Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: JfhZizrGaqozaFvLpJ1Kogb18BpbNS3wgl819vWjo3c=
Subject key identifier: 7D:10:FF:58:9A:C1:07:45:03:FB:D2:CC:E0:E3:94:9C:D1:B5:CC:FA
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 019648FCA32425524627B7B8AE7839F0C7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 0E39
Signing time: Fri 18 Apr 2025 13:00:38 +0000
Manifest this update: Fri 18 Apr 2025 13:00:38 +0000
Manifest next update: Sat 19 Apr 2025 13:00:38 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: IaXnlnHxVgoEX1UTLs1DE8GtJn0.roa (hash: vQAYnVro3YqKas8+EITAndDR2jmhTfit27limCUGo58=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: 0sls1gmFuIaZpA8Qr8zZNRXXwtcT+dLgVuYBW34SFDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:fc:a3:24:25:52:46:27:b7:b8:ae:78:39:f0:c7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: Apr 18 13:00:38 2025 GMT
Not After : Apr 19 13:00:38 2025 GMT
Subject: CN=7d10ff589ac1074503fbd2cce0e3949cd1b5ccfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:f4:43:55:61:ad:d5:80:80:dd:78:e9:18:
50:e9:08:0d:7e:da:9a:59:b0:74:23:17:77:cc:ad:
a6:89:fa:24:3a:ee:cc:b4:c9:72:cd:b1:75:63:eb:
8b:61:23:29:32:3d:17:38:45:e0:ca:e1:91:81:b6:
6b:00:a3:ac:4a:3e:30:8f:40:42:76:47:0a:c5:3d:
8b:9d:12:02:b3:40:83:62:aa:43:47:1b:71:99:62:
a3:12:22:f1:aa:60:34:6e:26:77:6d:fa:9f:25:f9:
17:d8:3a:08:3b:ff:a7:2e:a5:60:a1:f4:e4:31:0b:
c9:38:5f:1f:b8:76:45:48:c5:6d:da:27:37:1d:30:
b0:a6:6c:ce:9b:35:f6:46:1e:1f:7b:5c:d0:2d:99:
bf:d8:3a:cc:6f:10:a2:c2:eb:a2:6f:3b:bf:17:d2:
b3:06:69:ec:90:20:56:6c:7d:f4:06:f6:c5:6b:f2:
a2:e5:78:b6:01:d9:86:1c:da:ac:99:94:a7:4e:61:
ea:9a:91:32:65:9b:9d:74:c6:fb:97:17:ee:dd:f8:
bb:0f:c9:82:3c:8f:ad:31:f5:c0:2b:65:95:9a:d5:
d1:c8:c5:fa:11:87:cf:0a:98:bb:fc:67:98:92:d5:
52:9b:ac:d3:24:00:6d:c3:55:ae:57:c3:7d:18:15:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:10:FF:58:9A:C1:07:45:03:FB:D2:CC:E0:E3:94:9C:D1:B5:CC:FA
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2f:18:2c:1b:d0:2f:63:77:ed:b8:d0:56:4d:51:1b:05:e3:
3e:66:8c:61:e2:aa:71:df:8e:61:bb:70:11:3d:09:56:83:98:
18:9f:79:be:64:bd:76:4f:d2:c9:10:b1:f4:a6:9f:87:7b:e3:
76:2f:42:86:4b:d5:69:09:9e:f8:28:6f:02:d9:7d:56:e3:a1:
ba:36:c1:d0:f0:f0:8d:50:00:85:dc:3c:da:7f:a5:73:7a:fb:
03:a0:ee:fd:1f:29:71:46:47:b7:3e:ca:b3:41:20:a8:42:ae:
0c:ad:5a:90:2b:5f:41:8c:cf:6e:ea:1b:5c:8a:24:bd:a6:18:
55:21:24:ca:dd:ba:8c:c3:04:74:a5:ec:2c:8c:f6:07:b3:67:
e0:3c:99:d3:a2:02:80:46:a8:94:41:9a:ef:53:81:fa:33:30:
03:15:2c:9d:25:78:75:23:6c:8f:23:b4:1d:7e:22:4b:03:8b:
af:15:c8:f7:4f:e9:2b:d6:2e:41:b0:73:66:b1:7c:29:10:fa:
8a:e1:a7:8a:98:3b:ec:65:cf:d9:ff:7b:d0:d1:b7:2a:21:fa:
93:0a:77:f1:93:47:a1:65:7e:57:70:02:c8:65:fb:49:18:ef:
47:2e:d6:41:ca:7d:39:ca:e8:3b:a5:4a:41:20:3f:b0:91:47:
a4:7e:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:08:01 2025 by rpki-client