Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
File: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft (raw, json)
Hash identifier: xIQEEY7d9YP3yghHCMXEzkftf8wp1EJIHEhwQziXClo=
Subject key identifier: 2B:29:92:01:A1:11:8A:21:F8:CC:68:11:17:D3:15:9A:E3:44:59:FC
Authority key identifier: CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
Certificate issuer: /CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Certificate serial: 019655A5F07BD352C0CADFFE2CCEFA3D2C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
Manifest number: 04AE
Signing time: Mon 21 Apr 2025 00:01:00 +0000
Manifest this update: Mon 21 Apr 2025 00:01:00 +0000
Manifest next update: Tue 22 Apr 2025 00:01:00 +0000
Files and hashes: 1: _qzv0Dh2xEy9ZuzGpQ3k-hlux2A.roa (hash: b9D9j34bnNP+dbzCYrw3bzH+UNVKXeP8YIrlGzrGPLw=)
2: g3im9InQw-S7o9FDYMfxSwOiyqI.roa (hash: aOFPtdFS5g/b24jgEdPoeVJ2T4W2zzLVdnuL77f+Bz0=)
3: zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl (hash: pBfnS6P1krZf519oyiGW3N1nrGav+O5cTmLjJad+e/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:f0:7b:d3:52:c0:ca:df:fe:2c:ce:fa:3d:2c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce3847667510f4f2e59bb1b394ae27e8dad0dc97
Validity
Not Before: Apr 21 00:01:00 2025 GMT
Not After : Apr 22 00:01:00 2025 GMT
Subject: CN=2b299201a1118a21f8cc681117d3159ae34459fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:f6:0f:d6:61:66:c7:d7:e4:7e:82:20:f0:
b6:7e:85:8d:c7:3f:ed:ea:ec:d8:f7:b7:9a:bb:de:
b0:69:92:7b:be:95:a2:82:0b:02:7d:c1:73:b0:9c:
df:9c:23:d6:f2:8b:3a:96:04:b8:53:c7:d4:ad:2d:
94:33:c4:fa:e5:41:b1:60:6d:70:01:92:07:43:d0:
82:42:ba:db:29:e5:ec:7a:29:22:4a:3e:0f:f0:be:
da:ff:cb:0e:48:20:8e:e9:81:bf:d1:ab:a1:55:15:
d5:29:b6:5d:e9:04:1a:67:ea:88:d1:8c:df:dc:6e:
2b:96:06:fd:fa:f9:9c:a5:bd:06:aa:47:96:f7:4d:
39:49:09:23:03:53:d1:eb:aa:65:f7:8f:f7:3f:32:
ac:92:59:4a:39:fc:cb:59:fc:20:3a:17:3b:a5:74:
a9:05:89:c1:b5:f9:3a:8d:4a:bd:0e:aa:48:7d:3a:
c6:0b:b7:0d:8e:aa:a0:bc:3e:da:f0:71:ba:37:be:
b1:bc:d0:4b:4c:a8:c7:c0:9d:97:15:8a:0d:a8:46:
df:b6:d2:d0:25:af:3b:42:b9:a7:03:46:b7:56:b0:
fd:27:f3:15:62:2b:a2:ca:df:d4:e9:6f:3a:42:fd:
1f:d6:48:82:dd:83:27:8a:42:2d:89:4d:e1:0d:4f:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:29:92:01:A1:11:8A:21:F8:CC:68:11:17:D3:15:9A:E3:44:59:FC
X509v3 Authority Key Identifier:
keyid:CE:38:47:66:75:10:F4:F2:E5:9B:B1:B3:94:AE:27:E8:DA:D0:DC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14f2a8-d3b7-443d-ac3b-4ba44377bd86/1/zjhHZnUQ9PLlm7GzlK4n6NrQ3Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7b:5c:6e:47:3d:b2:3f:eb:58:d5:ce:47:51:16:0a:c8:ee:
e0:b1:85:86:ed:5e:bb:cb:7b:93:85:8b:0a:9c:1c:7b:da:53:
93:da:bf:44:75:cd:76:d1:0d:05:38:11:b3:30:41:99:67:87:
71:ef:8a:b4:20:d2:9f:48:93:39:ff:cc:1f:bc:28:4a:b2:e8:
92:5e:00:89:2a:ed:b4:5f:ed:99:0c:4e:d6:a2:73:d6:f3:2c:
2f:8e:14:fb:70:52:81:d3:81:5a:68:3a:bd:8c:94:d0:78:74:
73:2c:59:a4:a5:3f:0f:c7:30:c0:c6:3a:2f:1e:3e:02:78:f5:
fd:f2:ec:03:dd:3d:46:a7:49:f9:14:98:0e:22:ab:0a:20:0c:
fc:a8:29:dc:41:65:64:69:c5:2e:63:a2:91:bd:a4:41:d1:de:
d3:6f:1e:90:3c:15:ef:d4:fb:28:cb:d2:e3:d7:cf:84:85:01:
38:5a:81:9c:11:e0:54:35:86:41:d4:0b:ab:a9:6d:a6:74:6b:
ac:05:04:1f:7c:6a:dd:b4:3a:d7:38:82:c3:ff:02:80:2b:20:
b3:7c:9c:53:9b:fd:b5:ae:69:f1:fd:66:76:7e:ce:59:71:2d:
63:88:cd:60:c0:55:bf:69:9c:e6:8c:c0:ab:b6:ad:be:a8:78:
20:8a:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:15 2025 by rpki-client