9c:64:c0:46:53:c6:
03:89:68:dd:8a:b3:58:a2:d2:1c:17:3f:e7:00:50:
33:ff:fd:d2:b8:47:3a:79:3f:bd:f7:c4:fc:10:e2:
5c:f4:80:66:bd:ff:85:25:72:b8:20:ab:60:00:f1:
24:1d:41:6b:70:0b:e4:d4:5b:8c:0c:d7:de:d4:b2:
08:f7:04:c9:81:04:2d:8c:36:83:5e:06:0d:8b:94:
44:d5:7f:52:75:61:b0:f5:a1:94:48:da:60:d2:14:
90:91:bb:95:83:d3:db:92:07:7d:5c:b6:d6:48:83:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:64:5C:F4:E0:77:B9:2F:8D:93:F9:0C:D6:EB:E5:28:1B:5B:38:C7
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:00:25:7c:77:d7:3b:60:d6:ea:e0:a2:65:aa:82:f3:5c:de:
23:7e:86:6e:b7:75:09:a8:a2:cb:3b:db:6f:0f:cf:19:d1:b9:
5b:2d:44:b1:c0:95:1f:b1:68:18:41:04:d8:ca:92:bd:03:a8:
58:b1:82:a9:0c:46:22:65:48:0c:94:34:9a:42:54:c9:99:35:
4f:21:02:67:15:91:77:b6:3a:09:37:07:c4:34:91:56:62:c4:
94:84:9d:4c:63:ef:0b:3b:73:eb:b9:45:d5:71:02:ad:65:20:
8b:b9:93:5c:1f:de:d2:ca:98:1e:d3:dd:54:08:4f:36:c4:0d:
17:d9:30:33:35:b8:02:49:48:96:02:f0:96:00:3f:1b:11:33:
a7:43:b8:3c:1e:13:c9:fb:ee:70:db:de:9e:17:f9:04:d5:b9:
50:22:2e:a8:cd:5e:11:8b:c5:c9:c8:db:15:cc:1a:4b:2e:c7:
cd:25:df:20:4a:69:1b:e7:98:9b:e6:3d:f9:66:c9:06:a0:5c:
f9:bc:03:50:6a:e7:e3:82:3d:5e:7e:a2:3d:6e:fc:b2:17:f5:
01:d9:59:18:b6:a0:88:7b:2f:2a:63:ef:77:f1:5a:04:83:14:
71:5f:16:2f:16:81:28:f8:75:b4:a3:63:25:16:a3:30:44:24:
d9:c6:61:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:41:23 2025 by rpki-client