Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: 8nTMpSmiyjD7AYZPxDJqjljQ7Dg89lWUvJNxBCK3RW0=
Subject key identifier: 0A:96:17:7B:83:5E:EA:DA:EC:DF:75:A8:ED:DF:69:B1:F5:3A:53:92
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 019651C8F178DFCCE2CAC8489E84AB819437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 021D
Signing time: Sun 20 Apr 2025 06:00:45 +0000
Manifest this update: Sun 20 Apr 2025 06:00:45 +0000
Manifest next update: Mon 21 Apr 2025 06:00:45 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: e3wJq/KwdvK1zcbKEUen+WNnYHkU/iTzgnBQUBNfN1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c8:f1:78:df:cc:e2:ca:c8:48:9e:84:ab:81:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Apr 20 06:00:45 2025 GMT
Not After : Apr 21 06:00:45 2025 GMT
Subject: CN=0a96177b835eeadaecdf75a8eddf69b1f53a5392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:17:09:a0:c8:04:6d:4b:aa:3a:35:f8:ea:
88:ca:b3:a4:67:1e:67:c1:6c:b2:e3:29:e9:72:14:
ff:63:cc:a1:15:b5:39:22:20:79:16:4f:83:47:bd:
3a:a2:92:ad:e2:18:08:76:70:cb:59:16:31:23:b0:
8d:2c:9e:8c:1e:79:1b:07:3d:16:75:79:14:4d:95:
ad:ab:f7:6d:e4:47:47:37:eb:f4:f8:e5:05:c0:29:
df:b3:56:3d:35:bc:ae:46:bf:2f:a0:6b:9b:bc:14:
be:52:54:ca:ce:a0:5b:fb:07:38:97:5f:9f:8f:ea:
41:34:ed:69:77:cc:b3:e7:9d:56:7f:5d:85:45:0f:
d7:84:87:1b:d7:9e:4e:81:23:2b:f5:1e:23:ea:08:
d7:d2:75:f8:c4:db:47:1f:5e:86:6d:b5:8f:04:96:
97:dd:71:cd:96:5d:ac:7a:13:3d:d5:ae:39:98:58:
2f:4c:02:c2:9a:c4:87:fd:9b:f6:6c:a1:94:4d:c8:
e5:19:64:e4:55:5c:ac:8e:05:b1:71:e5:e5:df:55:
aa:c3:27:50:93:04:ef:5f:fa:e5:de:9d:be:02:15:
b4:62:fd:d4:62:cf:64:62:c3:8c:dc:08:d3:53:1d:
a7:95:a7:58:e4:32:a4:21:84:5a:78:1e:06:56:9b:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:96:17:7B:83:5E:EA:DA:EC:DF:75:A8:ED:DF:69:B1:F5:3A:53:92
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:56:87:10:1e:ec:5e:0c:66:be:ae:6e:98:b6:5e:0b:d7:1e:
3b:fa:7b:d3:d6:ba:e5:87:a4:6e:c0:1e:a8:2d:8e:b9:ae:a3:
ac:92:32:62:45:7f:16:a2:1b:e9:1c:fb:fd:75:4f:38:0e:83:
4c:39:f6:12:a4:96:e7:86:dc:97:46:c1:a5:e7:a3:16:11:e0:
ad:c1:27:ae:8d:dc:0a:2f:93:c7:ac:29:9b:fd:b6:20:48:3a:
26:95:a5:81:bb:24:a8:0d:65:bc:f0:6d:1d:df:79:5e:de:5e:
98:00:7c:a5:fe:ee:ff:3c:45:df:e7:11:10:0f:41:4e:81:01:
81:67:19:5e:6b:ae:c3:7a:6b:c7:82:bc:ef:fa:1e:75:79:d3:
52:8b:b6:aa:89:07:8d:70:7a:87:1f:e6:44:41:90:19:89:6d:
55:56:47:30:a1:cf:e9:65:3b:76:13:f1:e4:ce:38:d3:04:a1:
4a:69:13:98:4d:2d:cf:d6:3c:d4:a4:c0:16:47:d8:77:97:c6:
9c:63:0a:9e:12:aa:73:89:49:5a:d9:f5:11:b6:e7:ea:c7:83:
41:42:c0:03:c9:20:ee:38:86:b2:9d:2e:82:14:28:01:1e:22:
a8:b3:e2:7c:4a:e4:48:bf:df:7d:5f:0f:b6:94:20:05:ca:bd:
92:17:34:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:53:39 2025 by rpki-client