Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: qqxG0IVbyPSbA87O2yf/li+UEaTGBiMeoBYlI/dhJQY=
Subject key identifier: FF:4C:C0:59:97:E9:50:0F:C0:F7:D1:B1:16:25:A4:69:9B:52:D0:7A
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 019654C9EBCEF505DF95002BB183F5D343D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 1428
Signing time: Sun 20 Apr 2025 20:00:41 +0000
Manifest this update: Sun 20 Apr 2025 20:00:41 +0000
Manifest next update: Mon 21 Apr 2025 20:00:41 +0000
Files and hashes: 1: ZSYjjoE3tBto8BluSqunJgk7oHQ.roa (hash: iHTHcMwi7ntDSxANO5civkuDptItJ8z7l7j08RXxzHg=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: R/3REUMrY/13HNiTb87UcS+fCth1WWRtYZpZbfXVJyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:eb:ce:f5:05:df:95:00:2b:b1:83:f5:d3:43:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Apr 20 20:00:41 2025 GMT
Not After : Apr 21 20:00:41 2025 GMT
Subject: CN=ff4cc05997e9500fc0f7d1b11625a4699b52d07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:ba:ea:fc:94:8e:0d:6c:d3:bd:64:1c:60:
cf:a0:a5:66:1c:c0:61:10:6a:35:13:03:0d:0a:ce:
d4:fe:4e:25:f6:d6:57:6f:7e:f0:9c:24:1c:f5:9d:
ce:ec:aa:c2:1a:f4:4e:05:5e:6f:8c:87:00:41:40:
99:cc:e1:90:79:92:e5:1a:3f:ee:df:45:b9:45:4a:
0b:81:90:23:2b:2e:a2:89:e6:05:fd:32:d3:28:53:
fb:48:59:2e:e1:ff:b0:89:09:d0:61:cd:21:03:a8:
0c:67:d5:9b:8e:d4:87:42:bc:2b:9a:8a:a9:53:ba:
03:61:f8:02:1f:3b:a1:6b:47:b7:ed:31:eb:fe:51:
66:3b:5c:5a:dd:e1:61:24:f8:87:b5:93:30:03:7d:
22:b8:e7:74:76:21:1c:54:9f:aa:1d:06:24:d3:e7:
1c:dd:b5:49:f2:c1:e7:4a:a9:74:8d:5b:9a:cb:9b:
92:91:95:50:90:c2:21:89:88:08:9c:1e:62:d4:fb:
93:ee:12:4e:95:53:06:e2:c6:de:96:26:20:20:1a:
30:3f:4c:36:0a:e9:7f:5d:5e:da:3b:bf:19:5c:ea:
f5:0e:e7:71:be:7f:e8:0f:d6:30:9d:d2:69:0b:1f:
fd:d1:80:c2:36:f3:2b:31:32:ba:71:09:b9:9b:55:
ba:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4C:C0:59:97:E9:50:0F:C0:F7:D1:B1:16:25:A4:69:9B:52:D0:7A
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:7e:26:1e:1a:7b:13:7d:87:13:0d:13:cd:0a:ef:bc:9f:
d8:72:1c:ac:27:bf:ec:48:75:f7:27:34:17:6c:15:ee:b8:aa:
86:5b:70:b5:e6:52:13:70:15:e2:74:8e:61:38:da:2b:8e:62:
ac:69:82:4c:94:e8:fe:ca:55:37:bd:4c:b8:2c:81:22:45:34:
2b:8f:ea:92:a1:c0:bb:6a:42:16:5e:f4:de:6d:71:0c:84:54:
68:50:2b:8a:13:d1:bc:a1:2b:0e:b6:1d:75:f3:a5:fb:fa:07:
46:9f:25:48:79:d1:66:82:65:a5:08:f7:3a:24:2f:87:20:54:
33:23:38:3e:70:66:72:2c:4c:38:7c:a8:27:c1:9b:bb:07:94:
b2:e6:d2:83:42:4e:fd:fa:4a:99:5e:18:17:f8:b7:66:0f:75:
e3:72:d8:1b:24:dd:da:5b:23:cf:f2:b5:e2:db:78:b6:ea:43:
2c:86:25:1a:ad:35:78:2a:01:d6:83:4d:ad:2a:4d:56:6d:93:
89:5f:3f:63:e4:aa:e4:44:57:94:17:e7:76:6a:f8:d7:d8:12:
bb:8a:29:96:3c:d5:1a:77:30:d7:f1:35:a5:72:6b:03:e7:68:
dd:3c:0e:b7:dd:5c:4f:49:18:e3:04:fd:17:57:6a:dd:09:86:
1c:1b:46:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:55:03 2025 by rpki-client