Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
File: z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json)
Hash identifier: 7PRMTTLi4Dv6s+jrKF3nXVKJ/hLC4OSj7ufUI2nqL14=
Subject key identifier: 7A:B0:B6:C6:8E:73:10:1F:C0:57:B2:55:77:7F:AA:6C:E3:19:AA:38
Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
Certificate issuer: /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Certificate serial: 0196542529BE946DDCBDD3461AE6EB8AB5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
Manifest number: 039C
Signing time: Sun 20 Apr 2025 17:00:43 +0000
Manifest this update: Sun 20 Apr 2025 17:00:43 +0000
Manifest next update: Mon 21 Apr 2025 17:00:43 +0000
Files and hashes: 1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: U5Ksau3kWKnuUF31Ahq55++mTnXItletxGOPNHxtCF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:29:be:94:6d:dc:bd:d3:46:1a:e6:eb:8a:b5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906
Validity
Not Before: Apr 20 17:00:43 2025 GMT
Not After : Apr 21 17:00:43 2025 GMT
Subject: CN=7ab0b6c68e73101fc057b255777faa6ce319aa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:a0:cb:20:a5:be:4c:62:00:17:89:1f:ea:
52:14:2c:9b:ca:09:f0:c2:75:dc:d9:69:2b:a4:96:
45:2a:e6:c1:22:dc:22:18:5d:10:01:54:ec:df:e1:
96:40:72:19:49:fb:b0:22:c7:0d:fe:78:57:d6:25:
a7:72:3c:01:2b:8f:77:1d:f3:01:1b:37:ff:df:d0:
90:a1:0b:25:98:18:b2:81:dc:50:e3:cd:ee:4c:05:
7d:11:af:69:94:36:a8:c2:b7:e7:13:ed:ae:c5:4a:
c1:8c:9a:31:5e:e9:c4:c0:53:5b:c5:a5:ad:d9:82:
ee:2a:86:51:34:1f:12:5f:0e:44:c4:d1:4f:0c:6c:
f9:aa:68:7d:52:9b:12:ed:80:34:db:a7:c6:e1:f3:
ef:fe:4f:c5:0d:50:f0:b5:65:f0:8b:95:ac:41:2d:
2f:22:a8:c9:1e:16:1f:79:98:ea:12:3e:f8:43:bd:
00:ca:27:5f:0d:a3:c0:55:b5:15:7f:86:c9:a7:bf:
b6:6b:e1:d2:99:06:af:22:85:06:ef:5c:0e:f0:7b:
8d:1b:dd:ac:32:e6:a0:f1:c3:f3:71:a6:dd:0c:ca:
bc:1b:66:2c:90:68:a6:6a:f7:3a:d4:5c:ab:ff:b8:
30:b1:00:25:21:ad:7b:af:23:93:8b:e1:3f:46:d8:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B0:B6:C6:8E:73:10:1F:C0:57:B2:55:77:7F:AA:6C:E3:19:AA:38
X509v3 Authority Key Identifier:
keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f8:7e:66:ac:45:0e:ea:7e:d1:dd:8c:40:b3:e2:23:af:73:
3a:5e:2f:b9:e1:87:f3:ee:73:4f:d6:21:a6:e0:ac:06:af:2b:
2f:ff:81:b6:aa:a4:c2:e5:65:cd:f3:c8:7c:5f:5e:0c:7c:2b:
01:26:13:ec:43:45:fd:3d:81:0b:88:54:6b:10:ca:bf:3d:6f:
cb:96:e7:94:27:90:b5:5a:44:ba:39:91:26:4c:35:f8:65:2b:
9d:a3:c2:06:e9:cd:29:16:67:42:d9:0c:ed:db:7f:88:8c:99:
96:20:30:a6:b0:68:9c:87:d4:f6:c2:54:68:ea:fe:b8:09:c2:
d5:07:f1:6a:e9:54:dc:68:21:64:48:70:6b:89:9f:bc:64:79:
99:63:98:46:ca:07:1a:46:ce:56:2e:70:da:3d:3a:95:85:e2:
6d:66:5e:11:6b:32:9e:48:e2:44:ce:af:f1:27:95:cf:b5:a5:
51:f5:98:23:d4:76:07:94:4b:03:47:59:ff:d7:78:16:43:e5:
f4:d3:6d:7b:63:48:4e:db:8a:00:95:c1:3a:97:50:61:e5:ac:
29:19:22:9a:b4:3d:13:77:a8:1d:f9:df:df:e4:8a:1c:e0:a7:
0e:5b:dd:41:4f:50:44:ae:a3:ee:ba:45:29:3c:44:68:9b:e1:
c5:64:e7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:20:11 2025 by rpki-client