Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: XYFN4BRuRAs3uV+3eTdGOVNoQRKzPcguzN+g/GqV4Ro=
Subject key identifier: 2C:72:A1:94:71:28:4B:EA:5E:B8:91:FD:75:75:C9:A0:8E:3A:B2:01
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 019646A0AF1212E66A37C913DE0EE1B09E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0B92
Signing time: Fri 18 Apr 2025 02:00:57 +0000
Manifest this update: Fri 18 Apr 2025 02:00:57 +0000
Manifest next update: Sat 19 Apr 2025 02:00:57 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: azxelF/92AydVrbk6EHwuC6xiUp5lTKtNia/3E39AJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:af:12:12:e6:6a:37:c9:13:de:0e:e1:b0:9e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: Apr 18 02:00:57 2025 GMT
Not After : Apr 19 02:00:57 2025 GMT
Subject: CN=2c72a19471284bea5eb891fd7575c9a08e3ab201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:53:74:31:5c:84:6b:f6:dd:82:66:ec:d6:
1a:bc:4c:cd:e5:82:54:f7:6d:b2:98:8d:3c:11:21:
44:b8:7f:f4:4e:15:00:bd:31:e4:4e:33:c6:0e:27:
83:00:0b:50:37:b4:b5:47:1c:d3:c6:f4:af:3d:b1:
04:8c:c0:fc:bb:41:07:55:31:8c:55:50:3e:c9:dc:
00:21:24:4c:b1:78:74:5f:19:69:5a:48:19:9c:31:
f2:b4:ae:65:b9:67:d3:d7:36:ce:92:3f:d3:da:4a:
fe:a2:7a:5d:76:8c:65:48:92:c3:6b:eb:80:0d:0f:
9f:54:8f:80:ff:ce:96:91:ae:f6:8f:ef:ae:ce:f8:
ff:95:28:7e:36:86:53:6d:d4:67:5c:dd:39:b4:df:
09:d5:3f:23:0c:d3:72:de:db:ce:43:8f:71:fb:c5:
e7:b7:81:91:96:ab:52:a7:37:63:0b:f0:ee:e7:a7:
22:ef:6d:97:81:cd:f4:37:b6:6e:39:73:cf:e0:7f:
f1:f3:50:4e:07:53:1f:69:d0:0b:21:7c:dd:85:a6:
da:cf:7d:5b:66:14:7d:6d:f2:70:22:23:f5:b3:ac:
0e:92:91:bd:a6:2b:f1:66:0e:1a:64:b9:16:23:94:
33:35:1b:44:97:fb:a8:3c:6a:a0:a8:e8:c4:f2:75:
23:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:A1:94:71:28:4B:EA:5E:B8:91:FD:75:75:C9:A0:8E:3A:B2:01
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9f:1b:f2:50:8c:c8:47:5d:1d:dd:28:20:1f:57:37:8d:5a:
be:a7:8f:e7:da:0e:27:27:4c:76:1e:a0:2b:51:c4:b4:58:fa:
0d:53:a5:b6:41:8b:a1:a2:a5:e9:3a:84:8c:b6:62:97:89:8f:
75:60:f9:74:17:4c:c8:ec:de:e4:37:39:23:0a:4f:40:f6:34:
29:77:ea:45:26:db:31:c0:43:13:89:62:f4:b5:61:6c:c2:96:
0a:35:df:49:2c:c2:0b:ca:db:0e:43:89:8f:8b:ae:82:ad:5e:
0a:c0:35:bb:b1:5a:24:40:61:05:6a:93:03:8a:4a:02:2d:45:
4f:47:96:a4:0d:6d:af:c9:27:a1:f8:51:83:00:dc:f2:02:9e:
d7:fb:1b:54:d9:5f:9f:d3:d1:ed:0f:2f:74:57:27:df:e5:e5:
79:22:d6:0a:32:76:49:06:19:2d:77:05:0d:b9:82:19:bf:34:
df:d7:95:5c:4a:7e:29:85:4d:87:a1:67:e3:b8:a0:0f:f9:97:
ae:0b:c1:ed:6f:26:7c:82:6b:65:86:82:7f:4b:35:53:e9:a0:
41:54:01:16:e0:0a:1d:99:4b:5c:72:e6:a6:0d:b7:1f:4e:7a:
f7:05:02:ab:ff:82:40:2f:d0:b2:dc:9e:0c:b0:9c:a4:a1:1e:
50:f9:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:01:03 2025 by rpki-client