Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
File: zxT86bGaXupTLhfYPajB3NHeGMA.mft (raw, json)
Hash identifier: AzDMpitkHdRlPBA7lhnUZs++yJEdQQ6pTFtKoQBZ6fI=
Subject key identifier: CC:23:5E:7F:14:C8:4D:A0:FD:A1:9A:59:DC:E0:9B:07:F5:F5:AE:E9
Authority key identifier: CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
Certificate issuer: /CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Certificate serial: 01969FACEE5A3B7CE57B87847D37EE184FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
Manifest number: 0345
Signing time: Mon 05 May 2025 09:00:32 +0000
Manifest this update: Mon 05 May 2025 09:00:32 +0000
Manifest next update: Tue 06 May 2025 09:00:32 +0000
Files and hashes: 1: dcoiHdIJxEh6SkH8HdY6P-DUj4g.roa (hash: 4pgebo0CzF4j1xyhoIwSQdxS46NhQBC6tAsYICm6rWg=)
2: zxT86bGaXupTLhfYPajB3NHeGMA.crl (hash: h+JwKSm/5g9EUfZrVPqZIUsDhctxqdouJvILFH7PznQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:ee:5a:3b:7c:e5:7b:87:84:7d:37:ee:18:4f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf14fce9b19a5eea532e17d83da8c1dcd1de18c0
Validity
Not Before: May 5 09:00:32 2025 GMT
Not After : May 6 09:00:32 2025 GMT
Subject: CN=cc235e7f14c84da0fda19a59dce09b07f5f5aee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:f6:5d:04:3d:6d:59:ab:37:8e:d0:b4:8a:
c0:52:06:5f:24:cc:37:5f:8d:5a:04:fd:a8:32:2d:
c1:b2:07:14:36:52:e0:fb:ba:9e:cc:18:a5:1f:dc:
f5:00:71:59:77:b0:e2:e3:c8:58:f5:f7:f0:0f:34:
8d:75:61:56:0c:18:af:2f:cc:1f:1a:98:65:9e:51:
a9:d8:b1:14:67:15:00:70:ed:c7:c0:ea:0f:42:17:
e1:27:66:a9:18:71:ac:ba:54:d8:a8:35:1c:f1:a6:
1c:0b:23:76:81:69:58:cb:75:aa:3c:b9:6f:0c:69:
cc:c4:d5:44:a8:50:e9:d6:fa:0c:e1:cd:79:fa:07:
e5:1f:02:00:20:dc:4f:41:a6:55:fd:e5:8e:cc:90:
df:12:29:dc:3c:8f:e2:89:f8:88:e9:eb:f6:53:44:
52:6c:bf:bb:3e:16:75:8c:70:cc:b7:1c:f8:7a:8b:
c0:cc:56:a1:55:3a:41:3a:1d:13:8e:15:2b:26:3d:
f7:27:8e:ba:0d:5a:37:fd:0f:62:c9:a9:85:b9:a3:
c1:29:30:63:3c:c8:52:3b:8b:85:78:1a:08:31:bb:
1b:4d:57:e0:6b:ef:21:18:fd:3c:4a:b8:e5:a9:73:
01:ae:ed:cc:80:78:f2:36:1a:3e:50:50:82:01:fb:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:5E:7F:14:C8:4D:A0:FD:A1:9A:59:DC:E0:9B:07:F5:F5:AE:E9
X509v3 Authority Key Identifier:
keyid:CF:14:FC:E9:B1:9A:5E:EA:53:2E:17:D8:3D:A8:C1:DC:D1:DE:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxT86bGaXupTLhfYPajB3NHeGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ad3ae5-ce2a-485f-aab3-59c1087e4856/1/zxT86bGaXupTLhfYPajB3NHeGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7f:c3:39:27:32:54:09:31:ba:38:be:de:6e:c2:7d:2e:66:
75:02:28:cd:db:1e:43:79:cf:71:b6:ef:d1:d9:7e:5b:08:ca:
b2:91:36:ab:97:f4:a5:78:15:d3:3b:86:78:07:65:ab:3c:13:
41:7b:60:68:65:e3:75:cf:4b:9b:f3:3f:05:ef:8d:a0:cf:4c:
87:30:fe:f4:70:78:d6:f0:e6:f7:ff:4c:a9:eb:48:76:ff:ea:
94:f6:a6:e0:11:ee:d4:0d:52:c5:2a:56:9d:15:3f:79:20:87:
5b:b9:d4:bf:2b:98:da:5b:09:bc:50:39:1b:18:79:bf:49:67:
ae:0b:c4:9e:43:12:b5:14:2f:17:8d:5e:55:f1:5f:65:91:0f:
92:9d:c7:eb:7c:4f:d0:9d:7f:d2:60:24:f3:9e:54:98:87:aa:
9c:76:19:3f:ba:2c:0c:87:91:e1:66:87:ef:1c:14:0c:1f:df:
86:f4:ab:b2:5e:59:99:11:f7:cd:19:c8:a9:22:f7:a6:3a:4b:
01:47:30:d3:1b:8b:ca:55:f4:36:4d:af:5a:e8:37:3a:b0:88:
c2:1c:01:3a:d2:a2:75:8b:21:46:aa:74:c7:63:f3:80:5b:f5:
9d:0d:00:b2:ad:74:1e:b3:49:3f:bd:7f:4a:09:ea:47:3e:6b:
ee:a1:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:33:03 2025 by rpki-client