Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
File: ZW0zxfFuPN2WCuBcgNn282_FU_I.mft (raw, json)
Hash identifier: gxFuB2G97sbrfdx6wmFjhe2AsbjB4D1H97f6+uXVu4c=
Subject key identifier: 08:09:48:48:5E:F3:E2:B0:80:74:ED:11:AF:C8:B6:EA:0D:DD:3E:B3
Authority key identifier: 65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
Certificate issuer: /CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Certificate serial: 0196B1EB1ABA9ABA52BD6991392955D102B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
Manifest number: 0995
Signing time: Thu 08 May 2025 22:01:37 +0000
Manifest this update: Thu 08 May 2025 22:01:37 +0000
Manifest next update: Fri 09 May 2025 22:01:37 +0000
Files and hashes: 1: JZLfCpTMSe09vK_TLbLQFlxw2Ds.roa (hash: oEwUEmn9BEj5nCyDqmNSjb0S6HVplNaKnZXZP0H/66Q=)
2: UojdXawnx16jHvQuUPhyRGr9AUA.roa (hash: Hr78TmcOhe37IFpeiMzuuAac0/dugWioMJ66bJbp/E8=)
3: ZW0zxfFuPN2WCuBcgNn282_FU_I.crl (hash: cbGN9rGbYObnJbKBMcLKD9rX6vq8BxIn+T1sTQ73/34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:eb:1a:ba:9a:ba:52:bd:69:91:39:29:55:d1:02:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656d33c5f16e3cdd960ae05c80d9f6f36fc553f2
Validity
Not Before: May 8 22:01:37 2025 GMT
Not After : May 9 22:01:37 2025 GMT
Subject: CN=080948485ef3e2b08074ed11afc8b6ea0ddd3eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:b2:a4:c2:89:18:b4:1a:12:cf:81:f6:d5:
fc:23:57:78:e2:9c:97:27:6f:24:57:85:e0:68:cd:
f0:24:d9:9c:9a:11:6e:0d:e8:14:00:00:56:eb:cd:
72:30:b5:25:60:c7:07:22:13:62:49:3a:08:72:b4:
72:f0:c0:c8:1c:60:60:77:8a:1d:59:a8:57:bb:f1:
16:32:1c:29:a4:0d:35:c0:6f:72:93:ae:d3:18:d6:
9b:3b:ad:35:02:a0:7c:86:13:ff:6e:a8:ed:49:b6:
d0:72:3f:b5:bf:17:74:35:3f:9e:7b:c4:ce:81:c3:
c0:e8:a2:f5:58:2f:b4:85:6a:e1:f6:e3:de:a2:69:
a0:26:99:0e:47:65:46:83:1b:83:78:6a:a3:f5:18:
18:72:dc:e6:52:0b:b3:0d:b2:2d:8c:b4:81:7e:de:
98:2a:0c:08:6e:5b:f9:bd:dd:aa:3d:d1:f7:b9:c5:
bb:c7:cc:04:4f:56:88:ab:b7:76:c3:8d:32:5c:33:
64:21:aa:3a:65:aa:d8:29:d4:39:10:6a:c0:e1:61:
d2:0f:4d:0f:eb:d8:d1:8b:2b:60:d2:02:51:a5:2f:
3e:7d:bf:4b:8d:09:23:3f:0f:d4:b8:dd:91:39:6f:
8c:70:fe:06:29:42:a7:49:cb:28:ac:2e:d8:1b:77:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:09:48:48:5E:F3:E2:B0:80:74:ED:11:AF:C8:B6:EA:0D:DD:3E:B3
X509v3 Authority Key Identifier:
keyid:65:6D:33:C5:F1:6E:3C:DD:96:0A:E0:5C:80:D9:F6:F3:6F:C5:53:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW0zxfFuPN2WCuBcgNn282_FU_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7cc6ea-774a-4876-84f9-304d2191a4f3/1/ZW0zxfFuPN2WCuBcgNn282_FU_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:23:6c:c6:bc:08:97:dc:f1:2a:96:0e:63:22:98:c6:36:
64:db:6f:6d:77:19:31:0e:5f:82:30:d3:34:42:48:51:b3:0c:
b1:0f:1e:23:3e:92:eb:4e:12:af:e9:e3:9e:6d:39:96:82:33:
4f:b3:ba:55:a6:1b:b6:2c:0d:9f:a1:ba:0e:67:c3:78:8e:6a:
61:83:ff:aa:cd:a9:31:f8:50:ce:ce:bc:3c:b1:47:af:4e:c7:
2f:13:34:e9:a0:b6:63:5a:9c:fe:7e:58:2f:0f:61:52:85:5a:
3b:b3:a6:13:c1:b0:23:f0:77:0b:ca:a1:9c:a6:fc:6f:f1:e8:
fd:ac:ad:e2:b0:cb:8a:5c:7e:26:aa:31:ca:e8:a8:06:4c:c2:
90:e4:e1:86:84:13:7b:59:ec:f2:f2:74:4a:45:86:0b:99:d8:
2b:b2:d4:aa:0f:ff:a1:18:07:d7:e4:2f:c5:f6:21:92:c6:52:
bc:7d:68:6c:55:90:ec:54:d3:b4:1c:2d:ab:38:de:d3:ea:b2:
8f:1d:f9:0b:fa:06:77:9a:49:99:18:34:9f:26:1f:eb:af:ee:
a7:c2:9a:83:2a:fc:00:20:07:5e:d2:84:a2:68:75:30:63:db:
9d:79:e8:c7:52:9c:da:bd:ac:dd:09:34:de:3a:58:95:c2:67:
8a:27:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:49:04 2025 by rpki-client