Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier: a5N75m/7wkHgH/oy95MBsvPGrkcfdEJcOyHvrMJnvwI=
Subject key identifier: 56:92:75:58:EE:30:A6:EB:3A:39:E3:11:06:A6:9C:03:34:67:04:CF
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 01969DF601686BF77660C77A974D7128E5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number: 0859
Signing time: Mon 05 May 2025 01:01:06 +0000
Manifest this update: Mon 05 May 2025 01:01:06 +0000
Manifest next update: Tue 06 May 2025 01:01:06 +0000
Files and hashes: 1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=)
2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: OGUWAqN4co5fwVNNtVe4qk1ECMPndf0NOhJfSnoXZDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f6:01:68:6b:f7:76:60:c7:7a:97:4d:71:28:e5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: May 5 01:01:06 2025 GMT
Not After : May 6 01:01:06 2025 GMT
Subject: CN=56927558ee30a6eb3a39e31106a69c03346704cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8c:6b:0e:77:f2:76:db:06:bf:ef:93:b1:17:
bb:5a:e9:37:a2:c4:3a:d0:7f:b1:a8:e0:d6:47:83:
97:a2:62:44:d4:05:c1:29:45:04:0f:40:f9:7a:9b:
3e:00:e9:c3:e4:1e:f2:21:33:9b:09:9c:e7:6f:54:
c2:78:89:94:12:75:fd:8b:e7:fb:3f:bf:d3:f1:77:
92:68:c1:33:21:24:d1:41:a0:6c:24:ca:f4:c1:74:
c5:85:87:db:25:f3:91:a0:56:94:79:fe:40:87:1a:
bd:67:9e:22:2c:8d:b9:5a:b8:54:e0:4e:35:5c:70:
11:73:df:00:89:79:80:03:ce:13:f3:03:22:e3:f6:
17:cb:c6:8d:68:d4:e0:52:cc:dc:3a:a6:fc:3e:9f:
1e:ea:f4:bf:90:5b:75:8b:11:53:a4:fc:31:62:3d:
22:96:82:b4:13:26:e3:c2:e7:61:12:14:75:9e:05:
e0:cd:5e:8a:0f:fd:78:41:21:51:f7:34:70:9b:9f:
fb:42:b1:cc:f5:c4:01:e2:d2:58:23:0e:53:78:7a:
31:4d:e3:27:86:ef:24:ae:3f:e6:dd:0f:43:8a:b1:
6a:b8:22:dd:2e:e0:18:93:a7:d4:55:62:e7:d3:be:
39:66:be:67:b5:3b:ec:45:b8:23:61:95:c1:a9:e7:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:75:58:EE:30:A6:EB:3A:39:E3:11:06:A6:9C:03:34:67:04:CF
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c9:2a:d5:84:c9:14:7a:d6:61:7d:51:f8:40:59:af:36:8f:
8e:6e:79:96:f9:ab:68:42:2a:80:98:8e:73:97:6b:4e:26:0e:
60:6f:0a:10:76:77:4d:1d:ea:bd:ad:f6:ee:d8:2b:23:d5:1a:
22:b5:71:ee:a7:84:b2:c6:e7:33:71:da:16:45:96:51:5a:59:
2d:99:09:50:d9:c3:c3:7a:b6:77:bd:cf:0b:d9:e1:4e:56:02:
5a:07:4e:89:b4:d7:72:e4:04:98:aa:d2:7b:2c:a5:70:a0:20:
15:d0:32:99:ac:1a:c2:c8:bb:5f:f1:75:47:13:f7:28:11:a1:
98:10:ff:b0:b5:28:47:3f:21:49:6e:b6:17:0e:4a:46:38:f1:
e1:3d:8a:8c:d5:3e:84:02:f2:72:35:71:f4:85:7e:21:01:f6:
7d:70:30:d3:63:94:83:ee:32:0e:05:cc:6d:07:7a:26:9e:22:
63:77:fc:c3:f0:a9:de:0f:99:2f:f5:90:f8:d6:86:49:53:84:
4b:e2:9e:47:1d:3a:c7:06:25:5d:fd:61:c2:9a:c2:10:e3:d4:
c4:1c:cd:4a:09:27:4e:9a:8e:64:a8:19:30:aa:9e:cb:9a:be:
f0:d2:0b:85:f0:52:e4:67:f0:c1:c7:2c:ad:97:61:86:75:11:
3c:9e:75:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:27:59 2025 by rpki-client