Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json)
Hash identifier: Upygb9u+IwRYhdpFfYZpBLR3cIcw5vb9EA8fkBNq5A0=
Subject key identifier: BC:D5:0C:E0:34:C3:6D:8B:3D:1F:4A:EB:2D:D5:CB:7F:EE:8C:29:5E
Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Certificate serial: 019644E8947A8D52436CA7099A771DD65E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
Manifest number: 1490
Signing time: Thu 17 Apr 2025 18:00:15 +0000
Manifest this update: Thu 17 Apr 2025 18:00:15 +0000
Manifest next update: Fri 18 Apr 2025 18:00:15 +0000
Files and hashes: 1: 3_Faj2Bx30QMBQ_9fq1w0mDX6GU.roa (hash: r9nE6BN+YAUaWRC/VJWHKz/x1whGDYTMWiwj3TDgzA0=)
2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: QLdA0dTN/rgvNJOuuPH66D0WDHvmheRtIig/3JPf8ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:94:7a:8d:52:43:6c:a7:09:9a:77:1d:d6:5e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238
Validity
Not Before: Apr 17 18:00:15 2025 GMT
Not After : Apr 18 18:00:15 2025 GMT
Subject: CN=bcd50ce034c36d8b3d1f4aeb2dd5cb7fee8c295e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:d3:1e:31:d3:57:36:e5:55:1b:86:e7:17:
d5:10:9d:32:21:d7:d7:43:e6:b8:2e:ba:78:cd:bc:
32:19:8d:79:23:19:5b:00:8c:f4:e6:69:6b:c2:d6:
e0:d1:62:4d:39:af:4f:fc:e3:82:d4:4a:91:83:f5:
ee:12:6c:fe:2b:c9:36:01:61:dc:1e:9b:8f:9d:84:
05:ca:8e:04:fb:ce:cc:35:b0:2f:ce:89:7c:30:08:
6d:92:ea:84:16:5c:dc:75:0e:47:fd:6e:88:45:77:
80:72:a2:45:38:7e:e4:53:80:94:71:9b:87:51:3a:
e3:2a:4d:c5:b9:c3:2f:ef:9c:11:b9:63:9f:19:88:
34:1f:92:23:f4:61:20:b6:ae:58:d5:c1:9f:af:85:
03:36:ab:ac:4b:e5:b0:2c:25:03:c9:bf:6e:dc:9f:
1f:40:86:06:b3:ce:64:ed:eb:7a:84:5f:8c:0d:59:
bc:b7:f7:d3:49:f8:d8:43:65:8f:e0:8e:42:84:11:
76:cf:51:19:cd:2b:d8:d7:f0:9b:48:96:87:72:70:
01:54:67:db:b4:a9:17:92:23:1f:71:b3:6b:ee:70:
d6:a8:53:d4:a7:17:01:a2:b3:6b:2c:dd:08:af:2b:
81:00:92:3d:0c:42:9c:32:95:fe:77:92:80:8d:9a:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:0C:E0:34:C3:6D:8B:3D:1F:4A:EB:2D:D5:CB:7F:EE:8C:29:5E
X509v3 Authority Key Identifier:
keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6d:02:4b:b9:1c:12:1e:05:7b:07:06:a6:5d:f8:99:9e:0d:
72:87:f3:7f:53:05:37:83:d9:5a:3b:89:b6:66:3e:f5:99:fa:
f5:fe:f3:5b:83:3f:c4:02:99:12:d5:dc:86:54:67:74:98:d4:
6f:5e:51:cd:cb:da:4f:9b:2d:33:ac:aa:9c:3c:3d:6b:50:80:
c4:19:9c:dd:f9:49:1b:4c:7e:53:71:e9:cc:ff:36:3b:1a:7a:
12:16:9f:14:df:5f:78:07:08:f1:5b:60:97:f6:f6:8f:88:4d:
17:4e:59:42:47:2d:4f:53:de:4c:ba:1c:36:e5:f5:66:78:97:
ac:29:c3:78:08:0d:93:c7:8a:30:37:6e:3b:e3:62:45:3a:6a:
02:35:9c:b7:e6:34:24:6f:a2:9b:5d:6d:73:eb:44:c0:b8:23:
11:a3:aa:64:27:e3:c4:32:d4:a5:db:72:4a:d4:6e:a2:2e:4f:
88:b3:c8:a9:d0:b1:c2:f9:93:28:91:b4:12:2d:0e:47:88:21:
89:3f:cf:32:7d:e3:ad:32:01:29:2b:e9:15:a8:51:88:5f:0d:
f6:a6:53:35:d0:2d:a8:c3:38:af:31:ad:f8:75:a7:6d:f5:71:
b4:91:9f:5f:18:1c:0f:74:2f:d1:ee:dc:b8:55:a2:8a:3d:b5:
c0:96:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:45 2025 by rpki-client