Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
File: Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft (raw, json)
Hash identifier: TNv8GE5dVxHNKedFESYHok8it3vLLS5ZAWOltQnpyVI=
Subject key identifier: B9:FB:80:28:5A:35:F8:01:AB:6D:84:75:1E:72:E0:63:E7:22:B7:B7
Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Certificate serial: 01958B847FE728C1EDFD1C6754E3D1A12493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 18:01:11 +0000
Manifest this update: Wed 12 Mar 2025 18:01:11 +0000
Manifest next update: Thu 13 Mar 2025 18:01:11 +0000
Files and hashes: 1: 2rjfYwu41EDGb0WtR0lRAzBBGyA.roa (hash: 30Qgx7xaxGQYFQO1NrnbCAkFDKPGGACEBi1o6yALtbk=)
2: Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl (hash: Ws0jRhchDAFDHZasAr1ZH9hTlu9WC0PZaMptD647GN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:7f:e7:28:c1:ed:fd:1c:67:54:e3:d1:a1:24:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769
Validity
Not Before: Mar 12 18:01:11 2025 GMT
Not After : Mar 13 18:01:11 2025 GMT
Subject: CN=b9fb80285a35f801ab6d84751e72e063e722b7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4a:f9:4c:31:6a:1e:ca:f2:fd:5f:c4:00:24:
eb:1b:df:b1:fb:71:66:97:3a:b2:74:fc:17:c2:e7:
34:df:6b:ea:9c:44:02:ee:f8:03:36:80:b6:9d:b0:
a5:c1:5f:78:be:65:36:27:ff:aa:ad:99:ab:52:e6:
cf:a9:f1:2c:c7:f3:48:0b:a4:50:00:1c:1f:b1:aa:
00:ae:14:45:00:aa:0d:2d:ef:02:c1:a9:6e:10:ea:
32:12:d9:c8:91:36:6a:77:2b:97:a1:e7:ca:65:14:
2f:d4:9b:07:32:a7:f1:bd:b3:b2:2e:3a:cb:4e:02:
a3:17:10:e7:2e:8a:eb:a8:0d:85:d5:91:b5:6d:30:
e8:c2:fe:1e:1c:81:36:2c:f3:bf:4c:5a:80:e2:7d:
ba:2d:a3:81:94:f3:5e:c4:63:3c:14:ea:23:a7:24:
6f:73:ff:d8:c9:12:67:e7:87:26:cf:50:f5:64:65:
54:f8:f1:e2:e4:9f:48:a5:53:2a:6c:18:ed:68:4a:
08:47:d5:76:31:fd:77:cc:ef:ae:49:12:af:00:b2:
dd:49:01:8f:81:e0:07:48:cc:08:fc:d3:43:58:1a:
a7:97:b7:42:94:42:0c:1b:75:31:1f:7a:a6:d0:bc:
99:bd:ed:7c:f6:48:c3:3c:60:02:b2:59:07:0f:18:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FB:80:28:5A:35:F8:01:AB:6D:84:75:1E:72:E0:63:E7:22:B7:B7
X509v3 Authority Key Identifier:
keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:0f:f4:4f:25:86:e2:f1:3a:5e:c5:e3:4a:b4:3b:48:4f:
02:e7:f1:5a:b2:05:8d:94:41:41:b7:8a:fa:ee:a6:c5:4f:8c:
f5:51:9f:c2:c3:9d:74:0d:33:c3:41:60:e9:f8:4a:d2:1f:6c:
10:11:0a:a1:70:35:b3:85:75:5c:9c:ea:6a:48:b3:b8:ed:f9:
91:d8:47:4f:6f:09:59:48:c8:72:81:79:0d:f4:03:e4:f7:7d:
f8:b4:ac:a7:22:71:0d:c3:a5:35:7f:71:61:89:bf:e6:c0:3e:
cf:85:3a:65:94:4d:2a:70:2d:7a:09:aa:e1:63:b6:af:00:45:
82:cb:25:55:59:b1:1a:a3:d5:3c:a4:6f:ab:2e:ef:c3:28:84:
dd:68:ec:55:9b:48:4d:ab:09:ea:68:3d:85:72:08:55:25:9d:
c8:0f:3f:cb:47:80:ef:12:4a:73:97:e4:2c:10:b4:a2:6f:5f:
9a:90:2d:3d:82:ab:6e:ae:24:f5:75:20:6a:56:92:c0:35:f3:
e5:e9:aa:e1:44:da:a7:f7:91:bc:da:4f:ac:2a:1c:45:dc:88:
01:03:2d:2c:6c:c1:d1:c2:3d:22:69:db:45:68:90:a6:ed:8f:
3f:aa:52:67:bb:92:d4:5e:57:ba:10:69:7d:4a:c0:c5:60:cb:
58:66:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:52 2025 by rpki-client