Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
File: zdpbTOlfoL32BUFp53rvyCZd28Q.mft (raw, json)
Hash identifier: OF3Fei6vnhFW0TkAxg3PnMIo7ZhxY0zEt0264DwO85g=
Subject key identifier: 29:DC:9E:D5:CF:30:6E:AB:BF:1D:46:30:B4:83:D0:24:99:46:B8:7F
Authority key identifier: CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
Certificate issuer: /CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Certificate serial: 0196526D7DAAA9619A4A1196BF39FD94ACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
Manifest number: 148F
Signing time: Sun 20 Apr 2025 09:00:29 +0000
Manifest this update: Sun 20 Apr 2025 09:00:29 +0000
Manifest next update: Mon 21 Apr 2025 09:00:29 +0000
Files and hashes: 1: 40_j8EnMOslOGeaUGeLQNCGHg64.roa (hash: BOU6u1kQjKsVBkJf+h9lI/7YbpbYLn1ZXJQhHit/Gyg=)
2: zdpbTOlfoL32BUFp53rvyCZd28Q.crl (hash: yij8+HQ7gqDyUzIkgbJEqnXL5a3+WC2xwwPO4E6NII4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:7d:aa:a9:61:9a:4a:11:96:bf:39:fd:94:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdda5b4ce95fa0bdf6054169e77aefc8265ddbc4
Validity
Not Before: Apr 20 09:00:29 2025 GMT
Not After : Apr 21 09:00:29 2025 GMT
Subject: CN=29dc9ed5cf306eabbf1d4630b483d0249946b87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c6:27:58:58:d4:27:16:b0:fb:cd:24:97:4a:
ed:fc:95:b1:56:c5:c9:f7:9b:71:51:c2:f3:bd:b3:
83:90:77:f0:c8:43:51:3c:26:f8:62:6c:df:77:42:
7a:c5:07:5c:88:1c:b6:99:ce:4d:1b:39:ec:6f:aa:
a2:21:5e:5f:8b:93:46:b6:f6:21:d6:c4:c2:7d:bb:
32:31:e3:35:9a:1a:21:17:9c:04:dd:7e:c9:30:0f:
cb:88:6f:a4:db:73:28:5b:94:55:d5:47:73:d3:3b:
10:84:d6:a1:48:55:0d:39:f6:8f:fb:d8:d8:7a:ac:
8f:4e:b7:a5:d0:9d:15:c9:f5:e0:64:9b:63:e9:d1:
ba:ac:3a:80:b7:3d:6e:e4:2f:c7:42:49:c6:27:e2:
a6:79:ac:14:07:42:6e:f6:83:9a:de:4a:b8:d3:6a:
cf:dc:63:fe:b2:03:ad:00:ee:7b:88:07:7f:1b:24:
7b:64:30:59:c7:28:8e:85:d9:51:62:d2:c3:31:fc:
58:0a:a3:94:dd:15:06:22:07:3d:d8:03:fe:4f:8e:
78:1c:a3:cc:1b:fa:f2:a0:a1:0d:ea:16:1a:de:af:
36:6e:a0:07:e4:20:ec:1e:c5:04:de:82:63:f7:07:
3d:0b:ae:a7:a6:1e:5e:b4:cf:7c:27:4f:a5:83:ae:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DC:9E:D5:CF:30:6E:AB:BF:1D:46:30:B4:83:D0:24:99:46:B8:7F
X509v3 Authority Key Identifier:
keyid:CD:DA:5B:4C:E9:5F:A0:BD:F6:05:41:69:E7:7A:EF:C8:26:5D:DB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdpbTOlfoL32BUFp53rvyCZd28Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/8e23e5-db28-45ed-b67f-2add5e797c75/1/zdpbTOlfoL32BUFp53rvyCZd28Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:22:2c:9a:a8:41:78:d6:4d:9f:74:be:38:be:d2:f8:e1:43:
76:d5:5e:5e:f5:54:50:d6:b5:af:9b:e1:39:34:1e:ac:7f:4b:
4f:6a:f8:9f:6b:c4:26:5d:a8:a5:93:92:aa:7e:b4:53:df:3e:
f5:ea:be:64:6c:b8:f3:b9:0b:b8:52:13:be:e5:0a:1f:9d:85:
e7:c9:83:29:53:c8:91:e7:70:ad:4b:66:42:b1:9c:10:58:e7:
5a:18:69:98:c3:5a:73:6f:d3:e9:b7:6b:58:85:fa:e7:d4:30:
59:b3:7c:b5:5c:70:14:46:2e:8d:ff:c0:87:cb:39:da:b6:41:
7c:6a:9d:1a:60:bf:9b:80:1b:0d:83:5f:16:71:93:1f:05:ce:
88:16:5e:28:8d:59:f4:b0:85:63:71:c8:27:14:58:97:1e:44:
29:93:10:7b:c9:a9:4b:04:f7:ed:68:7e:b4:10:fd:fc:7f:c1:
a5:33:26:37:cb:80:e6:27:27:8d:ca:c7:2d:4c:5c:e9:14:56:
14:39:8c:5a:e8:80:c5:fe:78:93:a6:b1:f7:08:03:f1:99:57:
ef:98:ef:af:50:91:f9:44:c4:e9:30:d4:86:11:57:bb:0c:60:
58:1a:31:fd:e2:07:c0:07:95:6b:b4:67:d4:9e:71:4c:c7:1e:
d9:86:e0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:32:11 2025 by rpki-client