Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: JMojjmCRsDgWqlAqJxZmGcrXPlTKK/Km9mp/tqtnz/U=
Subject key identifier: FE:C1:16:67:08:D6:36:38:2D:36:F8:1F:92:D6:2D:DA:A7:13:C2:1B
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 01965F168A6053DBFFDC3A5BF31DB23F5B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 1097
Signing time: Tue 22 Apr 2025 20:00:34 +0000
Manifest this update: Tue 22 Apr 2025 20:00:34 +0000
Manifest next update: Wed 23 Apr 2025 20:00:34 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: xaTAxYFy06ULfkrA69S3XUpIDLcx17AwDTU+c0lJLpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:8a:60:53:db:ff:dc:3a:5b:f3:1d:b2:3f:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: Apr 22 20:00:34 2025 GMT
Not After : Apr 23 20:00:34 2025 GMT
Subject: CN=fec1166708d636382d36f81f92d62ddaa713c21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:36:3e:35:92:5f:1f:e3:56:1d:9d:41:ff:
78:08:d1:6a:f7:b7:34:8d:9f:76:02:e8:81:24:7a:
48:ea:ae:4f:9e:65:7d:b5:97:49:d7:df:83:0e:dd:
36:47:52:a6:70:bd:6a:f2:1d:47:59:29:46:25:0c:
cb:9d:31:c3:21:17:02:e7:e5:e5:d0:34:c7:90:1d:
5a:f6:35:e3:fd:2e:a3:3b:5e:e0:3b:3c:88:33:37:
59:ec:4a:b5:e2:64:4f:bd:7d:a6:3d:5c:a2:24:63:
e0:ff:a2:be:0f:95:3b:6a:dc:22:f8:8b:fb:c6:a0:
d1:8c:67:43:56:2d:df:8b:e7:e9:53:89:b6:fd:e9:
f3:54:3f:91:60:58:f5:71:d5:16:7e:d9:78:86:d5:
30:13:59:8d:08:58:d6:da:0d:19:f4:4d:4a:3d:81:
67:34:a3:31:6c:48:90:c8:80:0b:ed:7f:55:ce:d0:
a5:16:91:de:35:36:b6:73:5d:c3:17:ab:d3:47:ba:
ed:1d:5f:40:b7:a4:10:46:b6:7b:f1:d8:2c:f5:25:
59:42:b2:e8:e8:1d:06:d5:8c:e1:ef:46:07:0c:70:
df:ab:2b:fc:0c:a0:8b:9e:05:54:60:a8:4c:2d:62:
bf:17:10:e3:67:cd:3f:48:a0:a8:09:d9:bf:61:2c:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C1:16:67:08:D6:36:38:2D:36:F8:1F:92:D6:2D:DA:A7:13:C2:1B
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d3:9f:af:0e:73:94:10:79:a0:83:f3:aa:3b:3b:6a:10:25:
da:3f:0f:e0:fe:a9:2a:ce:58:6f:54:f6:76:90:f7:70:4b:1b:
cd:fa:98:63:ce:67:62:1c:58:c1:e0:5e:0b:8f:ab:37:cf:90:
27:6b:07:e3:36:fe:b9:dc:bb:5a:97:59:e2:a7:dd:e6:d7:ae:
e9:60:8a:b5:2e:8f:28:4a:d7:2f:d9:a5:9b:ad:20:58:7f:1e:
7d:8b:07:93:f0:db:2e:5a:fe:20:03:6c:25:24:12:de:dc:26:
1a:e8:3e:c5:87:c4:b4:fa:3e:de:41:f2:93:aa:6b:2a:b2:6f:
22:a2:be:6c:7a:69:e6:b0:6d:02:d3:9c:37:db:a6:77:a9:ba:
c6:02:fa:cc:03:82:84:2b:0d:f3:5f:69:f3:a8:bc:6c:5e:d7:
41:b9:6f:94:92:aa:37:e8:f2:ba:11:ef:68:0b:05:c0:cb:4c:
88:c1:ca:fe:51:c8:64:8f:fc:fd:20:5a:d5:db:6a:81:b2:3b:
14:b7:0c:e5:cf:e5:3b:e7:0b:3b:1f:f3:dc:b4:53:ac:27:f3:
20:e2:7d:57:14:1a:33:97:28:6b:0e:34:da:a8:6a:f7:61:d7:
5e:7f:61:59:bc:bf:55:35:e9:cb:ea:d1:14:52:b3:43:8c:d7:
b8:7d:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:31:18 2025 by rpki-client