Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
File: zRJC5sfr2Coj-hoI85br5as0z2s.mft (raw, json)
Hash identifier: cyZQ66uBFfQ9g9WKqxxjy+ziQHuVoml/HXbuFAqLpl8=
Subject key identifier: 0F:1F:99:65:CF:C6:93:25:7B:F4:C9:6C:7A:B4:3F:BB:FA:1C:79:74
Authority key identifier: CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
Certificate issuer: /CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Certificate serial: 01964EC7831CC03E93BB71A974BA253484F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 16:00:20 +0000
Manifest this update: Sat 19 Apr 2025 16:00:20 +0000
Manifest next update: Sun 20 Apr 2025 16:00:20 +0000
Files and hashes: 1: 08D6A8hDDz8EmWz4TWfTzIZtuw4.roa (hash: c9bmK28UA0mGlnzCRW7yMDsTOGRfKW7u6iqtfGSyl+c=)
2: beEuyHtj6-YxYYEBP6CwFITtXCo.roa (hash: 15tHsK0ns4vomu3PpRO0w+CWAE5FrW5s/l3utsU9ZCI=)
3: zRJC5sfr2Coj-hoI85br5as0z2s.crl (hash: qbaTxBJUWUp/5lBAG7i0zTDeQ6iAhncLNBROkp8T8os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:83:1c:c0:3e:93:bb:71:a9:74:ba:25:34:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1242e6c7ebd82a23fa1a08f396ebe5ab34cf6b
Validity
Not Before: Apr 19 16:00:20 2025 GMT
Not After : Apr 20 16:00:20 2025 GMT
Subject: CN=0f1f9965cfc693257bf4c96c7ab43fbbfa1c7974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:73:50:f5:ad:c5:ec:1f:be:67:2a:da:4c:
22:d6:e6:30:01:99:d1:3a:a2:71:18:40:b8:d8:fb:
1b:1c:6f:93:51:6a:62:a4:51:0c:11:26:f7:1d:28:
2e:24:56:2f:90:66:92:d1:24:f9:70:b4:e4:09:ff:
a5:70:48:f9:6b:72:77:84:ba:9c:28:f2:5b:31:0c:
69:74:2c:17:58:48:a1:90:74:fd:40:e7:8c:fe:76:
54:a2:66:c2:14:f2:7c:da:b8:08:f7:b5:92:80:b3:
e1:7d:c8:32:31:ad:54:66:5d:1a:a0:f5:ab:46:3f:
06:4c:31:23:0b:a0:c9:8f:7c:ae:6d:03:cd:fa:7b:
2c:22:10:4c:bd:71:2f:e7:0b:c6:00:f0:d0:a4:ff:
04:e0:5a:41:9b:4d:b0:a7:37:3b:27:92:7d:dc:9e:
cd:c9:2c:8a:bb:56:0a:5f:3f:cb:14:ab:66:90:27:
00:81:5a:2f:0c:c3:3d:79:fc:93:4a:8a:09:19:6a:
7e:f7:f6:66:0d:4d:e2:f1:5d:03:57:7b:56:1a:ec:
9b:d2:86:97:2a:e2:a2:e8:1f:a8:e7:fd:ec:f6:99:
92:4d:c2:13:9b:d4:7f:e1:4b:bb:c5:f8:d6:6d:0e:
2b:4c:cf:93:7d:26:e9:36:a7:08:b3:84:af:56:24:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1F:99:65:CF:C6:93:25:7B:F4:C9:6C:7A:B4:3F:BB:FA:1C:79:74
X509v3 Authority Key Identifier:
keyid:CD:12:42:E6:C7:EB:D8:2A:23:FA:1A:08:F3:96:EB:E5:AB:34:CF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRJC5sfr2Coj-hoI85br5as0z2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4a757c-adde-485c-9171-f603538412c8/1/zRJC5sfr2Coj-hoI85br5as0z2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:76:4d:cd:73:4b:a1:45:32:7a:9e:fa:8d:e3:aa:7c:84:01:
a6:4c:c6:af:47:27:83:93:df:e8:20:73:71:7e:05:4a:7e:a9:
48:f2:33:90:9e:8e:7d:1c:7f:c6:1c:1e:c5:41:56:8a:30:1a:
9b:db:cb:07:95:88:26:b4:5b:44:31:54:96:99:f4:61:e3:35:
e8:0b:74:ee:c2:c6:dc:cb:8a:53:68:3a:f4:48:99:ad:d7:9f:
e9:11:90:1a:e4:4f:7e:5f:45:ed:dc:1a:96:46:87:75:fc:fd:
ad:15:11:b5:1f:83:53:1c:a4:25:a6:d6:a4:f7:64:36:85:cd:
7d:73:36:ec:87:59:9d:3c:7e:70:0a:0b:55:67:09:a6:e5:0a:
d6:64:10:e8:71:0c:96:bd:10:2e:52:59:02:7a:2a:2a:29:2d:
f4:a5:2a:33:05:d9:f4:e2:93:c6:0b:05:6c:15:65:50:1f:07:
02:ab:0a:88:67:de:1f:e3:7e:26:c0:7d:50:7a:5d:dd:a8:c4:
39:ff:c5:7d:94:46:d7:be:49:e7:80:99:e6:36:e3:23:6c:ab:
11:40:2b:12:23:3d:cf:70:29:99:18:39:1b:73:e2:54:3a:a6:
f5:e4:96:3f:36:45:1c:ca:44:a9:7c:8e:7e:68:2f:3d:e7:74:
80:69:48:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:05:30 2025 by rpki-client