Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: Lp8nKSI3l9SVwywVWhsNxE9jH/FcXGhjyXz+l/YweyE=
Subject key identifier: 0F:DF:F0:0E:85:4D:C0:9E:D6:31:8D:D9:06:C0:E1:71:04:F1:AE:15
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 01964DB4D3CC58CEE71ED578F845D1DCA010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 04A0
Signing time: Sat 19 Apr 2025 11:00:18 +0000
Manifest this update: Sat 19 Apr 2025 11:00:18 +0000
Manifest next update: Sun 20 Apr 2025 11:00:18 +0000
Files and hashes: 1: slxDmCt2L7uCGsUsrtR25UrWHG0.roa (hash: DyUu6++jqUZQV0Vf12twiu6zSmlHweojaxYVbm0ofdE=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: oAfX4y0lzvKhuwVXj4tYBwAdFZrzroQhu3s0RNE5Grs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b4:d3:cc:58:ce:e7:1e:d5:78:f8:45:d1:dc:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Apr 19 11:00:18 2025 GMT
Not After : Apr 20 11:00:18 2025 GMT
Subject: CN=0fdff00e854dc09ed6318dd906c0e17104f1ae15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:d5:d9:39:24:b1:58:39:05:bb:01:db:3f:
3e:b5:a4:a4:68:3d:c8:a1:23:7c:ab:45:34:c0:1e:
40:c8:8e:6b:70:2e:89:08:7e:02:2e:38:07:48:7b:
6f:c0:7a:23:9f:81:18:b4:0c:ff:72:d5:0e:ca:5f:
f3:4c:69:99:77:63:72:ba:db:09:a7:ad:40:58:87:
72:c9:08:e5:ee:17:6e:3c:b5:e4:08:86:83:be:7e:
76:47:a4:c0:a2:35:98:ad:12:02:e4:4c:35:77:e9:
c9:cf:b4:ec:fa:8b:ec:d0:48:29:ab:e1:b8:8d:64:
82:f2:a7:4b:74:b8:3a:21:a1:1a:a5:b8:e5:fd:7d:
6b:f1:de:fc:33:b8:18:c7:c5:a0:e1:ad:50:96:c6:
e7:b0:25:fe:a5:0f:11:ed:62:19:ef:eb:27:21:52:
47:53:5e:ca:e6:ee:6d:76:f1:45:4e:d4:ad:3c:82:
ef:68:4e:4d:da:e9:b1:c4:9d:f9:5b:99:9f:11:fe:
d7:30:91:85:02:e9:3c:70:19:0e:c3:79:84:02:5e:
53:80:2e:a6:47:87:41:38:4b:91:72:a8:41:1b:1d:
68:c0:2f:19:94:f3:fd:a2:c4:59:9a:40:29:b5:51:
e3:a2:26:dd:71:67:c2:eb:45:e0:32:59:64:12:78:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DF:F0:0E:85:4D:C0:9E:D6:31:8D:D9:06:C0:E1:71:04:F1:AE:15
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7f:7c:f3:e1:26:e0:0e:ca:5a:8f:26:d7:03:3a:41:95:d6:
fc:5f:5c:eb:20:a4:18:dd:50:93:35:df:ab:8f:e4:69:8d:ae:
3f:5f:a6:89:19:33:f4:9b:09:e6:f3:ab:0e:5c:3f:31:3e:b4:
1c:7b:2f:13:4f:c7:42:9a:8a:76:a9:74:e9:ac:fa:51:40:80:
7e:02:cc:8a:ad:6e:7e:40:41:14:37:82:45:cc:33:ee:48:ee:
19:ee:a0:37:34:e5:87:18:66:f0:82:e4:80:62:94:37:18:e6:
8e:9d:0e:12:eb:bb:c4:4f:17:60:e8:43:14:93:5a:ce:ec:4a:
26:5a:3f:a9:c0:a2:80:a4:a4:49:c2:ec:b9:22:f3:bf:75:76:
f1:8f:95:67:65:30:1e:2f:96:d8:22:fb:10:fc:42:fc:e7:48:
99:09:0d:c1:54:e7:aa:4f:61:6a:9f:bd:f4:9a:61:47:29:8e:
64:9f:94:4f:a7:6b:40:8c:42:80:a4:dc:27:51:09:a1:65:86:
31:bf:cc:6c:64:12:4a:c5:ad:29:09:be:9b:7e:18:87:7a:a8:
94:62:0e:71:b0:a2:f2:7e:0b:f4:dd:0b:b8:04:59:99:7e:7d:
9a:38:4f:82:b6:fe:53:1a:bd:20:58:b7:48:a4:3f:cb:5d:40:
91:0a:2a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:10 2025 by rpki-client