Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
File: Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft (raw, json)
Hash identifier: zJfUIOy+Rt6DkCGFbckM26MpG+fgerUkdoXeL0Nub3o=
Subject key identifier: B6:81:80:74:AA:D9:5D:23:8E:BB:6F:9F:23:3E:75:4B:CE:41:20:D4
Authority key identifier: 47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
Certificate issuer: /CN=473f498592457859f26fb5a610b7b51ef52413f3
Certificate serial: 01965FF230C28DD2B85251596AB4C6CA693F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
Manifest number: 0677
Signing time: Wed 23 Apr 2025 00:00:29 +0000
Manifest this update: Wed 23 Apr 2025 00:00:29 +0000
Manifest next update: Thu 24 Apr 2025 00:00:29 +0000
Files and hashes: 1: Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl (hash: CPqVtHtEICwOyPBRGbvztpp4SAPesbLZXEEcA+0LCOg=)
2: gACLFbYoQuKSwULuZch33ylGIws.roa (hash: Y3WJDNbjsbnqFHsgE1qqfoHZxL80KWaLyz825fwkstQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f2:30:c2:8d:d2:b8:52:51:59:6a:b4:c6:ca:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473f498592457859f26fb5a610b7b51ef52413f3
Validity
Not Before: Apr 23 00:00:29 2025 GMT
Not After : Apr 24 00:00:29 2025 GMT
Subject: CN=b6818074aad95d238ebb6f9f233e754bce4120d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:af:7e:72:cc:ef:18:87:3e:4e:31:79:e6:
a7:c6:98:d6:b5:e0:d7:33:ad:84:17:fc:47:49:47:
38:7c:91:5b:af:88:01:96:11:a7:b0:15:be:60:18:
65:bb:0b:fc:48:df:42:7b:45:03:b3:d2:b4:aa:d3:
5c:de:94:de:cf:fd:1f:98:53:71:de:1d:0a:5f:07:
10:61:52:db:80:12:eb:0c:4d:1c:97:4f:98:18:2c:
f3:68:0e:15:8d:0d:f3:dd:cc:3d:f0:8e:d8:6d:23:
28:38:86:ba:a7:96:1b:c6:8a:13:79:10:6f:b5:6a:
d0:bc:b2:59:71:0e:68:39:60:aa:c5:95:5c:5a:70:
ef:c1:01:2c:ef:fc:cc:f9:d8:4a:8e:83:c4:6d:9f:
4e:d3:f5:92:0e:e2:c6:5d:b3:2e:20:d9:59:85:9f:
72:aa:13:4d:83:05:05:90:b1:73:fd:e0:91:c1:ee:
f0:e2:19:72:0c:87:bf:76:11:95:da:80:af:63:b1:
40:37:2e:07:21:92:21:22:40:33:2a:3e:33:db:f2:
f1:5b:cf:0e:68:6e:2a:ab:0d:01:79:88:2c:9f:40:
1d:03:5d:08:6b:a3:f0:df:3e:5e:f5:b7:57:4a:86:
cc:96:b0:ac:2a:09:1d:d1:ed:1f:b8:96:05:1f:a2:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:80:74:AA:D9:5D:23:8E:BB:6F:9F:23:3E:75:4B:CE:41:20:D4
X509v3 Authority Key Identifier:
keyid:47:3F:49:85:92:45:78:59:F2:6F:B5:A6:10:B7:B5:1E:F5:24:13:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz9JhZJFeFnyb7WmELe1HvUkE_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/428237-efd7-4726-90ca-f8f492af480e/1/Rz9JhZJFeFnyb7WmELe1HvUkE_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:27:0c:55:be:f5:80:4a:74:3d:bc:d5:45:58:34:62:88:3a:
99:1c:9b:5c:5d:32:ce:13:eb:eb:2c:a5:f2:87:4e:f7:2f:bd:
66:a5:a8:41:00:bd:ce:4a:6e:28:0f:51:df:be:0c:01:72:d7:
68:b0:a3:3a:82:7b:e1:7f:51:b3:c3:f9:a0:a4:ad:f2:cc:96:
6e:2f:62:e5:0b:fc:f4:d2:ae:c1:15:a7:7c:7b:69:5a:40:0e:
1e:13:b0:0c:5b:e6:f9:48:8f:9b:ce:40:2c:aa:0e:f3:70:27:
54:cd:75:e1:f2:d7:44:c5:79:94:5c:aa:b9:ba:33:ba:65:cf:
d1:5a:fc:e7:69:54:17:df:2a:97:bd:23:4a:fd:f8:6d:11:e8:
00:6c:9f:e2:c3:b3:35:61:35:6d:20:e0:4e:d6:f4:16:01:59:
8e:48:51:c4:f8:4e:43:44:e0:d4:b0:f0:70:c4:1d:94:a2:c6:
53:a6:fa:46:e5:95:9f:0d:16:1b:d9:fd:77:f0:57:93:de:90:
b4:38:79:c8:3d:bc:30:eb:e0:59:af:79:8f:99:ae:a9:8f:86:
66:c8:07:c0:6b:87:14:aa:cd:8d:49:a0:ce:5b:0f:70:eb:a9:
42:55:51:ee:65:d7:08:42:e6:97:9a:7f:83:6a:82:de:1c:bb:
97:34:5b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:34:26 2025 by rpki-client