Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: i9HaWp88UUdKtW0JMRn21W4qCmbC6e10PAKYCZzmIW0=
Subject key identifier: 56:B1:B6:71:DA:3B:96:34:7C:48:88:0C:58:2B:F7:17:8B:E0:D5:13
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 01958CCE6E1F1E0507A400871E9A7C338BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 0F06
Signing time: Thu 13 Mar 2025 00:01:33 +0000
Manifest this update: Thu 13 Mar 2025 00:01:33 +0000
Manifest next update: Fri 14 Mar 2025 00:01:33 +0000
Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: 5Ei2TAFt+9rHIKKE2Ze3Y5a57yWSXHFCo0so2hL6+HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:6e:1f:1e:05:07:a4:00:87:1e:9a:7c:33:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Mar 13 00:01:33 2025 GMT
Not After : Mar 14 00:01:33 2025 GMT
Subject: CN=56b1b671da3b96347c48880c582bf7178be0d513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:68:f7:8d:8f:2f:fc:e1:89:37:3d:4a:57:f4:
57:62:f3:f8:08:82:40:b7:a6:f1:bb:48:6b:26:9f:
84:25:76:0f:e3:d5:f8:25:8a:b3:0e:9d:19:00:10:
61:b9:21:88:7b:7f:c5:18:31:e0:12:5b:cf:a9:23:
31:c3:d4:28:03:6d:28:37:47:13:ba:ec:36:80:57:
cb:79:a8:1f:d1:65:4f:8b:d8:a1:16:2d:ca:07:1f:
93:5f:ce:43:5b:c9:c2:1a:73:00:9f:61:3c:00:27:
fc:10:90:00:e7:d0:0b:37:3b:49:e1:7d:b0:c8:dd:
62:f0:d7:6c:ba:6f:51:ed:7b:32:52:80:8f:b4:1c:
c9:fd:33:9f:0f:b6:27:6b:29:96:c1:61:e4:7f:9e:
0d:a3:65:81:0d:14:67:54:76:51:b9:f4:47:0c:ca:
12:e9:41:eb:65:22:e1:30:7a:f6:e6:a2:8e:5f:97:
2a:de:ec:18:cf:db:8a:96:a8:d4:96:98:3d:03:2a:
8b:7e:be:4c:89:a3:47:a3:0d:cc:8a:6a:89:a3:c0:
66:de:06:ec:84:01:a2:b9:20:0e:a1:20:7d:8f:39:
d6:a8:91:4c:59:4b:e9:9f:12:38:3e:33:a3:d3:a6:
e3:ef:bc:82:d1:84:6b:2b:9f:74:7d:e0:08:b5:c5:
b1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B1:B6:71:DA:3B:96:34:7C:48:88:0C:58:2B:F7:17:8B:E0:D5:13
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5a:79:3e:4b:f7:59:8e:2c:48:82:2d:bd:70:ec:7b:14:5f:
be:c4:3b:35:b9:50:92:96:71:45:ee:8f:d2:c1:da:c1:03:8f:
e4:4a:fd:d2:e4:79:6c:d4:26:f2:d0:19:a8:cd:33:48:dc:4f:
ef:a0:53:06:0f:22:c4:4e:de:a7:61:60:60:f4:67:2e:e1:4e:
bf:43:aa:5d:08:17:ea:46:28:cb:50:87:80:56:0f:99:02:9a:
a5:1b:0f:fb:bb:79:05:4a:31:3c:16:4b:81:46:a7:c8:31:44:
13:89:7d:f8:24:f7:3d:f4:db:30:de:c6:b4:24:b0:e8:d2:8a:
3b:2d:73:df:50:e3:60:5b:99:87:49:c9:d6:51:24:97:ab:68:
45:c6:ad:31:a6:4c:89:07:ca:07:30:8e:af:c9:1b:eb:c1:36:
c0:20:be:2b:e0:39:61:a7:e7:a2:5e:32:aa:e0:78:51:60:cd:
81:37:e0:db:7f:db:6f:f6:31:16:82:da:a7:ef:bf:fe:4f:54:
a3:90:ea:b9:65:38:bc:5b:40:ee:e8:25:27:42:ac:74:a1:9e:
42:2b:00:a2:4c:c6:74:7c:c5:27:f1:73:e8:d7:82:7f:49:45:
83:98:23:0b:a4:42:ca:c4:a1:5b:b2:b0:30:fa:eb:c9:9d:8c:
79:e1:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:45 2025 by rpki-client