Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: 5dXcoPgJUlIFziPpSiu8Yn9sBnpR+ZlEsQyPj5Zd+gI=
Subject key identifier: 39:F8:8B:43:92:3D:94:EE:3C:29:DD:E8:9D:1E:B1:E0:4E:5B:84:8C
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0196526D50E000662F0A716EF7CCF82367D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 09:00:17 +0000
Manifest this update: Sun 20 Apr 2025 09:00:17 +0000
Manifest next update: Mon 21 Apr 2025 09:00:17 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: iIkC60ftZ1t847Ljt+aMiw4SI14H+FtWRM+CKO2pfLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:50:e0:00:66:2f:0a:71:6e:f7:cc:f8:23:67:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: Apr 20 09:00:17 2025 GMT
Not After : Apr 21 09:00:17 2025 GMT
Subject: CN=39f88b43923d94ee3c29dde89d1eb1e04e5b848c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:74:e4:68:90:c5:91:05:46:c5:2d:5e:b3:
38:13:98:68:bf:b0:f4:15:fa:34:af:de:36:7e:06:
a4:9c:26:e5:52:16:f2:f0:1f:e0:14:1e:3e:e1:15:
ba:b7:75:9e:34:94:77:cf:7c:83:f4:fb:cd:cb:2d:
c9:e9:d0:b1:d1:17:02:cc:9f:d2:68:76:cc:2d:3d:
cd:cc:3b:83:1f:ea:ad:7a:56:2a:b5:89:ad:bc:b2:
c9:d6:6f:37:ab:09:ff:d5:d6:31:bc:9f:dd:54:23:
e5:41:d6:5a:dd:64:78:b4:99:ef:89:27:15:48:52:
5c:b8:c8:d4:7d:e0:78:05:39:2a:d9:c2:a5:d7:69:
15:4c:e7:8f:8e:be:c0:4d:85:da:59:42:5f:1c:97:
cf:60:3b:d1:aa:b7:f9:47:46:94:86:d8:9b:d9:18:
2a:a9:7e:b2:78:6e:63:03:fb:a5:e8:68:1e:dc:f2:
41:81:d8:4e:15:4f:6c:7d:b2:76:13:da:62:64:cc:
30:4a:48:6c:3c:ca:8f:c4:5d:5c:a0:bb:45:44:00:
c7:51:3e:91:2e:6b:64:ff:fc:34:e4:b8:50:2d:67:
45:08:01:9e:a9:98:bf:74:fc:64:8d:67:15:3e:f6:
f6:54:f0:64:b0:db:9b:c3:06:92:ad:06:98:70:08:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:8B:43:92:3D:94:EE:3C:29:DD:E8:9D:1E:B1:E0:4E:5B:84:8C
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:cd:40:e4:0c:24:fd:8f:57:02:81:18:75:2c:c4:d7:e4:8a:
59:3a:c9:a7:7c:71:65:d5:09:ff:ff:dd:5f:d8:f9:d9:99:0c:
9d:71:86:4d:56:7f:69:20:c4:b5:ae:26:7f:4d:bb:dd:5b:8c:
fb:8f:55:dd:11:5d:92:2c:72:27:02:4c:a4:c4:a6:d9:67:09:
a4:76:92:13:58:b5:05:9a:fc:bc:b0:0d:39:bc:35:aa:03:4b:
79:84:c8:d0:3b:49:99:88:0d:80:65:31:e5:fc:a1:90:ec:55:
9f:9b:76:18:db:f0:79:2b:6c:7e:5e:a9:9f:5d:eb:03:95:27:
67:e5:ef:4a:bb:5a:26:6d:16:4e:a8:6e:22:1f:c4:26:5d:85:
3b:7b:e4:79:06:4e:5f:a5:82:44:5c:0a:db:35:a4:ed:cb:ac:
f3:67:83:5f:f7:34:27:11:fd:00:02:fe:49:35:d2:7c:32:8c:
46:4c:97:34:de:3d:14:dd:a1:f2:ae:57:6a:96:31:e5:7c:d4:
2d:14:db:97:07:d1:50:44:e2:d6:5a:4e:4f:7c:73:c0:45:aa:
78:13:29:2b:d7:53:44:c1:6b:7f:9c:fc:cc:86:08:89:76:15:
ae:3c:30:74:89:14:5b:89:09:56:27:60:f3:e2:9b:54:0c:84:
6e:9f:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:44:38 2025 by rpki-client