Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json)
Hash identifier: +od0gBjsioI+XsU6u/csZK2UMLJPM4IcbhFQZaMDp9o=
Subject key identifier: 46:A2:24:C5:3D:AC:94:4D:70:81:0A:01:00:D4:90:75:96:A0:5C:2A
Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Certificate serial: 0196542538A0712639999F0ABE3981183609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 17:00:47 +0000
Manifest this update: Sun 20 Apr 2025 17:00:47 +0000
Manifest next update: Mon 21 Apr 2025 17:00:47 +0000
Files and hashes: 1: EsoIIrFbYFhVDfj6th4jhjn8bMs.roa (hash: QXxOo7J9CTQ0vAhyPXgGF7t6YymxNb/k2gt5l3VWLEM=)
2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: RLOw8wKmjjI9zps1yc/k7qqobR7I8L2GlRHoUSoepB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:38:a0:71:26:39:99:9f:0a:be:39:81:18:36:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037
Validity
Not Before: Apr 20 17:00:47 2025 GMT
Not After : Apr 21 17:00:47 2025 GMT
Subject: CN=46a224c53dac944d70810a0100d4907596a05c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:06:45:c0:d7:97:11:0e:a1:cf:df:af:3a:
fe:68:d2:b7:f5:33:48:ef:63:13:0e:3d:c3:86:4c:
a6:3b:c6:10:66:29:8a:8b:12:de:ea:30:f9:30:9e:
90:0b:12:62:6f:28:55:0f:0c:5b:ee:81:d7:e0:3c:
9b:4e:f0:71:41:d9:55:b3:54:71:3e:5b:44:fa:47:
61:15:61:92:33:ed:81:47:e7:69:c6:da:6a:87:17:
4e:7c:0b:a8:b3:58:e6:cb:0f:44:cb:34:b1:fb:aa:
72:d1:1f:ae:fd:ba:37:34:bc:10:b7:51:c8:ae:d5:
a4:88:02:6a:ee:f7:75:ab:71:fc:c2:71:6b:25:ff:
18:47:33:3f:71:11:33:ae:6b:a4:a6:12:fe:0e:4d:
aa:07:2b:a9:ad:5a:e4:77:36:20:af:20:22:52:a3:
bf:a0:fb:c3:70:e5:ef:3b:13:3c:3b:77:66:a1:a4:
c5:e0:73:e3:71:92:14:09:ef:be:e8:9e:90:62:e0:
c1:34:06:7f:35:b1:ed:d8:82:d7:61:10:27:3b:e5:
b8:3b:27:e8:39:80:aa:d1:f9:16:24:1b:f0:d7:0b:
1a:02:df:c1:14:37:f6:d1:28:1e:5b:db:47:2f:68:
e3:8a:05:52:bd:0a:a9:e5:d4:a8:dd:07:49:74:e6:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A2:24:C5:3D:AC:94:4D:70:81:0A:01:00:D4:90:75:96:A0:5C:2A
X509v3 Authority Key Identifier:
keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:af:34:1e:c4:c8:8e:09:2f:81:a9:5f:64:99:df:25:32:08:
0e:15:98:30:ed:6c:8a:35:01:4e:c3:82:b7:f8:9e:65:5e:30:
56:8b:58:84:e6:55:74:21:45:b9:3a:e6:c3:ff:92:04:c9:ab:
01:b2:78:13:4a:08:f8:09:42:ec:ad:fb:1b:4b:ee:22:3d:ce:
1a:ab:2b:26:ac:36:61:02:f8:60:91:1c:52:9e:ab:f2:3c:7e:
b9:83:28:f9:83:5c:17:c1:5f:bd:a3:7c:53:e3:f2:d9:f6:f8:
cb:10:9e:65:ff:fb:85:74:89:dd:d0:b6:fa:c0:ac:f8:da:e6:
79:9d:85:0c:34:e3:3f:8c:c0:a1:66:37:51:14:a4:42:1d:79:
cb:d5:97:36:82:ab:77:b1:b7:ca:3b:2e:19:2e:e5:c0:36:61:
e9:0d:82:6b:5a:f8:a4:99:52:af:a6:bb:a9:fd:c7:29:d9:ca:
ac:7b:42:ba:95:2d:c1:e0:2c:15:60:90:6e:6f:9e:a0:fe:c5:
29:be:9a:c1:c4:9a:28:71:c7:8a:c9:6c:be:d0:37:f3:20:f9:
ef:57:30:97:eb:82:30:13:9e:25:30:a5:35:e5:22:8a:d8:df:
67:2a:a9:b2:31:97:15:78:b5:ad:b5:c3:ae:c9:bd:3b:ba:07:
cf:c7:58:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:31 2025 by rpki-client