Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
File: ZJauOK7ay77u4eCTlW2zKHrntT0.mft (raw, json)
Hash identifier: Sdh2MFpH+BbTZ+1CqgG2GkRB/vMjPyptcgIq7P7hwVE=
Subject key identifier: E4:C0:39:99:3B:C4:14:1F:E8:23:92:EF:65:1C:78:06:D1:EC:DD:A1
Authority key identifier: 64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
Certificate issuer: /CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Certificate serial: 01965793B6DDEF39B19B054B70EA266E9649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
Manifest number: 1341
Signing time: Mon 21 Apr 2025 09:00:20 +0000
Manifest this update: Mon 21 Apr 2025 09:00:20 +0000
Manifest next update: Tue 22 Apr 2025 09:00:20 +0000
Files and hashes: 1: OsY0TtzQwg_k6WVAlCJ4j1X5_HQ.roa (hash: xdb+Fodrj/gwgOeHGwol/lGn/WJOAqWqApZA+WvwzsI=)
2: ZJauOK7ay77u4eCTlW2zKHrntT0.crl (hash: defHkX3DNV2GTG4bEfDzw62kWJHEPGgKVMjrQ0y+rng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:b6:dd:ef:39:b1:9b:05:4b:70:ea:26:6e:96:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6496ae38aedacbbeeee1e093956db3287ae7b53d
Validity
Not Before: Apr 21 09:00:20 2025 GMT
Not After : Apr 22 09:00:20 2025 GMT
Subject: CN=e4c039993bc4141fe82392ef651c7806d1ecdda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:85:1d:5a:b6:85:5c:f7:45:0a:f3:03:3b:48:
e6:4f:3a:e5:fc:9c:af:33:12:8a:0b:cf:3f:9b:cf:
59:09:a3:24:b8:ea:0a:cc:37:5d:43:07:91:f3:1d:
cb:37:9f:b4:b9:84:55:6c:64:aa:b4:b1:db:9b:1b:
b2:16:76:bd:3a:fa:ed:45:03:76:61:f9:7b:78:e8:
bb:a3:ef:58:9c:5f:d7:6f:43:f7:01:fb:5a:1c:78:
89:88:c5:16:89:21:9c:da:f7:19:96:9f:50:bd:bc:
c5:3d:95:51:c6:70:ca:d8:37:39:95:a0:25:1d:34:
15:a1:13:fe:28:ad:3b:81:d8:54:05:81:d6:5b:95:
4d:0a:2e:60:6a:21:49:06:58:a7:53:cf:15:85:22:
b3:f5:e7:d0:25:02:40:53:df:ca:c6:95:a1:bf:8d:
04:e4:c8:69:d1:a9:8b:b8:e6:f1:23:b2:7e:7c:2e:
88:4a:b3:3e:3b:ef:8e:16:72:2f:d8:69:48:7d:32:
2f:a9:ed:90:54:37:4b:77:1c:34:02:77:ef:7a:bb:
48:7c:ee:94:4f:05:25:93:bd:c6:53:02:d8:6b:7d:
d1:59:25:c5:24:93:38:14:2b:4c:46:87:aa:74:72:
4e:8d:83:9d:db:60:85:7d:41:a3:f3:eb:a1:f8:73:
b4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C0:39:99:3B:C4:14:1F:E8:23:92:EF:65:1C:78:06:D1:EC:DD:A1
X509v3 Authority Key Identifier:
keyid:64:96:AE:38:AE:DA:CB:BE:EE:E1:E0:93:95:6D:B3:28:7A:E7:B5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJauOK7ay77u4eCTlW2zKHrntT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6c3125-fff1-4da0-8a32-7664e8a21fc7/1/ZJauOK7ay77u4eCTlW2zKHrntT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:01:3f:a9:59:16:75:d9:59:f3:e7:12:16:c0:c9:b7:4c:6d:
a8:fb:ae:01:14:1a:5c:84:08:ad:5a:68:f3:2f:86:5d:ef:86:
46:fe:42:03:fd:ee:dc:80:dc:8a:c2:a9:dc:dc:92:e4:cb:6d:
11:7d:51:11:7b:b4:28:5d:94:b1:c4:7c:82:07:1e:0e:f5:a7:
53:30:07:c9:f8:2a:8a:fb:09:a2:ad:47:fa:f4:25:19:b3:88:
c6:40:77:22:e0:81:d5:f7:1d:49:a0:57:68:d3:c3:4a:48:77:
13:bc:19:da:71:2e:70:3f:59:6e:aa:05:7b:ba:93:ea:77:a3:
33:7f:0d:c0:32:0f:7e:c2:2f:95:20:95:8f:28:30:e8:e2:f7:
84:fa:7d:09:58:3d:e3:ea:aa:dd:5b:d6:a5:ae:9e:0a:38:0d:
9b:c5:0f:aa:d9:5a:af:12:cd:ee:a9:d3:f7:0e:aa:1c:ef:f6:
95:b4:c8:d6:64:89:25:6d:f3:48:87:85:94:9d:ae:7a:9b:8f:
bd:9c:21:21:bf:ce:b2:34:25:a6:8a:b5:9a:34:28:f3:40:63:
5f:95:84:75:0c:2b:1f:3f:6f:71:5b:11:14:42:da:d2:6d:2c:
6c:66:5e:62:b5:f4:07:dc:df:a1:f3:60:40:1d:73:85:c4:3a:
1c:85:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:59:27 2025 by rpki-client