Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: 3dsrRwxU7sVN0tb41Tbo+Shxq1TL+pgDEKCeArrke3g=
Subject key identifier: 84:17:D8:7A:DF:5A:F7:9C:E1:23:2D:B9:83:E8:E9:4B:CD:44:90:9C
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 01963C53E3184739147AB4A9E71A40DEB770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 14F8
Signing time: Wed 16 Apr 2025 02:00:52 +0000
Manifest this update: Wed 16 Apr 2025 02:00:52 +0000
Manifest next update: Thu 17 Apr 2025 02:00:52 +0000
Files and hashes: 1: 3RInciSdJGuSvDB_51KkkZIJFSM.roa (hash: 3/HjzRtzuMbFeOMatgJOwMZQLWYkmzjLRu3ceCOI8Rg=)
2: Vwxuf9tXogbGBPbtetxGHltRAJA.roa (hash: 56fbOe+uRKJW3PaHfR9HfAkpkYQK6n+PS05QT68yj88=)
3: r_bOLpGR44Uxr2yZR3U8n-cd72g.roa (hash: 77U0OrAigBGcas60BhBB6LRX9fbaZ0dNBtqvHrAGNSA=)
4: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: wHuiVSVv91cuhXMx2pQFRgp+lyg3Oh9Ua9dKp5wSmvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:53:e3:18:47:39:14:7a:b4:a9:e7:1a:40:de:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: Apr 16 02:00:52 2025 GMT
Not After : Apr 17 02:00:52 2025 GMT
Subject: CN=8417d87adf5af79ce1232db983e8e94bcd44909c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:24:cb:11:6d:20:cc:b5:d0:c8:0a:33:2a:
eb:a8:83:a0:cc:bc:60:d9:6d:04:34:ee:09:8b:77:
cb:0e:60:24:1d:86:11:09:95:dc:e3:ef:8a:63:8d:
71:12:81:5e:db:65:08:d9:98:1a:7b:03:10:9e:30:
6f:97:59:72:ed:fb:e2:02:d2:62:de:00:9f:b5:56:
f5:27:f2:15:8c:57:0c:51:ec:ab:d6:f2:6c:54:83:
c5:f5:60:20:19:a6:ab:2d:21:ba:19:11:33:25:b0:
d2:41:45:f5:79:ef:97:6c:2c:49:06:50:37:3a:d5:
72:f1:2c:aa:c3:b3:08:85:1f:20:0e:2f:5a:23:4b:
e7:a3:ba:62:4f:4d:71:9d:30:23:3c:e2:00:15:44:
85:73:6d:b1:ef:2e:6e:66:92:18:a7:28:13:8c:3a:
85:7e:d0:c4:87:b5:0c:b7:6f:35:92:88:8d:55:8a:
4c:d7:23:e9:d1:fe:ff:bf:77:ab:73:68:84:68:7b:
ac:6f:52:47:32:b0:53:a8:f6:1a:5e:9e:71:5f:f4:
37:2c:76:31:ba:d7:50:99:66:63:51:8f:3f:4f:0d:
e0:fc:f9:01:c6:b5:94:d0:06:f2:fd:7f:aa:cb:68:
60:35:43:9e:ac:e0:aa:10:54:3c:b6:84:73:4a:ff:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:17:D8:7A:DF:5A:F7:9C:E1:23:2D:B9:83:E8:E9:4B:CD:44:90:9C
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f8:ac:4d:32:8e:9c:e4:a6:a5:86:96:4f:95:3f:32:dd:ed:
ac:d3:8c:7a:39:d0:6e:ab:3b:a4:02:45:91:c8:fe:5f:c5:7a:
00:f8:65:db:2d:1c:b6:60:26:a6:b9:4a:da:fe:5e:db:92:c8:
33:61:05:d2:d1:ff:88:a1:38:1e:52:ce:ed:d6:49:9e:6f:e9:
3c:f7:dd:35:a9:24:5a:cd:7c:d0:46:ea:68:22:af:54:61:8f:
24:b5:37:4f:d9:c7:36:78:57:32:c8:0e:fc:2c:d5:2d:9f:2c:
18:b5:39:4e:2b:7f:be:c9:6d:00:58:91:e7:ee:4e:d9:2c:75:
11:44:96:29:7a:ad:d7:f5:3c:a1:65:46:b2:a4:31:26:bb:c9:
80:09:98:0e:2d:64:89:2d:f8:de:ce:13:1e:d5:2c:e5:38:eb:
3b:50:89:52:ab:58:02:91:05:0b:3f:26:1e:11:47:18:8a:db:
1a:a7:cc:97:7f:6a:93:3a:d5:fd:b7:99:26:ec:63:e3:f7:3f:
e9:36:97:3b:45:8d:26:03:1d:a8:d6:24:ff:63:03:10:52:cb:
b9:a5:d5:64:82:40:9a:ad:ab:c2:7e:ee:b8:94:13:02:21:8f:
4e:77:e2:af:87:10:27:2d:bc:34:75:46:be:d5:9b:21:7e:56:
27:eb:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:50:36 2025 by rpki-client