Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: 9kXknmIoj2+4H5nTIcfEI3QLv2s/Hn7r7vshRJUeNc0=
Subject key identifier: DF:6B:01:87:1B:67:24:34:81:9B:C8:62:2C:E5:9D:D2:F8:B9:5C:3F
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 01962ABC9A38F349BBD12C82063BB5D40485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 14E9
Signing time: Sat 12 Apr 2025 16:02:05 +0000
Manifest this update: Sat 12 Apr 2025 16:02:05 +0000
Manifest next update: Sun 13 Apr 2025 16:02:05 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: V1QELhXmrSzABtqh3ilOt01r9dOUw/FpQGGk6CVH/Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:9a:38:f3:49:bb:d1:2c:82:06:3b:b5:d4:04:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Apr 12 16:02:05 2025 GMT
Not After : Apr 13 16:02:05 2025 GMT
Subject: CN=df6b01871b672434819bc8622ce59dd2f8b95c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:e8:0d:05:55:6e:02:c6:51:58:eb:b2:20:
bf:5f:60:95:35:c1:88:7d:7b:3d:e4:8f:b4:70:05:
36:26:d0:bb:bb:93:17:d5:32:b6:7d:90:c8:1e:f9:
d2:0d:5a:ac:95:6f:84:3d:67:7b:0b:19:5b:81:e4:
ff:83:65:d2:a1:ae:33:a5:c8:8b:1d:e5:11:eb:95:
ea:2f:ef:33:93:27:1b:3a:3b:89:43:4c:09:bf:92:
09:7f:d6:2e:33:89:e5:ee:33:fe:68:77:85:cd:bb:
3c:3c:98:ae:ca:a0:98:23:7a:5f:41:ad:bb:f9:e0:
95:ef:b5:11:2c:6d:22:12:62:2e:d4:7f:de:d0:52:
5a:87:b2:24:61:0e:c1:ab:bb:9f:81:26:74:d7:98:
00:ec:0c:d0:bb:63:a8:3d:ab:b6:e2:69:55:c0:e8:
91:a5:54:c3:80:5c:5d:02:e5:b6:7b:34:35:0d:9c:
80:de:1f:06:51:ce:4b:14:ba:02:d8:f5:97:75:6b:
27:28:bf:34:39:ac:cf:fd:d7:79:11:93:80:69:02:
93:57:6a:f9:c6:76:ad:35:b6:65:8c:4d:10:6c:7a:
4a:a8:15:59:22:54:77:9f:4e:e2:9d:fa:15:53:40:
9d:84:d7:53:0c:e2:99:79:a2:cd:c2:38:5a:7d:82:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6B:01:87:1B:67:24:34:81:9B:C8:62:2C:E5:9D:D2:F8:B9:5C:3F
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6c:0d:3c:10:d0:72:40:11:8f:60:a2:de:b1:73:0d:8c:96:
81:4c:3b:48:ef:f4:91:f8:8d:b6:f4:03:7b:f1:9f:de:2d:d6:
05:7d:90:fc:54:35:93:aa:77:c2:3f:88:e1:4a:db:13:2c:d2:
ef:ff:af:40:fd:82:8f:17:a3:de:6e:c1:73:8c:de:9b:d3:10:
a9:93:1c:e4:af:0e:4b:cf:86:69:66:e5:1b:eb:81:13:31:fd:
f8:30:4e:0c:82:71:78:cb:49:da:b0:c3:7f:42:b6:68:4f:9c:
b4:ca:2b:8f:2e:09:ed:58:b4:73:89:78:46:f7:fe:67:e9:01:
1d:79:3c:bf:b0:2e:46:80:8b:c6:4e:55:f7:d7:cc:11:fe:73:
93:36:90:cf:f9:6d:a0:b1:5c:1d:82:b8:30:90:44:0e:ae:25:
6b:74:b3:3a:ec:cf:ae:5a:b2:d3:a7:ae:94:d8:f2:d1:a0:1d:
93:e3:ae:45:c3:48:7b:ca:1f:6e:a7:42:b4:b4:d6:01:60:00:
20:87:87:d1:7c:e9:25:f5:f6:36:74:9b:39:e1:87:a0:90:cd:
0f:14:8e:ba:fc:cd:9d:bc:9e:e0:5c:bd:58:dd:9b:9e:5d:f2:
24:6c:28:d6:aa:91:bb:da:b1:6e:5c:63:61:8c:5c:89:fb:b9:
97:da:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:35:51 2025 by rpki-client