Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: KlsVi9J9y9dVG9Hcr4fKoaYn/1ydyiLSZGgEr2iE7C8=
Subject key identifier: 0E:F1:68:42:6F:DD:26:38:A3:2D:D5:D2:F6:D0:2E:F4:D8:F6:3B:E2
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 0196BA116274FEFE7BFEBED1A845E263442B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 04E2
Signing time: Sat 10 May 2025 12:00:23 +0000
Manifest this update: Sat 10 May 2025 12:00:23 +0000
Manifest next update: Sun 11 May 2025 12:00:23 +0000
Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: KnNpaGIomXuHFRCjJmsxyzd0+vChRCjOFMwkt6xPaZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:62:74:fe:fe:7b:fe:be:d1:a8:45:e2:63:44:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: May 10 12:00:23 2025 GMT
Not After : May 11 12:00:23 2025 GMT
Subject: CN=0ef168426fdd2638a32dd5d2f6d02ef4d8f63be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:ad:e6:f2:ea:3b:ab:39:67:65:9a:68:7d:
f2:64:e8:61:5d:11:07:b4:d0:7d:5d:cd:f8:21:1e:
df:51:d4:e7:46:5a:d3:b3:3a:9a:06:1e:34:6d:b7:
91:b5:a8:23:0b:e3:aa:84:fe:fa:d0:3d:ac:35:27:
2c:4a:a9:f0:52:3e:aa:a7:5f:f3:36:bd:1c:12:26:
db:f0:40:ac:ff:4a:42:68:e0:34:2c:98:cd:01:c6:
81:d6:74:fe:ba:8c:e5:63:a8:18:1f:5e:d4:2c:03:
3f:c4:91:3a:37:25:ce:f5:d6:a7:c0:80:60:e4:d7:
4e:5f:92:37:9c:2e:59:8c:01:b1:c9:f7:da:d2:8b:
1e:b6:10:5a:18:9a:8a:bb:66:9c:c8:ca:e1:03:9e:
01:64:14:93:cd:45:ed:51:6b:16:da:a2:cf:6d:ab:
d0:fc:a0:64:b8:b5:7c:05:de:bf:f0:1c:85:1c:b2:
a9:8a:0d:3a:be:0e:e8:ff:ec:8d:fc:ef:62:00:7d:
83:3b:7a:c1:8d:25:3f:08:c9:06:b8:13:b1:d1:33:
ad:87:07:4c:4e:78:ee:e4:6a:9b:6a:ab:2d:ff:58:
69:57:95:cf:fc:5a:dc:83:9a:9f:4a:03:c2:c1:97:
2c:12:29:ad:7d:0c:a9:f2:39:68:c5:b3:6f:c5:0a:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F1:68:42:6F:DD:26:38:A3:2D:D5:D2:F6:D0:2E:F4:D8:F6:3B:E2
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a5:17:df:2f:20:c5:a7:ef:e3:12:eb:e4:96:9f:6c:04:ba:
c7:61:08:c5:4e:ef:c2:75:ca:48:e8:7a:53:0c:6e:99:0c:17:
88:b4:bc:2a:2e:c9:4c:fb:18:a5:c8:b7:e5:9b:df:14:8a:ab:
3f:27:76:3b:4d:95:ab:f6:86:1b:c7:66:9f:56:49:8f:82:10:
87:3a:fa:9b:b7:e7:d0:7d:61:93:28:a0:1e:86:3e:23:be:e0:
8c:f6:e6:fe:36:b2:38:3b:33:fb:d7:c1:e7:d0:e7:3e:22:f9:
95:81:cd:fc:ea:b4:40:79:4a:92:b6:0d:32:80:4a:8f:67:cf:
ef:00:ef:b2:a2:e8:54:05:29:22:41:34:4c:0b:e5:cb:ff:35:
5e:bd:b1:61:07:a1:df:22:e5:54:a0:49:21:06:ea:f4:95:52:
ae:b7:18:87:1a:23:61:b8:fe:26:7a:36:37:a9:0d:ce:db:c7:
f5:82:68:ed:9c:06:61:f7:6c:38:24:89:2f:c0:eb:10:96:14:
99:d4:68:21:d6:11:9a:15:e6:13:97:24:d5:13:cb:cd:fc:4b:
0d:c2:c9:2a:4c:20:48:6b:88:00:4b:0b:40:a6:48:12:8d:c6:
bf:b1:38:b7:ad:b8:a4:df:ed:3d:b5:20:2e:88:4c:2b:8e:3c:
8b:71:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:14:33 2025 by rpki-client