Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
File: ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft (raw, json)
Hash identifier: gBCphhoKogqcl+LlOW/qJ+LR9V3hPmprEgZD2KA9HTg=
Subject key identifier: E4:0C:FA:35:4A:51:5F:AF:A2:29:9A:12:D7:B8:00:91:78:8F:76:65
Authority key identifier: 64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
Certificate issuer: /CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Certificate serial: 019652DB3E8A3EB71E60888A8BF34E70AFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 11:00:22 +0000
Manifest this update: Sun 20 Apr 2025 11:00:22 +0000
Manifest next update: Mon 21 Apr 2025 11:00:22 +0000
Files and hashes: 1: WuLl5WEm72PKP2EjN4PzkOllUEM.roa (hash: l/LlCxiGWXMwDilSjuK8TtyovKGo3UjHdGI+bjDVpFw=)
2: ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl (hash: IwXPwqQCwUCLF/wXR2nHpBZTbjm309+z86fBa2rJrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:3e:8a:3e:b7:1e:60:88:8a:8b:f3:4e:70:af:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64950e4e58d6ac27f80f09a5ed2f3028b81ae8ca
Validity
Not Before: Apr 20 11:00:22 2025 GMT
Not After : Apr 21 11:00:22 2025 GMT
Subject: CN=e40cfa354a515fafa2299a12d7b80091788f7665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:2d:2b:40:73:16:6a:03:97:5f:ea:fb:75:
e2:bb:85:80:de:58:3a:b4:0a:d0:2d:3f:bf:8e:4c:
91:0d:ec:7d:e3:83:9f:a8:42:03:5e:87:65:77:92:
64:9b:d9:4e:5c:cb:d2:31:5d:76:88:9b:a9:5e:01:
cb:07:06:72:b9:aa:54:fd:8c:20:62:9f:8b:19:23:
94:0c:39:31:c2:e4:8c:1e:4e:ed:87:10:76:1d:7f:
d9:d7:19:1d:24:e9:f5:3c:95:1a:e6:5e:be:3a:bc:
ca:b6:fe:8d:6f:f5:df:72:de:7f:5b:08:71:82:5b:
f2:60:27:3e:19:cc:e5:b1:23:1a:25:dd:02:29:98:
93:43:be:19:d8:ed:1e:ca:68:ed:c3:3c:94:0d:e1:
12:96:88:0e:e3:11:3c:82:28:8f:15:f5:2d:a7:c9:
8a:03:d8:d1:5f:88:30:47:a5:16:7d:60:2d:4b:ee:
99:5c:0d:49:24:26:29:fb:a4:5c:d5:2f:c7:ba:be:
c1:0a:91:fe:44:63:03:69:6c:e1:ad:fb:70:3e:1c:
25:c4:1f:74:31:ec:0f:38:d8:13:a7:7b:c9:ba:13:
74:18:39:52:73:88:79:24:e5:5f:2e:6f:bc:77:14:
b7:d9:50:01:d9:f9:cb:8b:18:06:5e:63:33:f4:a5:
02:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0C:FA:35:4A:51:5F:AF:A2:29:9A:12:D7:B8:00:91:78:8F:76:65
X509v3 Authority Key Identifier:
keyid:64:95:0E:4E:58:D6:AC:27:F8:0F:09:A5:ED:2F:30:28:B8:1A:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJUOTljWrCf4Dwml7S8wKLga6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/300211-0909-4206-9136-e66d411fa6a0/1/ZJUOTljWrCf4Dwml7S8wKLga6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:2b:e8:40:e2:85:91:aa:17:77:9c:52:fd:e9:20:fd:fa:20:
c5:f3:1a:69:5c:91:88:5b:65:11:ab:2c:08:76:f9:f4:c3:9e:
72:81:02:9d:74:9a:54:5a:d8:48:7b:1e:00:df:63:36:d7:50:
86:6e:9d:94:de:f9:8f:6b:4b:53:5e:5b:9c:64:87:9c:56:d8:
b5:97:7b:cf:c3:26:98:a1:18:8f:72:2d:c5:47:43:3e:e8:8a:
d6:99:fe:08:6b:80:da:a2:0f:b6:51:3c:ab:a3:56:53:0a:69:
e6:06:5a:5d:2a:56:3c:6d:f4:dc:e4:ae:42:2c:83:ff:4a:0b:
20:dc:5d:1d:f5:e5:be:27:0e:4a:fc:5d:d3:03:bf:10:41:e4:
d0:02:73:3d:c6:ac:99:5a:34:bb:f8:5c:59:2d:39:72:98:ed:
87:da:a3:2f:b4:71:9e:f9:e0:a9:2e:76:c4:76:f8:e7:c8:24:
ff:c4:24:2b:7d:ae:47:18:e3:be:28:da:ec:4d:9c:9d:40:3a:
3b:0a:6a:b8:34:0d:17:89:b2:29:19:1f:f8:12:cd:58:7c:f1:
60:c5:52:8a:f6:0f:e2:6a:bc:9d:b2:52:3e:40:61:34:e1:f5:
fa:38:db:3b:f8:42:47:eb:ef:21:ef:4c:74:f1:9e:73:33:a3:
20:fa:3f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:21:15 2025 by rpki-client