Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: R6qd2KJunaTVO4eWMMcB5cW8qxaWEobF7SntwmQjWEU=
Subject key identifier: BC:65:CE:52:12:0E:52:D3:5B:25:B8:84:AB:64:D5:6F:0D:E4:60:44
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 0196BFDCB9487DB769BD692662C1C864D702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 1377
Signing time: Sun 11 May 2025 15:00:35 +0000
Manifest this update: Sun 11 May 2025 15:00:35 +0000
Manifest next update: Mon 12 May 2025 15:00:35 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: AiNnYyMvq9bZFcbTlfFTVwPobd0WexEs7Q2lZXE9ibw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:b9:48:7d:b7:69:bd:69:26:62:c1:c8:64:d7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: May 11 15:00:35 2025 GMT
Not After : May 12 15:00:35 2025 GMT
Subject: CN=bc65ce52120e52d35b25b884ab64d56f0de46044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b6:02:e0:ee:65:9c:6a:f2:cc:c6:34:68:ee:
be:9b:17:dd:b8:59:66:c7:fc:f1:e0:de:c6:37:1f:
07:74:79:5c:72:85:ad:e8:46:dc:ad:6c:37:2f:75:
23:b4:6f:23:10:d6:96:24:05:74:cd:ef:f4:38:6b:
d5:20:a6:e6:5d:77:23:87:ca:bb:0f:a4:a1:6c:78:
10:1b:07:c6:95:eb:7d:95:b7:d9:31:91:25:ed:df:
48:5e:5c:77:af:36:dd:f2:8e:0c:58:92:3c:8f:15:
ea:80:83:c7:df:55:99:0f:42:95:09:b5:ea:13:b9:
ac:a1:dc:0e:bc:7d:59:df:2c:c6:70:2d:cb:b7:2d:
84:02:1d:35:6f:e6:22:ee:50:7f:14:e8:a4:39:6c:
3f:06:0e:16:6a:36:63:a3:cc:a5:f7:78:ef:ae:d9:
a5:06:75:ba:fb:42:62:7b:b4:ff:72:71:49:d6:8c:
85:d8:08:2f:34:da:f9:04:33:04:fb:1d:95:44:71:
50:13:5a:b4:95:05:14:ad:59:1b:4e:52:f7:b0:23:
89:36:f5:ac:83:d8:72:95:4b:8e:12:0e:e3:f5:fc:
e2:5a:58:e7:c7:71:db:20:18:a5:ce:c6:3b:ae:20:
91:60:da:a9:44:a9:60:ba:65:56:1c:b4:1d:f4:b0:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:65:CE:52:12:0E:52:D3:5B:25:B8:84:AB:64:D5:6F:0D:E4:60:44
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c7:70:e1:90:00:10:3c:a4:cb:9c:98:93:eb:0f:a2:64:94:
7a:e6:d7:fc:c5:d7:bc:fb:59:12:60:5b:69:fc:7a:91:01:9a:
ec:98:80:28:b5:5c:85:f0:f4:c8:63:eb:8a:25:ca:b1:0e:03:
67:84:28:3f:a3:ea:1a:91:e0:f2:e0:41:03:e7:31:6b:c9:62:
e4:ab:7d:76:36:0c:ca:0e:1f:09:c9:a6:06:3c:6a:4b:c1:90:
3c:60:11:8d:47:7c:59:0f:f5:6c:64:ee:38:29:17:94:28:a5:
62:9b:ce:a2:bc:b7:7c:0f:38:8d:77:6d:d9:57:63:d9:cd:a6:
73:3c:cd:76:24:8d:9a:2e:70:c7:69:b8:2a:bb:73:7f:ee:a1:
82:f3:6b:4f:3b:0e:9d:79:cf:48:ca:b7:7c:a8:e5:92:ab:0c:
0b:95:07:df:f6:31:51:7f:7a:68:08:42:8e:12:ca:34:f2:2a:
03:ab:48:0d:12:85:83:75:ae:b0:7b:dc:c1:d0:db:b3:c4:4f:
3c:85:e4:9e:55:1c:71:7f:99:d2:fe:55:a6:8b:a1:e4:d5:c0:
d0:08:d5:88:bc:37:4a:47:66:41:50:b8:8e:5f:b9:99:87:9d:
3c:94:c5:3f:30:ce:dc:e6:c3:61:6f:79:40:29:e7:15:bc:55:
6b:49:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:42:01 2025 by rpki-client