Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: 4iW/la118BTHTS6cnmOJVffe/I8fyciEIg9LrLRVEEg=
Subject key identifier: 8A:97:67:ED:D4:CC:FA:6F:0C:36:9F:EC:BC:2E:5B:A4:87:EE:E5:BC
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 0196564A93B8FB2B6976F2E37C3888387553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 03:00:50 +0000
Manifest this update: Mon 21 Apr 2025 03:00:50 +0000
Manifest next update: Tue 22 Apr 2025 03:00:50 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: sxepVh1YzJ57NZfbaptFKbiBZc9E8dDiuiYtqcW8aEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:93:b8:fb:2b:69:76:f2:e3:7c:38:88:38:75:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Apr 21 03:00:50 2025 GMT
Not After : Apr 22 03:00:50 2025 GMT
Subject: CN=8a9767edd4ccfa6f0c369fecbc2e5ba487eee5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8f:e7:68:fb:bd:cf:f0:56:96:d4:21:b3:ed:
0d:9c:0e:5d:f3:f9:29:16:4e:da:7a:fc:cf:91:77:
05:c6:61:d5:76:b2:9d:00:ce:15:3a:30:be:5c:07:
8f:91:1d:71:fb:7f:c8:2f:cd:a3:aa:95:54:68:13:
49:96:f6:18:ff:a0:c2:00:3b:8f:f8:36:64:36:9a:
ee:d7:d0:4d:87:ed:e1:c4:a7:46:87:99:8d:42:5e:
cd:33:ef:14:0b:cd:29:18:ab:05:d8:93:46:be:a6:
9f:32:d9:39:12:0b:ce:5c:11:61:43:57:2e:43:a2:
be:4d:59:9f:ce:8d:a6:4a:71:1b:b0:42:3a:23:9c:
cf:c9:23:cc:40:4a:dd:5c:94:5a:83:1b:45:dc:d6:
2f:5a:0b:d2:af:50:a9:5b:0f:4b:e8:77:bd:9b:d8:
ad:b1:a6:5f:3c:df:70:35:9f:55:99:40:d4:35:59:
46:32:c6:9e:66:08:27:d6:ce:08:bd:0a:a7:65:b9:
61:13:dc:b0:b3:94:80:4e:7a:05:eb:32:cb:5f:1c:
4e:09:96:6b:ff:da:c9:76:9a:47:f2:fb:5c:e5:f4:
c8:9d:ff:1d:92:b7:51:f5:99:28:a3:81:d8:0e:f8:
3e:83:08:da:34:17:93:20:9f:ba:7b:33:ea:37:37:
0f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:97:67:ED:D4:CC:FA:6F:0C:36:9F:EC:BC:2E:5B:A4:87:EE:E5:BC
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9f:52:0a:e2:a3:59:fb:61:fe:86:8d:86:6e:a3:de:52:b0:
ff:2d:9b:59:bf:d1:8c:46:5f:ce:8f:9c:c7:12:2c:36:da:32:
79:18:88:c2:46:2e:32:03:c1:59:ba:a3:0e:27:fd:0b:1f:c8:
95:99:3b:f5:e9:85:0f:66:28:bf:b7:cd:a2:91:06:64:2d:de:
dd:b8:1c:63:c9:5f:fe:03:a7:7a:fa:b1:49:40:21:2b:2a:9a:
38:58:db:0f:fa:62:63:7a:8b:85:fa:7b:41:98:f9:96:ff:1d:
39:9b:d5:8e:3e:1b:18:f1:be:c3:d0:25:66:37:1e:17:4b:5f:
e5:90:5c:05:27:78:82:09:ad:48:11:fc:5d:63:60:a9:ef:36:
71:c1:e4:a0:54:7e:89:ed:d7:9c:ef:bf:34:39:99:22:50:a9:
63:9e:4d:b1:34:b3:13:eb:80:66:9c:21:3c:62:5b:95:f5:fa:
cf:8b:be:03:fe:c6:de:ca:3b:8b:ad:68:2f:3d:c3:ad:36:c2:
e6:71:e3:7e:82:36:5d:8d:20:3b:26:41:0d:0b:da:26:90:43:
12:9d:c1:1d:96:80:be:7a:f1:b8:86:c4:c7:aa:af:87:ca:b2:
36:31:9a:03:dd:0a:51:95:5a:38:ee:f0:58:94:b6:aa:88:0a:
a8:22:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:36 2025 by rpki-client