Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json)
Hash identifier: viO+K2H5ajU8/6lj+x9yRTJzu3xjXMcfuLjV6b+KfDY=
Subject key identifier: B6:71:FB:74:AF:7C:1F:E9:D5:81:85:E8:4F:7B:22:59:B4:12:29:26
Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Certificate serial: 019610FC144D4D34FD3FE90C998A680B5F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
Manifest number: 0246
Signing time: Mon 07 Apr 2025 16:01:17 +0000
Manifest this update: Mon 07 Apr 2025 16:01:17 +0000
Manifest next update: Tue 08 Apr 2025 16:01:17 +0000
Files and hashes: 1: fgM561fL_3Rx-_1J5CJxxdceK50.roa (hash: nwniELmnb3/CT2nQQZ1hAp6RF9PN9bCFIt9tpx0KqDk=)
2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: fYgZqnolxopva5ddjPa/V6NaQFzpp28Xwj0avOAyvwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:fc:14:4d:4d:34:fd:3f:e9:0c:99:8a:68:0b:5f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3
Validity
Not Before: Apr 7 16:01:17 2025 GMT
Not After : Apr 8 16:01:17 2025 GMT
Subject: CN=b671fb74af7c1fe9d58185e84f7b2259b4122926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:0e:e9:df:05:40:7b:66:e7:88:2f:d6:b8:
f4:34:99:e8:aa:53:3a:e0:d5:6d:21:ea:01:69:ac:
a3:cb:bd:84:72:3f:a5:68:7c:80:22:d3:2a:db:23:
77:c8:20:95:b0:ce:70:33:ba:80:f3:c7:11:1a:3a:
6b:d0:ac:f4:0b:a6:ca:f1:5a:a1:5b:47:ca:93:04:
7b:6c:7b:32:fe:67:b8:c2:ec:be:3b:dc:7e:72:bb:
49:b4:9e:8b:4d:63:b1:44:14:0a:9c:56:3d:bc:5b:
c6:cd:0a:a5:56:05:69:be:1f:e2:ac:96:fa:90:d3:
9d:49:5e:f9:99:2c:f1:ef:3e:9a:f6:8d:d4:e1:46:
fc:fb:a6:0f:74:51:7d:74:3e:ec:b0:aa:2b:53:49:
f8:24:2a:39:aa:8c:37:d4:ac:d1:06:fe:8c:fa:38:
2f:4b:11:6e:a2:bc:2b:65:33:d9:5f:5c:cd:b4:9a:
0c:8b:d2:aa:0c:7a:04:b6:af:22:69:d9:9a:c4:91:
7c:3d:cc:c3:05:be:64:e8:04:a6:5c:81:08:e6:d7:
91:25:1b:fa:6f:bc:32:57:0c:48:1c:3d:27:49:67:
70:ca:37:54:c0:d5:3f:68:ae:1b:a3:b8:66:15:47:
c5:24:84:a5:2e:9f:f2:c5:9e:3f:41:d1:8b:8e:09:
36:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:71:FB:74:AF:7C:1F:E9:D5:81:85:E8:4F:7B:22:59:B4:12:29:26
X509v3 Authority Key Identifier:
keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fe:ac:8e:22:ea:1e:74:4e:05:94:d3:2a:b1:b5:ba:01:94:
27:17:6d:fd:a2:05:39:44:fa:86:d3:32:bb:1e:f7:78:cb:bf:
3b:b2:76:d8:e7:02:20:ec:ce:db:b6:04:26:86:89:b8:6d:61:
7d:a4:d5:ff:07:00:d0:d4:ca:f6:e0:56:4e:b2:bb:cf:5b:16:
2a:33:15:db:8f:a1:aa:14:77:f6:83:03:8c:da:09:33:81:7c:
57:0d:28:7c:62:c5:51:20:9f:7d:59:14:7b:36:a1:e2:aa:9b:
f2:3c:38:fd:02:33:66:63:4f:5d:de:72:74:fa:5f:34:a7:75:
7b:2e:31:d6:fe:41:6c:ee:e6:94:67:32:e3:65:58:cc:b3:06:
0f:b1:3b:85:db:2a:87:7c:fe:61:e9:5e:a8:8d:5f:de:e1:6a:
e4:a3:37:4d:18:cb:c9:f3:94:06:86:ff:89:49:bc:8a:ff:19:
14:ad:7e:f9:e8:06:56:fc:ec:e0:2d:be:83:ab:c7:3d:d1:5e:
f5:dd:b7:66:e2:e7:d1:d1:91:37:8e:9d:9b:29:97:27:08:10:
85:9e:18:b0:e1:dc:c5:d4:a5:d2:d2:7f:63:8e:80:34:e8:f5:
b3:79:42:e3:4c:2c:cf:08:d9:5b:50:5e:19:46:65:ba:cb:3c:
1c:cc:6e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:13 2025 by rpki-client