
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
File: z58C29lyWVoxyr6rDNldcGqM3TE.mft (raw, json)
Hash identifier: Yq+BLh7fIbVK9+cA074dkmoifZdZ2JR0MXFVSpA/o34=
Subject key identifier: AE:45:D4:20:8D:00:1D:18:63:37:B6:10:7E:4D:27:9F:93:5D:70:11
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 019653B787691DE3C5B43D3D99A85347BCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 15:00:58 +0000
Manifest this update: Sun 20 Apr 2025 15:00:58 +0000
Manifest next update: Mon 21 Apr 2025 15:00:58 +0000
Files and hashes: 1: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (hash: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=)
2: z58C29lyWVoxyr6rDNldcGqM3TE.crl (hash: lnq4AXXVTfLGcDq8KDtGNXU6D4wDtuLv6yq5ZmWk0ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:87:69:1d:e3:c5:b4:3d:3d:99:a8:53:47:bc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Apr 20 15:00:58 2025 GMT
Not After : Apr 21 15:00:58 2025 GMT
Subject: CN=ae45d4208d001d186337b6107e4d279f935d7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:1a:cd:c3:f8:72:bd:36:02:c6:0b:e4:21:
95:40:ad:a7:83:26:c3:d8:96:cc:54:b1:03:f1:7f:
1c:3b:96:76:dd:54:1e:fb:85:5d:da:30:18:d5:ef:
3c:1c:1d:2b:50:cc:07:24:06:4e:ca:d4:2c:0f:2f:
95:17:b7:12:83:40:ab:7b:c6:8d:1d:dc:87:68:70:
b5:31:17:32:16:84:d1:fd:c0:68:ba:c6:43:63:b4:
3c:18:e0:ef:17:82:55:59:e7:67:fd:f0:ce:bb:2c:
47:d6:cd:af:bc:68:8a:01:f1:c8:ed:9e:75:1b:07:
2c:d5:ff:f2:8b:82:f1:c6:ac:3d:5c:00:b4:b5:1d:
44:6b:cd:59:bb:bd:19:07:5a:45:d2:b5:a6:3f:ab:
76:66:c4:a6:99:5c:dd:f1:c8:b6:54:1d:c0:76:9a:
5c:72:41:58:21:d4:13:0e:50:04:b5:81:b6:90:bf:
9f:2a:6d:ba:f5:5b:52:fa:96:ae:cf:75:25:66:71:
9f:fb:c0:96:11:52:c0:bd:58:a8:00:b2:9b:5f:31:
da:8c:72:4e:eb:ce:c7:66:7a:b8:68:a2:d7:5a:d1:
07:77:62:54:4a:3e:3f:aa:bd:9f:ff:fc:ef:a7:cd:
4f:ab:7d:e9:3e:b5:93:ed:6e:44:30:eb:ff:f7:34:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:45:D4:20:8D:00:1D:18:63:37:B6:10:7E:4D:27:9F:93:5D:70:11
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7c:3d:ac:73:0d:9e:a5:d8:ad:91:61:f1:bd:a5:bb:40:61:
fa:85:b4:3d:e6:4d:ff:f8:40:63:87:ba:22:c4:cc:40:a5:5b:
51:21:92:fb:f2:7b:a9:b3:04:ce:a7:59:a0:e1:07:32:ce:09:
cd:5e:ca:3c:0b:d5:e3:0c:43:ba:ef:c6:ae:7e:b6:b9:d8:f1:
2b:15:90:3d:48:85:78:46:b5:9a:49:f3:3b:8c:24:a6:f3:2a:
e9:26:43:7f:7f:30:f4:be:c5:9b:d1:9f:3f:f0:d3:e4:6e:47:
98:3b:45:a1:45:c3:c3:a5:67:59:1d:a4:24:72:fc:b9:38:e3:
04:40:fe:09:24:98:5d:ae:15:3c:5e:ff:38:53:65:0f:59:0f:
45:cc:e6:12:f0:d0:09:8e:52:e9:f0:20:aa:0a:6f:1d:b7:a9:
62:57:ad:ed:59:47:7c:67:da:b3:57:93:f0:36:df:b9:d2:a9:
b0:04:bc:ee:a3:87:49:7d:3e:5e:97:e2:19:8c:b2:2a:a8:79:
c5:ae:f6:aa:1c:3a:ab:51:4e:2c:7c:6e:b6:bc:56:4c:05:e9:
73:8f:2e:38:f0:11:4f:4d:ef:74:cc:d6:bf:c0:79:57:58:cf:
d0:44:16:5d:b8:c7:6e:9b:63:3b:9e:f7:ff:b0:ce:c8:fc:2c:
31:3a:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:51:42 2025 by rpki-client