Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: 7jto2EUZe3/5dl7djdeWWiHSYwg3ovurCm6MejdQPg8=
Subject key identifier: 1F:99:D1:96:B4:EE:6B:32:1B:63:E0:06:F3:9E:85:8D:AD:A6:0C:1C
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 01965A94A3BE8A8A9590477C32A7226D456B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 046C
Signing time: Mon 21 Apr 2025 23:00:12 +0000
Manifest this update: Mon 21 Apr 2025 23:00:12 +0000
Manifest next update: Tue 22 Apr 2025 23:00:12 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: +TrkrEOG7Hlcqs5ZdyCQ5pBM09rD//Nfxtls3qLl+WI=)
2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:a3:be:8a:8a:95:90:47:7c:32:a7:22:6d:45:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: Apr 21 23:00:12 2025 GMT
Not After : Apr 22 23:00:12 2025 GMT
Subject: CN=1f99d196b4ee6b321b63e006f39e858dada60c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:fc:b7:f0:79:ed:da:07:46:74:81:e9:da:
80:aa:65:e3:90:2e:95:0d:15:cf:3b:1e:a9:03:42:
16:6d:3a:fc:d5:d5:01:7d:28:af:02:4f:96:eb:7d:
88:38:90:bc:42:82:c1:cd:8f:59:12:25:56:3c:1d:
38:48:39:ff:10:b6:34:b0:06:d2:b9:2d:1e:1d:f1:
29:12:4f:1b:14:d6:e0:ae:0e:eb:7c:43:0b:35:9c:
88:cc:05:7f:a1:76:94:6f:f2:22:6e:66:71:a1:60:
da:e3:2c:d2:f0:ac:b8:a2:c4:62:bc:4c:37:7a:f3:
f1:09:f6:b5:00:44:01:e1:3e:de:44:13:3c:72:83:
a5:4b:f7:70:a1:e1:07:39:a2:5a:12:6e:a3:5c:fb:
f1:0f:51:35:df:f5:5b:98:95:a3:f0:f8:5b:f0:28:
6e:8b:c3:1c:6f:6f:ad:14:25:80:40:bc:bb:fc:84:
61:51:ee:5c:54:bb:cf:1c:75:ad:cf:74:6e:93:81:
5d:d2:a6:ae:14:b6:46:f3:1b:f4:cd:53:29:b9:3a:
af:de:04:78:c2:bb:84:ff:94:82:f0:f0:b5:87:a5:
cb:29:e7:1e:e7:13:ce:56:a6:1a:34:0d:8c:bd:ee:
92:60:a2:c5:62:42:c5:90:fd:70:de:98:d0:8c:6c:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:99:D1:96:B4:EE:6B:32:1B:63:E0:06:F3:9E:85:8D:AD:A6:0C:1C
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:e3:ce:bb:a8:3e:39:eb:47:e7:e5:32:58:00:28:68:b9:
73:98:85:21:e5:4b:ce:44:d4:be:50:79:c7:e8:cb:ef:92:d4:
ef:46:8d:a6:4b:f6:82:3e:d6:8d:3a:8a:fd:23:73:e8:01:7c:
8e:c8:4b:ec:21:7b:6b:37:8e:56:8c:3e:b8:50:68:2c:81:20:
f4:7d:c1:7c:5c:6c:c4:a6:52:7f:54:ea:85:9a:15:1f:9d:e3:
e7:7d:17:33:79:e8:7e:e6:6e:92:f9:7e:6f:64:fc:ec:2d:ea:
6e:7d:05:21:b8:c2:07:74:60:1f:51:c0:bf:dd:dd:da:0a:fb:
10:cc:62:7c:15:15:19:8e:8d:84:b6:70:fe:33:b8:ab:8c:b7:
94:83:8d:e7:3b:7e:0a:ff:7d:81:14:91:60:4d:89:62:c1:96:
a5:f7:f7:67:5f:73:57:81:b4:56:76:35:0f:f3:9d:87:04:d4:
9f:eb:49:a2:a9:b4:16:cc:80:2a:11:7c:8b:6f:a2:84:ea:25:
22:15:b8:c1:07:d9:1f:9c:f3:3a:ca:15:05:90:4e:70:bd:42:
df:64:ff:5a:09:cf:ac:33:e9:7a:05:f8:cd:e7:9f:d3:a8:a3:
e0:01:ad:10:f8:a5:e0:52:32:ad:3e:f1:df:dd:b2:75:d2:b4:
1d:a0:74:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:06:24 2025 by rpki-client