Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: Y2+InsxRu9jve/ee5KZ2FtoskBgctUFy/qwjLZdDqSc=
Subject key identifier: 75:6D:FC:66:23:F5:6D:FF:F0:59:C8:D0:16:CB:F5:1A:D5:71:1F:6F
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 019655A55CE00B553F1A3ABDA2DAE21BED38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 03D4
Signing time: Mon 21 Apr 2025 00:00:22 +0000
Manifest this update: Mon 21 Apr 2025 00:00:22 +0000
Manifest next update: Tue 22 Apr 2025 00:00:22 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: YDqNMXFAWySTKkAtUJfshD6KmZA3I2XVZgFjELdiCGc=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:5c:e0:0b:55:3f:1a:3a:bd:a2:da:e2:1b:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Apr 21 00:00:22 2025 GMT
Not After : Apr 22 00:00:22 2025 GMT
Subject: CN=756dfc6623f56dfff059c8d016cbf51ad5711f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:10:b6:39:c5:2b:5e:20:dc:58:e1:26:9d:c1:
f9:5c:95:4e:8a:44:88:dd:48:99:52:7e:23:06:48:
8b:45:fa:22:b3:a1:b7:76:ad:e0:ab:4f:04:40:3e:
9e:5b:a9:39:8b:d2:0a:7d:76:fc:d9:1b:a8:36:8c:
15:97:34:b3:1e:6a:0a:c0:58:ca:66:2d:5d:23:06:
e8:06:65:ec:f2:e7:ae:10:ce:80:97:4b:0f:53:b2:
8b:eb:19:a3:23:30:d8:e0:1f:8b:2e:e7:ac:e3:80:
42:df:4b:9a:f1:59:9d:14:d4:25:36:ca:5b:89:3c:
4e:a4:de:a6:d3:0c:2d:ad:04:f2:46:0c:49:70:a8:
9e:d2:f3:64:d3:ed:45:db:35:d1:e7:52:40:e2:6f:
79:9e:b6:d4:14:b7:b8:8f:17:82:a7:45:49:51:79:
d4:6a:0f:e5:84:ed:ba:f3:e9:9a:14:f6:01:53:b2:
2d:94:22:06:78:cc:bb:99:43:0f:a5:f9:17:54:cd:
f4:ef:3f:84:fc:5f:02:27:48:9a:cf:3f:e4:de:a5:
19:f3:17:05:f7:1d:52:db:2e:30:1a:de:da:a7:c5:
5e:84:96:c1:a5:1c:4c:ee:4e:ce:4a:92:ce:c8:4f:
38:78:cf:5b:17:80:bc:d9:b8:db:a5:4a:01:f2:69:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6D:FC:66:23:F5:6D:FF:F0:59:C8:D0:16:CB:F5:1A:D5:71:1F:6F
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d6:9d:09:1d:6b:dc:dc:6c:93:a4:ab:19:9b:a1:23:73:1e:
87:dd:46:1c:a1:ae:7a:30:60:07:22:b5:df:4c:d1:b6:8c:53:
eb:a6:9e:1e:3c:85:03:af:f4:40:bb:1a:99:34:41:2a:83:ee:
df:52:ef:73:80:42:8c:20:0e:be:bf:1d:df:2c:15:3a:db:49:
cd:8d:90:a5:bf:02:eb:15:55:ef:24:b9:04:90:f3:4b:c7:69:
02:dc:55:f0:f5:ed:53:ac:03:6f:95:47:b6:ff:7d:fe:a5:ef:
10:18:4f:29:a0:7a:83:23:d5:4f:c5:f8:d2:00:52:7a:36:1e:
20:72:23:f5:d8:c4:ce:f4:ce:6d:e2:13:78:4b:b0:51:ef:29:
7a:3a:36:0c:0d:d0:22:13:cb:ff:7e:ed:41:3b:74:52:40:07:
45:91:8e:29:1d:a5:3d:5f:a6:3f:6d:8a:d0:c3:a5:f1:54:69:
18:0f:95:b2:3b:5c:d8:a8:38:00:cc:27:24:08:4d:9e:05:21:
95:cd:4a:1f:5c:42:94:24:63:f3:94:68:7f:48:d6:06:ee:78:
2d:04:7d:ef:9f:d5:04:64:be:32:c4:18:0c:1c:48:d8:81:2c:
3f:90:54:2f:c3:2d:e1:0d:4a:70:c7:aa:42:97:80:bf:0e:77:
c4:0a:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:25 2025 by rpki-client