Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
File: zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft (raw, json)
Hash identifier: TYxB9m3n8XZRX/zbgcQqbyAnllfgb7qSWuW4mMoHmpo=
Subject key identifier: CD:DF:4B:90:A9:3C:4B:56:D3:69:77:C3:15:39:F8:34:F5:94:5A:B9
Authority key identifier: CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Certificate issuer: /CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Certificate serial: 01965680F52A87C193F9C9C29053C3BF8F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 04:00:13 +0000
Manifest this update: Mon 21 Apr 2025 04:00:13 +0000
Manifest next update: Tue 22 Apr 2025 04:00:13 +0000
Files and hashes: 1: WMmVXxLBNxJnZE-IVz74wBzTPGY.roa (hash: 8cKtSjQsmp93ydLLkC85Xv608/v/eBo4I+GY+4AHbek=)
2: zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl (hash: VEL4wfstFgapkLL6XTqkyxTZbPTWsjMfHapns5n54fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:80:f5:2a:87:c1:93:f9:c9:c2:90:53:c3:bf:8f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Validity
Not Before: Apr 21 04:00:13 2025 GMT
Not After : Apr 22 04:00:13 2025 GMT
Subject: CN=cddf4b90a93c4b56d36977c31539f834f5945ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:a5:2a:19:51:e2:5b:45:f9:4a:62:cf:2c:
7b:83:6a:b3:d1:17:97:1d:cc:37:00:eb:78:7d:bd:
16:0a:e2:69:1d:4c:5b:32:ac:7a:ed:82:4d:ea:e0:
4f:24:01:a0:19:31:e9:09:ec:c7:ad:31:98:e9:be:
db:95:d3:8f:cf:ff:c8:81:af:54:8c:23:56:d2:5e:
2e:d8:3e:8a:36:f3:14:7d:ff:61:38:75:ce:1e:73:
67:ae:b6:49:a6:8a:d2:46:c3:55:93:bd:26:87:1d:
62:25:1b:63:9e:ea:21:86:39:31:43:0a:b8:6f:95:
b2:60:24:40:f5:be:b9:fe:b2:8a:52:6b:14:aa:6c:
6f:3d:34:c6:3a:1b:9c:b5:4c:f1:7a:57:66:96:de:
5a:38:e8:68:04:ab:f6:71:59:34:ab:b2:25:f4:68:
20:06:00:91:55:a9:76:b1:89:85:9d:35:3e:b3:c0:
6f:e4:48:be:9b:79:4c:1e:f6:92:79:39:da:40:b4:
50:7a:20:0a:43:dc:ec:66:da:85:81:c6:7f:f2:55:
69:89:b5:ea:f8:71:d7:9b:3e:a3:5a:64:c7:5f:82:
c5:db:ce:f1:d3:12:e7:ae:fb:36:69:12:43:25:5c:
5a:0a:db:3c:a8:e8:5a:85:ac:e9:7e:5b:7b:dd:43:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DF:4B:90:A9:3C:4B:56:D3:69:77:C3:15:39:F8:34:F5:94:5A:B9
X509v3 Authority Key Identifier:
keyid:CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:28:28:2c:0d:a9:5e:17:87:08:f1:28:db:97:07:26:31:95:
0a:f1:00:69:d2:f9:21:c4:13:6d:f5:04:be:d4:9d:25:74:7d:
3f:58:97:ac:2c:f6:df:be:e0:d8:2a:32:f6:8a:e1:68:d1:bd:
ae:01:cc:35:29:e2:75:74:19:6d:f3:f8:11:81:03:84:76:a2:
52:bd:96:e2:e0:2b:6d:26:05:94:47:eb:3c:24:a9:b2:8a:58:
c6:b2:26:41:30:2a:78:76:a8:69:11:a0:c8:7d:2f:8b:e1:8f:
ab:bc:58:cb:c9:dc:e5:d0:25:83:dc:e9:ba:3a:cd:32:d3:3f:
8d:d9:58:76:c7:46:96:f0:bf:55:6c:1b:c1:7a:0b:45:79:7e:
3e:95:47:b2:c7:48:4e:b3:41:b4:55:0b:19:6a:8f:b9:e7:ec:
f0:d3:24:87:f0:42:45:09:95:a4:82:d9:bf:3d:8d:20:65:b0:
d3:d0:9d:9f:9f:17:9b:93:fd:ee:96:a2:e1:38:5f:8c:d4:09:
15:df:98:24:b2:aa:c0:d0:0b:f9:5a:a6:44:f0:eb:55:26:7c:
f3:81:2b:02:53:c3:c0:ac:3c:96:71:cc:16:f9:66:8e:0e:62:
86:9d:59:9d:86:c8:03:28:37:6e:82:c3:e5:f8:7e:0d:cc:0d:
e0:e7:a3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:34:20 2025 by rpki-client