Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
File: z-DfghIUOCcckTwk_1D9O2LUDcY.mft (raw, json)
Hash identifier: 8ZgltBGcm6tLDCRtkvKoK5LUa/+Y4NXOw1ZTNwUZc10=
Subject key identifier: 22:74:8F:73:D0:24:53:B9:58:F3:C0:2C:31:FE:53:7A:29:4B:50:F3
Authority key identifier: CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
Certificate issuer: /CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Certificate serial: 01962AF293A6BA0560EC8CDA7A4ABE323E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
Manifest number: 0507
Signing time: Sat 12 Apr 2025 17:01:02 +0000
Manifest this update: Sat 12 Apr 2025 17:01:02 +0000
Manifest next update: Sun 13 Apr 2025 17:01:02 +0000
Files and hashes: 1: dg19fPDPdlao_unFvCVYC9RvrNk.roa (hash: 1cfvjDRPYU7JD/YdM+FbsUT+iUhZddEmRAh2tZhtxpM=)
2: hjhGPiy3UFBr9ANkRCMDMmtPbyY.roa (hash: sqw0T+Zj9m/aPxSyQB0liPAB0Jl/klsDHqYei7sLIoY=)
3: mrfqZX09-GYD22YGA7OHI1KATR0.roa (hash: iAu2ErUzWfhvcM5+CamqqvdYTRwJsRA5N+3mtIKS/Kc=)
4: ovGP4arKXoonSAQIQ1WNcsWj-gQ.roa (hash: T9HKSRGXUzrIsVuq9KTvv/Pp6ahuWPC0kj3dMzK0+WE=)
5: z-DfghIUOCcckTwk_1D9O2LUDcY.crl (hash: pLIHr1YcufbMYT3gbFdS6xlv48XaYnAK26ftgSObMNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:f2:93:a6:ba:05:60:ec:8c:da:7a:4a:be:32:3e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfe0df82121438271c913c24ff50fd3b62d40dc6
Validity
Not Before: Apr 12 17:01:02 2025 GMT
Not After : Apr 13 17:01:02 2025 GMT
Subject: CN=22748f73d02453b958f3c02c31fe537a294b50f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:42:83:0d:34:ac:8e:59:bf:a9:81:95:c7:
55:38:7b:16:a9:ca:14:2e:05:68:03:4f:bd:6a:63:
3f:c8:e9:88:7d:38:b2:6a:11:a2:5a:5b:0d:4c:c5:
a7:c8:46:41:f9:83:8b:02:97:aa:6a:c6:64:ad:d0:
c6:54:21:17:f3:ef:1f:57:f3:6c:06:91:21:60:2d:
58:23:bb:59:9f:c9:59:95:92:85:d5:de:ed:10:b2:
38:d8:51:f9:d8:ef:34:b9:47:ed:81:41:39:5b:52:
ee:97:8b:5e:bb:ae:13:53:75:ae:89:6b:fd:39:f9:
05:ca:cb:74:6d:cc:45:ce:8f:7c:7e:ec:83:f3:0d:
5f:68:a6:a4:74:d4:4c:ae:15:18:dd:f8:d7:26:af:
1d:7e:14:fd:be:e5:06:95:89:e6:64:09:1f:e3:03:
3d:89:bb:08:f7:91:9c:2e:8b:6a:62:b9:57:f3:6b:
7f:35:54:35:21:2c:1b:6a:1a:fd:24:e9:de:f7:e2:
22:e5:9f:9e:8e:f1:e6:c4:51:9d:07:c8:05:79:1c:
af:a6:6a:71:a6:71:00:9e:3e:5d:5b:dd:f0:dc:63:
fe:8c:32:c1:46:7d:25:6b:9f:6c:92:be:2d:54:a9:
00:68:7d:aa:56:36:81:6e:c8:c1:b3:22:9c:3f:d1:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:74:8F:73:D0:24:53:B9:58:F3:C0:2C:31:FE:53:7A:29:4B:50:F3
X509v3 Authority Key Identifier:
keyid:CF:E0:DF:82:12:14:38:27:1C:91:3C:24:FF:50:FD:3B:62:D4:0D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-DfghIUOCcckTwk_1D9O2LUDcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/26331c-34a1-4bc5-b75c-f2c7922faf32/1/z-DfghIUOCcckTwk_1D9O2LUDcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0f:d3:64:f7:13:c1:de:b8:5c:58:fe:31:95:52:f0:ed:f3:
69:ff:31:0d:5f:1a:b8:a1:ab:b1:3e:fc:7c:59:fc:39:f9:0b:
f0:1a:94:1b:01:fe:39:42:91:97:f5:75:5d:6f:11:73:6a:a5:
7d:63:e0:6f:c0:8a:38:26:6e:a7:a8:d5:8e:cd:e0:50:8c:67:
6e:58:01:c9:ea:87:c1:bf:7f:af:45:14:ec:a6:50:ab:92:c2:
e1:5f:43:48:29:09:a8:94:dc:62:fc:32:4a:0c:1e:dc:be:d3:
b1:35:71:63:c5:46:d5:44:49:6f:1f:65:b8:93:d9:31:c3:c8:
e1:93:9b:4e:ca:b3:23:72:ae:5d:c0:f5:78:bc:99:59:8f:3b:
db:7c:77:88:59:7c:20:7e:06:e8:23:cb:e0:ab:be:b5:28:93:
61:68:09:4e:eb:1b:ec:4c:e4:3d:ff:20:7d:35:92:27:2a:21:
b8:d3:e9:fa:ec:f3:5b:04:b0:55:2a:7a:ca:18:94:59:cb:84:
2f:32:55:7b:d4:17:6c:68:42:10:a7:51:5c:23:cb:c9:e4:40:
51:c4:69:fb:73:fc:b9:72:8f:89:29:d9:90:53:a5:85:09:fd:
e1:6f:fb:8a:34:08:ad:88:e8:02:88:89:cd:d6:12:49:ce:89:
55:9d:c7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:43:08 2025 by rpki-client