Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: RX2bNyquKf03LJZsjeTpcfRsU7nX1FTgrjGNGyObLDI=
Subject key identifier: F1:75:D0:A0:C0:B3:C4:3B:7D:EE:6F:9F:5E:C4:C1:04:F5:AF:43:A6
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 01965537F45E76B5DF2C5A2FBCDB3EE3DE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 0EF9
Signing time: Sun 20 Apr 2025 22:00:52 +0000
Manifest this update: Sun 20 Apr 2025 22:00:52 +0000
Manifest next update: Mon 21 Apr 2025 22:00:52 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: qm9isCimfg0psnSTMFyQqlvogdVfke3r+IZ+TPsjHXM=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:f4:5e:76:b5:df:2c:5a:2f:bc:db:3e:e3:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: Apr 20 22:00:52 2025 GMT
Not After : Apr 21 22:00:52 2025 GMT
Subject: CN=f175d0a0c0b3c43b7dee6f9f5ec4c104f5af43a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:06:5f:24:bd:d0:36:fe:b1:8e:7e:94:b0:38:
fe:da:30:95:4d:46:6e:cf:28:55:4b:1c:c0:eb:58:
da:9b:e0:a3:49:c5:a6:17:f8:42:07:02:f0:7a:ea:
51:2f:2c:b5:ff:2a:ef:58:d4:60:fd:7d:d2:6b:b4:
de:4b:32:99:3d:ab:c5:d3:0d:6f:53:c2:8d:9b:5f:
e3:2a:fb:54:a9:5d:72:f0:6b:59:42:7e:12:84:01:
73:96:9e:c7:05:29:81:3c:ac:8a:dc:08:93:55:d0:
8f:f7:3a:ae:3c:d9:dc:72:db:3c:6c:29:4c:db:5b:
fc:73:7b:59:18:dc:bb:da:1c:fa:d1:b8:ff:96:61:
f2:eb:10:2a:62:17:c9:4b:64:fa:4e:53:c9:08:68:
d1:1f:ac:1d:ec:5b:72:75:cf:6c:93:07:dc:3f:7c:
b3:e7:72:4c:7a:e0:3a:d3:17:ad:72:86:1d:52:7c:
45:e8:8c:53:d4:e4:84:a6:e4:30:f0:9f:81:3d:66:
8c:55:dc:38:cf:bb:de:3d:d1:88:cd:8c:6f:bd:39:
a3:07:da:1a:92:e5:bf:f1:b9:77:f9:f3:c5:44:b6:
05:1d:50:ea:1f:46:86:d7:24:ef:86:80:3e:13:f3:
bf:11:09:8a:1c:55:33:53:9f:6d:77:3d:19:15:dd:
f2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:D0:A0:C0:B3:C4:3B:7D:EE:6F:9F:5E:C4:C1:04:F5:AF:43:A6
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:6d:55:d4:c2:b8:0e:b0:bc:dc:43:a4:f4:82:6b:9e:c1:5a:
3b:14:1c:81:6d:59:90:4a:f0:64:f2:79:25:ed:cc:c8:89:ed:
82:d4:20:ff:c4:99:5f:df:1c:5f:a7:34:ac:b6:54:05:a8:2e:
c8:14:96:96:02:63:be:34:9e:ac:ce:55:54:d9:7b:6f:49:7c:
32:6b:97:30:42:58:28:87:3b:ea:02:d7:bb:28:fc:2d:8b:49:
6a:67:42:de:2e:ba:af:7d:b0:6a:8d:f6:5e:a0:9a:95:11:b3:
7b:45:dd:b3:8b:8d:31:42:d2:67:bf:d3:84:f0:a8:9c:43:6c:
c6:1f:ea:ca:0f:38:d4:ee:4d:b8:61:d6:60:d1:da:d8:ac:f8:
8f:61:ee:c2:fc:4b:6c:26:0d:61:3f:fd:e3:fc:56:8c:e1:ee:
46:64:03:75:a5:ae:ee:81:bf:7e:01:a6:07:99:9f:31:6c:ee:
06:c1:39:7d:58:84:0f:32:ef:3e:71:3e:d1:81:f7:35:db:7f:
01:32:45:ac:94:4a:69:64:22:18:61:79:50:d3:f7:bd:fe:f0:
a6:6b:7a:83:46:6d:43:40:7b:d3:17:f2:ca:89:67:a4:3a:da:
3c:3f:14:61:76:2c:4c:60:b4:dc:73:40:d7:fc:e3:e4:b7:56:
b0:7c:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:50 2025 by rpki-client