Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: UwEjLfTJIxrgeNBaG0OuFpziUw+dtr656Ko6P1C3sic=
Subject key identifier: DD:AD:F4:31:DC:01:6B:44:28:52:A2:E0:1C:9D:4A:F4:02:A8:8D:C6
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 0196BE5C6548C159DE32705F156EFEED2B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0548
Signing time: Sun 11 May 2025 08:00:48 +0000
Manifest this update: Sun 11 May 2025 08:00:48 +0000
Manifest next update: Mon 12 May 2025 08:00:48 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: WKM9q3tUnfcQ3s3oly6BkcJVMf6hbo7RhKBCc14fEJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:65:48:c1:59:de:32:70:5f:15:6e:fe:ed:2b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: May 11 08:00:48 2025 GMT
Not After : May 12 08:00:48 2025 GMT
Subject: CN=ddadf431dc016b442852a2e01c9d4af402a88dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a6:fc:25:58:c5:d6:bd:50:74:65:be:fe:ac:
de:9b:f1:c7:94:ba:c4:d9:db:cf:63:45:f4:57:7f:
0a:8a:a8:84:9a:a7:99:33:56:b9:83:26:ef:2f:d2:
56:b9:a5:9e:f1:0a:6c:36:3c:1c:a1:78:1f:0a:41:
0b:7f:84:cb:82:f0:7f:81:74:25:92:b2:fd:62:45:
4c:2a:8a:fd:ff:5d:0f:a6:40:97:40:25:b0:5e:41:
9f:86:3d:db:11:c2:d0:a5:00:b6:dd:72:14:a8:f6:
2d:3f:42:3a:e6:56:24:43:aa:0f:c5:d1:b7:14:90:
85:ac:b5:ff:a0:d3:fa:32:13:68:88:74:8f:ab:a9:
30:02:cc:c7:d6:cb:4f:d1:4d:eb:de:b9:0f:a5:3d:
0c:37:12:2e:fe:27:97:fd:b7:c1:d1:40:14:dd:ce:
9d:20:80:51:30:df:73:a7:bb:e7:88:5b:1c:62:5f:
24:31:2c:00:d0:ac:32:7c:3d:d1:39:8c:ed:f5:25:
ea:91:ae:e0:be:42:ee:2f:54:73:37:5a:54:f6:35:
04:56:c1:bc:74:eb:d7:2b:5b:67:be:d5:d4:00:80:
bb:20:f9:92:b5:4a:6c:e7:97:a0:1d:1e:78:ca:4c:
0e:c4:c1:f8:88:82:de:5a:75:d6:09:70:9c:16:c1:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:F4:31:DC:01:6B:44:28:52:A2:E0:1C:9D:4A:F4:02:A8:8D:C6
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7d:35:aa:b2:ad:f1:70:7b:2d:5d:5b:0b:ab:f2:ce:3a:b2:
4a:c3:5c:ea:50:11:98:53:30:ba:86:e5:0f:0d:61:08:8c:94:
8b:cd:a8:b7:d3:4f:c9:8b:9f:4e:8a:14:97:e8:0b:16:77:9c:
af:ac:2c:71:c9:e8:5a:f2:8d:a4:c5:8a:a0:c0:9b:fd:c3:1e:
a4:c8:07:b3:79:15:8e:90:37:6d:f3:a4:7f:65:57:ed:3f:75:
d8:ea:ed:fa:cc:5a:3e:29:c4:76:de:7e:73:0a:b4:31:3b:34:
14:f8:fc:5d:0e:ce:93:93:59:20:7a:82:6d:da:b1:b9:27:b7:
e5:56:55:39:a0:27:5d:04:cf:fb:ef:36:e1:83:59:d6:d4:94:
9b:0e:41:ff:0c:2c:00:d3:49:3c:03:e2:a8:20:ef:99:4a:dc:
3a:0f:72:1f:47:f0:c0:bf:3c:56:1b:88:f9:13:9c:a1:4f:39:
ec:45:3e:e8:27:a3:91:6f:12:89:a6:c3:0b:2b:8d:f6:f9:c7:
7e:50:63:af:92:d2:79:a4:82:9d:00:13:70:f0:47:c2:7c:cd:
17:8b:a7:e2:cb:0c:21:9c:3f:13:ef:c3:5b:c8:32:ce:fc:3b:
e4:6a:f9:a3:c9:01:c5:6a:31:76:18:58:52:87:30:53:fd:8c:
7c:c3:60:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:00:57 2025 by rpki-client