Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
File: zyww80STxFKhc-TeDEYsg6cRwzg.mft (raw, json)
Hash identifier: 6UFOCUwO+l9k+FburZh7xSuhB7MzVG9SGzpToRd8XYk=
Subject key identifier: 1C:1A:2D:67:EB:93:F9:16:1C:35:D1:25:C0:05:36:10:89:C9:3F:11
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 01963EAF8727EA9818A36FCD8490BF16C2CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
Manifest number: 09AC
Signing time: Wed 16 Apr 2025 13:00:12 +0000
Manifest this update: Wed 16 Apr 2025 13:00:12 +0000
Manifest next update: Thu 17 Apr 2025 13:00:12 +0000
Files and hashes: 1: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (hash: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=)
2: SoEVRIqaPwIGQBCw5SCqT_ArGX0.roa (hash: xcx1cSlLCFDJBjd8JSFFyykHeM6rd2VPa9v4P9cRUKQ=)
3: zyww80STxFKhc-TeDEYsg6cRwzg.crl (hash: vSHZINQ3V/1EsRQW4W9eYUFCMRCR/fW8cecMEE6RISU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:af:87:27:ea:98:18:a3:6f:cd:84:90:bf:16:c2:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Apr 16 13:00:12 2025 GMT
Not After : Apr 17 13:00:12 2025 GMT
Subject: CN=1c1a2d67eb93f9161c35d125c005361089c93f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:e9:51:0b:ee:fe:f8:d2:e4:d9:e3:bf:b5:
e3:d0:44:b7:7c:9a:50:dc:2e:89:67:17:e2:b0:30:
ca:2d:7f:e2:f7:ef:41:5b:71:3a:e3:17:99:49:85:
d0:a8:8f:06:72:f5:be:1f:0c:f5:a4:66:f5:e3:f9:
f8:99:0e:c7:85:91:37:47:97:d0:f8:a5:88:28:67:
d2:cc:f0:a7:4a:f1:4d:3c:d8:5b:f3:a0:24:e5:de:
d6:ea:95:af:62:de:b2:7c:14:59:07:4f:f7:c1:3b:
30:c7:b4:e1:d9:63:74:f5:2b:50:27:d6:85:63:ce:
9d:6c:a4:24:5b:d8:50:f5:dd:10:69:a2:fd:14:2c:
80:85:42:4a:a5:79:92:00:30:a4:ac:1e:35:a8:5d:
58:d2:37:80:44:3a:22:ec:41:e9:6a:e2:1e:ed:46:
22:c9:f7:8c:1b:74:3b:8e:6f:04:cb:d8:c6:34:91:
ad:5e:3a:56:3c:fc:0e:55:59:aa:d6:9b:f4:51:dc:
2a:03:f5:d8:e5:51:62:d1:35:b1:c5:9d:99:3c:32:
d7:81:4c:65:5a:4d:f0:8d:4f:d6:a0:42:c8:4f:24:
a9:81:f8:3b:ae:c8:c3:69:3b:d7:db:30:86:77:e9:
62:b8:58:7e:2e:84:ff:f5:dd:f8:48:a3:c8:72:93:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1A:2D:67:EB:93:F9:16:1C:35:D1:25:C0:05:36:10:89:C9:3F:11
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f3:ba:71:c3:6a:3d:d2:6d:2d:6a:1e:bb:17:01:68:50:4a:
f8:d7:9b:22:5a:81:fa:e0:62:6b:b9:76:1a:06:0a:69:b0:69:
39:80:c7:f0:b1:27:c9:f9:10:f3:87:e9:1d:1a:ca:ff:96:42:
84:64:0f:c0:92:ac:ed:53:16:7e:f6:a3:73:75:bd:60:79:d5:
ca:ff:a0:a3:14:d3:e8:05:d2:ab:9a:42:d3:82:58:4d:10:f5:
25:e3:01:95:3c:2c:cf:55:a9:d8:46:58:e7:c4:49:06:82:4d:
53:dd:24:04:7b:5a:aa:c5:be:0f:fe:15:32:58:02:7f:dc:22:
17:d1:e6:59:f8:df:9d:ed:c3:e7:a2:34:82:e6:84:8d:73:db:
54:f3:88:ea:76:fe:27:f9:8f:fe:9c:b2:80:e5:56:fe:61:fc:
05:9f:b2:8d:8b:fa:8a:82:9d:41:d7:b4:5d:44:d4:ee:a1:7a:
92:41:5d:2e:38:69:87:7a:1f:78:0d:7e:b6:86:79:c3:9a:fa:
58:ac:ae:bf:78:eb:29:0d:66:a3:f0:38:99:5e:cb:0f:c0:f8:
1d:14:4d:b7:7c:59:80:a5:29:81:cf:ad:2b:39:0d:15:7f:52:
64:aa:3c:67:c2:52:33:05:0c:be:80:00:89:0d:06:c6:e6:fc:
29:c1:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:59:25 2025 by rpki-client