Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: g8S0Dbzk0LJZ7NZfoi/AnBt5N6U6pTZIBBTJIgK5v4c=
Subject key identifier: 1B:70:12:36:2E:E6:63:E3:04:98:36:85:B5:13:39:21:E2:06:4A:21
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 0196B710A03DFB7E1911A3FEADEE1D4E1B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 1530
Signing time: Fri 09 May 2025 22:00:42 +0000
Manifest this update: Fri 09 May 2025 22:00:42 +0000
Manifest next update: Sat 10 May 2025 22:00:42 +0000
Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: GLv5aBK0Oml+ldv5+7qbxW1i7rH3leU8TZt8t2ILhDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:a0:3d:fb:7e:19:11:a3:fe:ad:ee:1d:4e:1b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: May 9 22:00:42 2025 GMT
Not After : May 10 22:00:42 2025 GMT
Subject: CN=1b7012362ee663e304983685b5133921e2064a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:4b:1f:09:41:39:0e:17:ab:d8:9f:d8:19:
27:88:36:71:39:b3:b6:3c:58:57:3d:50:e4:bd:9c:
be:a9:0e:65:69:13:3f:fe:11:8b:f9:18:4f:41:aa:
98:fc:14:6b:61:8f:2e:02:3f:ee:3b:61:db:12:bb:
ed:a5:c8:1e:4a:3f:e1:63:cb:5d:50:3f:6f:0a:b5:
3f:9c:c4:f4:20:89:bc:44:42:a3:64:d6:5c:70:28:
40:67:2c:29:84:fc:f4:af:97:36:af:94:c0:da:bd:
aa:10:f6:97:f9:29:e0:f0:5e:fe:e7:74:c3:68:e2:
a6:e9:b9:3b:1e:34:22:43:02:50:b5:0b:e5:ef:86:
2a:08:c0:d5:48:bd:e3:31:a3:7f:6c:2a:95:29:31:
57:87:60:b4:b7:42:b7:16:86:0f:07:35:ab:a1:8a:
31:b2:37:82:02:0b:44:0f:cb:0b:ca:2a:a6:d8:26:
06:2c:44:98:db:57:c0:83:b6:26:47:6c:f7:51:6d:
92:d4:bb:a0:bb:6b:2e:d1:bf:0d:8a:84:89:51:23:
ff:5f:7d:4f:8c:3d:75:bb:5f:72:ad:e2:92:75:f8:
18:84:47:d6:8a:1f:90:2a:04:04:a1:9f:b8:e8:0b:
65:8a:1f:ed:67:84:81:9c:a6:e6:8c:40:f3:cd:81:
25:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:70:12:36:2E:E6:63:E3:04:98:36:85:B5:13:39:21:E2:06:4A:21
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:78:0b:3a:a7:2e:cd:1b:e0:30:46:85:7c:b6:fd:7a:d7:44:
7e:ef:2c:3f:52:31:32:a3:05:33:ee:a0:f6:11:1c:f5:28:e3:
c6:1c:34:96:50:ff:ae:66:79:aa:03:96:0a:bf:ac:de:4d:72:
a4:88:f0:09:f6:cc:ba:de:66:1c:42:b6:90:f9:f8:2b:12:da:
be:a3:be:f4:0a:9b:40:5a:3a:13:5b:4e:21:4a:6d:53:f7:00:
05:79:58:10:62:8a:fa:20:4f:68:82:28:8b:cd:84:84:e2:9b:
2b:42:6f:a9:29:72:0f:22:19:02:f8:ea:62:e5:d8:e7:dc:a5:
73:f3:4d:1a:cf:c0:66:93:6e:9e:fb:56:81:f9:ac:0f:c9:37:
99:26:ce:d4:b3:37:ef:56:bd:99:e4:bc:d0:79:7d:f8:cb:19:
ef:83:3d:d7:6e:59:fb:52:fd:f1:38:12:f6:19:10:d0:b7:52:
e7:16:10:1c:cf:47:15:6f:16:89:dd:3b:fa:4d:61:dd:87:3e:
7a:9e:84:37:96:75:0e:01:41:e5:82:cb:42:e7:9e:9d:9e:4d:
41:54:58:ff:7a:4b:00:32:cf:44:60:17:e9:0a:7e:2d:2b:30:
e4:8e:55:c2:45:41:9b:fb:b4:2e:36:9d:ca:c8:ac:09:51:67:
5b:0e:b2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:34:33 2025 by rpki-client