Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: F41hCrCD2qgyhS4Cv7aMVSeuRb5K80eV5sl6Bc23LOo=
Subject key identifier: F1:34:BC:F1:B9:E4:40:FB:67:69:12:8F:AF:90:89:E0:E4:37:21:27
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 0196AA6772A8523A5EF9BD105E3B5219D0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0A79
Signing time: Wed 07 May 2025 11:00:28 +0000
Manifest this update: Wed 07 May 2025 11:00:28 +0000
Manifest next update: Thu 08 May 2025 11:00:28 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: VpGlU3QbyUKpVTistDo4dn/yx+5iEhp/mejU10/qVWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:72:a8:52:3a:5e:f9:bd:10:5e:3b:52:19:d0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: May 7 11:00:28 2025 GMT
Not After : May 8 11:00:28 2025 GMT
Subject: CN=f134bcf1b9e440fb6769128faf9089e0e4372127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:f7:04:67:21:37:dd:de:3d:e4:51:3b:fd:
03:87:e1:8f:e9:f5:4f:b1:81:e0:6c:c7:f9:bb:7b:
05:47:77:10:f4:ff:67:5c:7a:f8:74:75:a0:dc:a0:
17:a0:5d:64:a7:61:6c:75:b3:46:33:dc:b3:1f:cb:
8b:40:df:71:24:dc:b0:f9:aa:93:cf:2e:74:fa:2d:
c1:c5:38:c8:f6:c8:f3:62:13:a8:e9:0f:fa:2b:54:
84:d4:4b:a1:db:f1:5b:ed:ed:41:df:40:e7:9f:b0:
38:55:8d:6e:08:4a:39:08:0d:c8:f8:ff:04:46:60:
fc:e5:6f:52:46:20:5e:e6:d1:e2:4e:e4:2c:a4:ee:
4f:43:cc:4e:12:70:1f:91:b6:22:4b:d3:24:b1:8c:
74:4b:4b:50:0e:32:f5:af:64:60:c0:f3:66:f6:b9:
31:ce:74:ce:0e:61:fc:a9:a0:73:54:68:ed:fb:d9:
a2:4f:d6:23:59:3e:d7:09:08:19:25:ea:4e:78:7b:
f7:91:82:36:05:34:8d:56:c2:87:a5:e1:39:7b:13:
4d:f1:d3:f8:6a:44:51:75:0b:f4:d0:4a:b8:12:39:
23:4f:8a:f1:94:1f:e5:c2:c1:c6:fd:bd:fa:72:9f:
79:39:bc:6d:9c:b8:4b:9b:ea:8f:6d:e1:e2:fd:d1:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:BC:F1:B9:E4:40:FB:67:69:12:8F:AF:90:89:E0:E4:37:21:27
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f5:58:d2:89:3d:00:fb:d6:07:17:7e:53:d1:e0:a5:e9:ae:
56:b7:21:94:c2:91:ab:9b:2a:2a:22:cd:82:68:d3:0d:77:ef:
70:ef:b8:4e:4f:cc:4e:54:e9:54:e2:98:8b:46:8d:8c:5a:4e:
b0:b8:ac:46:48:dc:e6:bc:eb:67:9f:ba:5a:9a:7f:5c:30:6e:
bf:e8:ea:20:fe:b0:61:f1:1b:0e:23:8c:dc:df:6a:80:20:0a:
7b:19:8c:06:a2:f9:42:c7:c3:7e:e0:24:8b:dc:9d:67:1c:82:
87:6d:3a:ae:5a:d9:54:d0:82:c2:ee:4b:cc:3d:4f:cb:4e:89:
f3:d4:a9:89:d2:f9:62:b3:ad:1b:19:53:9c:10:59:6d:71:dd:
ba:ae:9a:f3:ca:c5:51:b4:40:3f:62:5e:b4:b2:52:e8:58:e8:
44:34:53:12:16:27:9c:fa:76:05:45:35:43:bd:e7:ef:47:54:
d0:86:b8:8f:9b:27:8b:e5:69:8f:f5:d0:d8:85:50:aa:c8:90:
1e:7f:c6:9c:61:0a:8c:9a:e3:cf:bf:6c:92:9c:bd:29:66:b1:
e3:d6:07:5a:49:27:8d:aa:3e:86:ca:fe:5d:ab:aa:5b:64:8a:
2a:3a:a7:54:2b:e9:14:57:36:a8:62:fd:be:e8:11:78:2c:bc:
04:85:00:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:15:17 2025 by rpki-client