Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json)
Hash identifier: ccMPOvRXxq+qPjqeoFrLuCRbLefWN4+En3OL69LQ8VM=
Subject key identifier: 8D:F4:A9:ED:CA:41:81:2A:A5:55:8D:17:F3:A7:B1:AC:EE:54:8A:45
Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Certificate serial: 01962A17780AEC10C95F3F79991547DC90AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
Manifest number: 87
Signing time: Sat 12 Apr 2025 13:01:43 +0000
Manifest this update: Sat 12 Apr 2025 13:01:43 +0000
Manifest next update: Sun 13 Apr 2025 13:01:43 +0000
Files and hashes: 1: GFCwLYZ1iVeKH5Z8sR6pOUA3Lm8.roa (hash: cER4WH5eXS4Lm/LZABdPjot9dROZgtRCRJnalyX5t/M=)
2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: 4k0MDS/QvbegJ/D2ZzKgxbGIoN4RkZdgcpmQ9WK75Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:17:78:0a:ec:10:c9:5f:3f:79:99:15:47:dc:90:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01
Validity
Not Before: Apr 12 13:01:43 2025 GMT
Not After : Apr 13 13:01:43 2025 GMT
Subject: CN=8df4a9edca41812aa5558d17f3a7b1acee548a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:33:f3:3a:35:d1:bb:d5:99:10:dd:78:1d:
49:a6:0c:41:93:e1:01:b4:4a:02:73:97:b8:20:1f:
c1:0d:fe:e9:95:b2:da:6d:d2:81:f0:e7:4a:b7:1e:
dc:b4:a0:43:42:3b:b2:f0:08:c0:c5:c4:17:99:54:
79:ce:11:83:b7:2c:ef:40:85:53:17:7c:62:40:77:
09:a4:b3:8d:3f:e9:48:25:50:08:f6:90:3f:38:85:
8f:61:52:b9:a9:de:20:7c:9d:2d:66:e5:d9:4b:92:
a4:c0:e1:ea:fa:d2:92:0a:cd:83:2a:6d:41:95:77:
f3:e1:f6:5f:de:a4:56:e9:c5:e7:d7:d7:e6:ed:2e:
46:7b:5a:54:e6:95:1d:84:95:57:10:dd:d2:21:dd:
dd:ba:31:9e:92:82:ff:c3:ee:7b:9c:ea:19:c4:ea:
b4:cb:8a:65:dc:9b:0d:5b:1c:65:97:db:7d:b2:ed:
00:9a:40:36:1e:68:53:3a:de:d4:5c:e7:30:82:9c:
8c:be:be:83:85:79:42:c0:67:a6:fe:f2:7e:45:e4:
d7:22:d1:0d:46:89:00:ec:72:0c:59:9e:c3:5e:5f:
fa:71:61:c0:87:dd:22:cc:ba:7e:3f:9b:1c:4c:80:
cc:28:75:4f:6e:54:88:a8:b5:3a:bb:bc:d9:a0:2c:
3f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:A9:ED:CA:41:81:2A:A5:55:8D:17:F3:A7:B1:AC:EE:54:8A:45
X509v3 Authority Key Identifier:
keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c0:17:9d:91:8c:46:80:b8:0c:61:1f:6a:f6:ff:6f:ae:39:
fc:ed:5c:52:8e:a9:64:4b:9f:87:96:f0:98:0e:65:06:49:90:
20:77:26:14:5c:43:49:ba:14:4c:b3:eb:89:68:9a:43:a1:5f:
7f:0c:33:32:d4:25:67:75:7f:d7:b2:c4:a7:bc:35:b1:0b:54:
4d:b6:82:85:7b:5b:38:41:e9:a8:69:67:6f:8e:54:ea:0d:e8:
96:77:35:76:21:a4:a1:72:d6:5f:fa:58:92:0c:58:15:50:00:
ed:2d:b2:f6:1d:8c:25:cb:41:a1:1b:37:3a:b2:89:8b:b0:b9:
5c:e7:61:2e:dd:6e:13:42:5c:10:84:f6:9c:8b:80:35:92:51:
12:4d:4b:31:1d:7d:e8:dc:68:d5:aa:f0:56:fe:99:98:a7:ec:
f6:db:dd:04:3c:18:80:3e:b8:d2:f3:d1:9d:b4:f1:98:8c:22:
a4:a6:d9:a3:89:c4:04:f1:22:8f:a2:1e:ef:50:67:d7:50:45:
19:e8:40:34:7c:71:aa:b2:ed:76:a2:95:7f:6f:21:d5:5e:c6:
a5:1c:d3:6e:dc:1b:f9:5a:3e:9e:8d:e5:c5:96:65:01:1e:a4:
6c:b3:0a:30:8c:6c:c0:ba:5a:b5:4d:9e:1c:65:91:25:c9:3e:
62:96:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:12:28 2025 by rpki-client