Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File: zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier: DXpQgQfOZS2QYh/avE5HepmcgRze/C0/9CZB7QA9/c8=
Subject key identifier: F7:75:0B:66:79:9E:15:73:2F:F5:D3:BE:87:7E:7C:35:D3:E5:64:9B
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer: /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial: 019602D2346F03C3DD746F855A2A04E8B098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number: 0D7D
Signing time: Fri 04 Apr 2025 22:00:52 +0000
Manifest this update: Fri 04 Apr 2025 22:00:52 +0000
Manifest next update: Sat 05 Apr 2025 22:00:52 +0000
Files and hashes: 1: KV7R1N_V77pOGNFqnvFI6VhE9Go.roa (hash: ih2S77Xnd5LfWtkG7w1ATz4hnQOa5DPl2XBfQ5D61xc=)
2: YoriHP_16arPHdOvDoMYO04hQkM.roa (hash: /lTd6A0sIeKscoeYGd/TO3yXs/PZBXapXa0ik8V7+LM=)
3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: Zq+ypUI83+9heF+vGKPyDZJyO7JHcn6Ag6VbX/5Bx5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:d2:34:6f:03:c3:dd:74:6f:85:5a:2a:04:e8:b0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
Validity
Not Before: Apr 4 22:00:52 2025 GMT
Not After : Apr 5 22:00:52 2025 GMT
Subject: CN=f7750b66799e15732ff5d3be877e7c35d3e5649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0b:4d:1f:1a:b4:db:17:ea:ef:31:35:6f:3e:
bf:d9:71:f8:d2:25:c4:bd:5e:80:62:3c:d3:5f:4c:
be:34:35:db:d5:f5:de:9a:0b:17:7c:13:58:98:66:
fa:92:f1:6b:0f:a5:47:fa:6a:92:18:b4:a2:33:89:
9a:1b:d0:73:4d:10:74:13:f1:f9:b2:d0:f8:f3:40:
49:a0:13:d4:58:5b:45:05:c0:0b:5b:48:72:4e:57:
26:af:e0:ea:cc:b4:c3:6a:a8:81:8b:82:6e:64:03:
b6:d1:0d:43:ba:3a:21:76:3a:b5:7d:d8:84:d3:76:
c4:23:02:45:57:04:52:46:fb:51:49:ba:db:1f:16:
d0:c7:5d:51:0b:12:6a:c3:41:c8:8e:bc:1d:18:0e:
c7:3c:7e:b6:5b:53:fd:60:3b:f0:10:8d:41:e6:37:
1a:e2:ac:33:79:2f:75:92:49:e4:07:d7:9f:fe:3e:
87:5a:98:22:b3:c1:a2:96:35:88:5a:26:1f:9f:e2:
18:23:8e:ef:67:89:87:42:5b:43:35:0c:0b:16:b6:
79:b3:59:5f:5f:81:a0:d6:75:44:41:e2:f3:de:0b:
d1:f7:ff:08:46:7a:0d:61:c7:37:e3:f6:d5:47:91:
76:85:45:be:2f:19:30:4d:87:36:20:f3:0d:16:18:
a5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:75:0B:66:79:9E:15:73:2F:F5:D3:BE:87:7E:7C:35:D3:E5:64:9B
X509v3 Authority Key Identifier:
keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c7:c9:13:34:ff:e9:53:05:f6:bf:8f:cb:da:ef:63:70:b9:
bf:55:93:b9:7a:d0:9a:8f:c4:b4:e4:75:8d:d6:11:10:6a:f4:
d9:b3:d8:f9:22:5a:40:d4:91:7e:cc:3e:8e:2a:f1:81:4d:dc:
3f:1e:64:2d:a5:29:c3:d5:f4:1a:38:26:dc:69:a8:73:71:2e:
e7:60:04:da:15:b7:58:13:18:bc:98:3d:30:2f:33:c9:56:10:
c2:27:5d:0a:4b:84:2a:5c:f5:0a:ec:f6:34:ca:49:99:c3:63:
19:40:d8:c4:8e:b0:ed:b6:57:d8:cf:c7:47:59:57:bf:6e:bb:
0b:48:8f:4b:db:a5:f0:8d:82:53:4d:d6:6a:28:da:ae:28:e8:
2d:a3:aa:69:a7:da:25:63:84:33:ae:63:0c:cd:a0:78:81:a1:
d8:65:01:c9:31:23:3c:0d:98:e2:1f:81:66:ae:01:4b:01:3c:
a2:a3:5d:d6:06:06:7e:81:f6:2b:81:a7:56:a2:b0:9e:15:95:
e4:f2:64:6e:b6:61:e3:83:23:13:a4:7b:26:17:61:e3:73:a3:
0a:5b:8c:7c:4a:bc:2d:7c:48:44:86:50:b5:f9:2b:78:5c:b4:
ff:c8:79:a0:ca:cb:af:08:72:38:a9:2e:80:e5:2d:4a:6d:25:
44:42:4e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:26 2025 by rpki-client