Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File: zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier: a2G2oZcoIRYuBdruxO+39kH7eVEwNJ+FE7ijFrAXzFU=
Subject key identifier: 7C:C5:68:6A:8E:F6:7D:96:A8:9F:FD:97:96:02:6D:86:8A:E5:49:89
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer: /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial: 01965BA7FBDADA650FA3819833B16202195C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number: 0F8B
Signing time: Tue 22 Apr 2025 04:00:57 +0000
Manifest this update: Tue 22 Apr 2025 04:00:57 +0000
Manifest next update: Wed 23 Apr 2025 04:00:57 +0000
Files and hashes: 1: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (hash: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=)
2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: vH+1/6rbOK7R9wUxsTGwG2RqtuG2S9WDJh9SQkJIbWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:fb:da:da:65:0f:a3:81:98:33:b1:62:02:19:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Validity
Not Before: Apr 22 04:00:57 2025 GMT
Not After : Apr 23 04:00:57 2025 GMT
Subject: CN=7cc5686a8ef67d96a89ffd9796026d868ae54989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:be:ab:f9:e5:38:bb:8b:25:d5:ac:60:ae:ed:
55:de:8f:3b:e2:bd:68:df:5f:83:b8:ba:ea:53:0f:
83:19:12:ec:8e:50:6b:a2:f3:44:d1:3d:9d:f2:44:
f4:09:9f:3a:d5:0b:37:3f:a1:ac:12:bc:1a:1c:35:
1e:c8:d3:ce:80:ac:ce:2e:cd:08:f2:93:aa:02:4f:
5b:54:e5:36:82:83:62:ed:fa:82:85:e3:cd:60:24:
c8:55:8c:93:4e:cf:9d:d9:a8:15:66:76:16:ea:b5:
c6:bc:9e:28:e2:6e:88:48:ac:34:4b:57:75:3b:12:
23:44:9c:2c:49:c8:48:f3:a8:8a:60:c1:bf:c6:22:
93:8e:17:a4:06:0c:5f:a2:22:43:e8:78:aa:33:9c:
04:2a:55:14:83:50:83:cb:7e:b4:b3:93:1c:77:62:
e5:fd:0c:45:0d:a3:e1:ce:f5:da:c3:41:5f:96:bd:
56:45:5e:0b:27:fb:45:90:10:cf:4e:f1:ca:f6:c7:
e3:a5:80:62:ea:17:06:39:46:dd:2f:06:28:cc:87:
37:81:af:26:6a:56:36:18:fa:09:44:ce:c1:ec:16:
0d:3b:fe:e1:22:ff:92:07:23:ac:f8:d8:c9:71:85:
66:61:e8:49:07:19:ed:a5:29:91:f5:f5:a5:cf:8c:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C5:68:6A:8E:F6:7D:96:A8:9F:FD:97:96:02:6D:86:8A:E5:49:89
X509v3 Authority Key Identifier:
keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:07:11:44:1f:01:75:cc:be:52:da:a4:87:33:d0:1a:ee:1a:
5a:ec:03:8d:33:12:37:0b:8f:df:49:a6:78:72:f7:ed:2e:c8:
b4:8e:9d:e4:75:c7:5f:f5:06:1f:fa:28:40:e4:f7:6b:81:7d:
60:83:31:d6:fc:35:38:33:17:5b:2a:5e:2c:ce:09:ef:ad:86:
90:98:ec:2f:61:1e:a2:3c:30:8a:81:f9:f0:a1:ab:e8:9f:16:
cc:a9:7b:30:d7:01:a3:a3:94:bd:ec:51:ab:08:bf:b8:84:78:
20:bb:85:97:e4:28:ea:39:8c:33:10:d6:d6:39:c2:b9:15:f9:
7a:12:50:c7:cc:2e:b0:6f:66:97:e4:52:c3:03:5f:92:8e:3c:
cc:96:5e:f9:a6:ca:ec:80:3c:91:23:8d:e1:c9:b4:1e:10:75:
e7:f4:df:91:5d:ed:00:78:3c:62:34:ca:c2:7d:e6:89:44:2a:
f1:0a:bb:94:63:63:17:d3:8a:d2:31:01:09:04:0a:79:55:31:
75:6e:f5:90:46:c9:b1:52:f8:ca:4b:a7:d4:96:62:38:8a:1a:
50:3b:10:a9:c8:a9:99:69:6b:eb:19:a7:36:39:14:24:70:0a:
67:fd:57:98:4f:c2:56:cb:97:fb:36:28:3b:2f:3c:ac:f9:0c:
c1:0a:2f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:20:36 2025 by rpki-client