Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json)
Hash identifier: fB2SHBQcOPtOXKPSh4I2pRkMUAb9QslGZ0bOttFKO0M=
Subject key identifier: 3D:95:95:90:10:AE:79:94:3B:6E:BF:E9:2D:7A:7B:E0:EC:3D:2A:7C
Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Certificate serial: 0196C42785635E20EF1B73EA1DB6B75F82F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
Manifest number: 11F6
Signing time: Mon 12 May 2025 11:00:46 +0000
Manifest this update: Mon 12 May 2025 11:00:46 +0000
Manifest next update: Tue 13 May 2025 11:00:46 +0000
Files and hashes: 1: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: lQmnBrCaqSpmNwQEehYk4v34Ubsf/0NSgYckFrKfrPA=)
2: cD0i6eXUEb95MRC9zt2P-QsR-zI.roa (hash: bwRfJD4nIDDz+Ohj/YcPEu2i5IBHAbvcA7uyG/Ew8EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:85:63:5e:20:ef:1b:73:ea:1d:b6:b7:5f:82:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a
Validity
Not Before: May 12 11:00:46 2025 GMT
Not After : May 13 11:00:46 2025 GMT
Subject: CN=3d95959010ae79943b6ebfe92d7a7be0ec3d2a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:84:ac:6f:4b:31:dc:63:6e:d6:a9:e2:a9:52:
20:d2:53:7f:cf:32:b8:51:2a:81:d2:5a:ce:81:88:
bc:de:dc:46:25:3a:96:d0:9d:27:5d:69:a1:e3:b8:
bb:78:a6:a6:12:1f:8d:13:47:bd:f1:27:75:70:45:
e3:2a:83:0a:be:f1:80:8c:76:d8:16:3f:3b:73:7e:
09:be:90:43:a2:5b:c8:d1:6c:8e:81:53:92:e3:dd:
a3:cf:f6:f5:09:ca:9a:af:91:e5:5e:5e:1a:0f:ab:
2b:0c:79:0a:34:3d:54:d9:6d:db:60:17:e4:8a:4f:
d1:2a:f1:62:4e:73:af:d5:6e:75:8e:cf:54:ce:2d:
c6:88:17:4e:83:fa:2d:bb:77:c2:cb:2d:eb:00:a5:
79:bf:9f:de:10:09:7c:37:15:d2:bb:c5:02:1f:1a:
59:e1:0c:f1:82:b5:5a:43:b9:e4:47:83:1c:f6:fa:
5c:fe:2a:9a:e5:5b:59:73:6f:e2:62:4d:63:c3:36:
ac:f1:9b:5d:3c:55:00:b6:54:de:42:f0:18:a6:4f:
1b:7b:f4:dc:00:88:de:ec:0e:d6:1b:b8:ff:aa:fe:
6f:ed:33:10:3b:bd:58:49:73:6f:48:68:d6:51:90:
01:9f:fe:a2:b0:a8:ed:ec:5f:16:f4:7b:96:dc:ee:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:95:95:90:10:AE:79:94:3B:6E:BF:E9:2D:7A:7B:E0:EC:3D:2A:7C
X509v3 Authority Key Identifier:
keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:64:25:b3:75:da:31:e5:ab:99:46:e3:f5:81:0d:58:14:1b:
ac:de:d2:8c:8d:94:8d:1a:de:b3:eb:55:18:90:f3:ba:97:0a:
0f:aa:b2:0f:84:37:b2:02:55:9b:27:c6:11:f8:5c:0a:87:91:
15:a6:bb:f4:73:18:84:a1:41:61:6d:e0:3b:8a:55:e6:36:7e:
7e:da:82:73:49:38:6e:21:72:2c:84:0b:42:6b:a3:98:cd:cb:
32:1f:69:09:d3:ba:10:79:c5:8b:6c:75:a9:90:04:60:35:fa:
27:30:6f:b0:89:03:5b:7a:4f:db:5e:4f:a1:4f:9b:db:1c:4b:
94:54:50:34:d1:b4:0d:57:dd:27:85:a6:b4:5b:bb:a8:d6:10:
c8:5b:eb:9b:6c:13:60:89:1a:ed:e2:44:b7:92:c4:f9:62:61:
84:a6:54:db:dd:9c:e7:33:67:65:9a:66:5c:cb:73:b0:e3:31:
10:a7:e3:d6:de:89:20:3d:6e:f7:4d:06:ee:1b:74:a4:cb:e7:
c1:e9:e6:1f:46:c7:ce:ff:17:51:e5:47:ed:ce:55:27:85:2b:
ee:15:b7:3a:b1:b5:ae:45:4d:04:99:8b:d5:7d:95:d4:ed:3e:
33:b2:55:bd:4c:b1:f9:f2:73:e7:1c:0a:1f:5a:fb:1a:02:13:
e2:8a:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:32:06 2025 by rpki-client