Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: jq1ujBOmsxtUGm/mcaoTvoY/jqy6t6CNpvttiIv9RYg=
Subject key identifier: 13:72:53:A8:EF:05:ED:C3:0E:86:CD:85:A1:D5:71:27:05:61:9D:F0
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 019655DCBDF96B975AE4E94D2127C1ECD82B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0B05
Signing time: Mon 21 Apr 2025 01:00:51 +0000
Manifest this update: Mon 21 Apr 2025 01:00:51 +0000
Manifest next update: Tue 22 Apr 2025 01:00:51 +0000
Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: ePAGRUDLlPvRXLecxaWMGcELfwROb6Qztpvm/KHz6MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:bd:f9:6b:97:5a:e4:e9:4d:21:27:c1:ec:d8:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Apr 21 01:00:51 2025 GMT
Not After : Apr 22 01:00:51 2025 GMT
Subject: CN=137253a8ef05edc30e86cd85a1d5712705619df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:a8:77:69:54:0c:d8:d5:6b:73:6a:64:bd:
19:57:3a:29:9f:f3:d3:9b:56:d6:a1:6c:78:5b:14:
d9:b9:e7:b0:e9:c0:1f:b2:14:ad:24:a3:d1:21:b7:
c5:c5:cc:af:41:6f:28:c9:df:75:3f:f3:6d:77:f6:
e1:04:c3:09:ae:99:5a:4f:d4:01:f4:c3:23:c4:b0:
86:f0:70:f7:46:13:b2:e1:45:99:28:40:0c:f3:33:
99:81:5a:30:64:65:66:4f:3d:e0:e2:26:a1:bd:5d:
1f:ae:95:b5:41:8f:30:73:7a:43:91:1a:6b:47:05:
19:ad:56:74:54:83:ff:56:b7:ec:32:8b:53:d6:65:
d9:8f:a1:ed:e9:5a:a1:bf:b2:25:2a:be:cc:da:c1:
86:ef:a6:30:5e:39:cf:6b:2c:c5:04:5f:25:a9:ac:
f3:18:49:93:a2:92:de:16:fb:07:9a:06:31:14:56:
ec:c8:63:d9:43:a2:fd:f3:fc:8e:0e:25:34:9e:85:
7d:0b:2c:b6:bb:d7:7e:a9:95:9f:6d:76:e4:b6:cc:
a7:fc:b9:33:b3:aa:e0:29:f2:ee:2d:1d:4f:7e:1b:
39:44:b8:65:92:4b:59:08:b9:49:c3:7e:7a:06:0b:
c0:9d:58:a6:8f:96:a0:77:e3:6a:f6:20:13:a7:c6:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:72:53:A8:EF:05:ED:C3:0E:86:CD:85:A1:D5:71:27:05:61:9D:F0
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:3c:53:cd:f1:ba:7f:90:70:a5:11:78:98:dc:d9:91:6b:b1:
2b:2e:a3:f4:89:d7:76:f7:6c:25:63:3c:91:22:0a:71:e9:93:
80:0d:ba:8d:01:c2:d0:a9:e0:1e:2c:16:65:73:fe:a4:f4:88:
fe:e2:45:ae:e4:9f:c8:ef:64:9f:fd:df:3d:01:53:34:d0:2a:
5e:25:d8:92:31:e0:24:ff:ca:5f:85:82:90:55:52:b1:48:6e:
ce:77:91:7a:7b:7b:97:1e:cc:e2:70:74:fd:66:9e:7a:4c:96:
b5:2c:62:93:40:c0:55:c7:21:4c:14:a7:25:c5:81:07:57:a3:
b6:b2:87:58:a5:7f:2a:b4:4f:7c:bf:71:27:2c:90:29:5f:da:
62:b5:8c:d5:4a:f8:aa:6b:d2:8a:bd:0e:59:0b:43:a6:51:5d:
04:f2:41:2c:41:90:89:ed:f7:78:49:5d:88:5a:17:14:40:36:
6b:2f:df:2c:66:d4:06:9d:0e:14:5d:12:09:4c:25:58:01:d8:
c3:37:6b:f8:67:55:e3:de:cc:13:f4:dd:45:e4:07:5e:8f:05:
96:9a:d1:ca:c1:83:73:e9:ab:21:a6:b0:01:7d:b0:e4:fe:f3:
c3:1d:34:c0:14:7c:03:88:f5:73:79:dc:fa:a0:b6:3c:4a:d0:
9f:f5:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:51:47 2025 by rpki-client