Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
File: z312VOh85PlnktVlxW4ZH0Ten1o.mft (raw, json)
Hash identifier: npYnuKm01mzwdbo1Vz6XNzTlvSGA3dj401IwwntCReo=
Subject key identifier: 4F:61:7A:AF:11:EA:63:31:95:31:2A:CA:A1:F2:35:94:B3:58:67:7E
Authority key identifier: CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
Certificate issuer: /CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Certificate serial: 0196470E83558E4D27072A0719807426F9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
Manifest number: 0E08
Signing time: Fri 18 Apr 2025 04:00:55 +0000
Manifest this update: Fri 18 Apr 2025 04:00:55 +0000
Manifest next update: Sat 19 Apr 2025 04:00:55 +0000
Files and hashes: 1: z312VOh85PlnktVlxW4ZH0Ten1o.crl (hash: ScsT/qGxhnOuSTGsiFHE663YxNmb8DyeYhoXbKFyBgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:0e:83:55:8e:4d:27:07:2a:07:19:80:74:26:f9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7d7654e87ce4f96792d565c56e191f44de9f5a
Validity
Not Before: Apr 18 04:00:55 2025 GMT
Not After : Apr 19 04:00:55 2025 GMT
Subject: CN=4f617aaf11ea633195312acaa1f23594b358677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d9:eb:2d:94:25:8f:d8:75:bb:61:ab:b9:ab:
76:bf:36:42:00:0f:45:a8:1b:ee:4c:c1:56:9b:aa:
4e:b0:ab:4b:65:40:de:48:7d:b1:bb:f0:db:ba:a4:
0e:fc:ca:b7:7b:b8:0b:fc:dd:b2:2c:07:37:50:d7:
e8:83:36:a3:24:b2:0f:d7:8c:7d:d7:fb:4b:0e:fa:
ea:59:47:0d:71:d3:7e:92:cc:71:8a:6e:f3:2f:3f:
17:27:d5:c3:15:4c:30:74:49:a2:b6:e6:39:d7:d6:
6d:d5:2e:5f:e5:73:ca:54:aa:13:3f:7b:1c:f1:1b:
0c:90:85:97:ac:d5:85:34:a9:7e:be:93:91:6a:4a:
b8:69:16:43:72:b0:75:bc:10:70:d4:b9:2a:6f:86:
4a:52:99:03:82:7a:a6:90:71:e3:0d:3f:3a:b0:6a:
1b:2b:bd:9b:54:4f:cd:3d:f1:84:37:a0:17:04:ae:
80:69:b9:e7:24:bb:9b:3d:d2:2c:7d:b9:29:95:89:
0b:81:ab:9c:a4:fa:30:c1:e8:eb:f5:aa:b0:22:8b:
21:3a:43:2a:cc:5a:03:af:35:7c:9d:57:90:fa:7f:
ad:24:42:12:54:89:85:b2:9a:6f:85:0f:84:c5:30:
ea:12:a7:b3:e3:b4:eb:91:34:4e:71:a6:b2:4c:39:
db:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:7A:AF:11:EA:63:31:95:31:2A:CA:A1:F2:35:94:B3:58:67:7E
X509v3 Authority Key Identifier:
keyid:CF:7D:76:54:E8:7C:E4:F9:67:92:D5:65:C5:6E:19:1F:44:DE:9F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z312VOh85PlnktVlxW4ZH0Ten1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/fba0ec-de56-40a5-89cf-770d7e3c0620/1/z312VOh85PlnktVlxW4ZH0Ten1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:d9:cf:c7:00:a7:c5:98:0e:54:ad:7e:c8:35:88:4d:f6:
78:a0:f8:4a:f5:98:6e:3b:ca:38:9f:25:34:0a:06:b0:82:6a:
b2:70:f8:77:91:36:fc:45:1b:ed:c3:a0:d4:56:5d:aa:55:e2:
76:ca:b3:fb:d5:73:a1:75:27:a7:4d:1a:a5:de:45:e6:83:02:
9c:af:ac:1d:21:95:53:e8:e7:f9:71:e4:a0:6e:ba:e8:e2:84:
a7:3a:02:a5:0e:e0:dc:10:0c:31:17:5d:38:6d:04:30:69:16:
1b:b8:85:1c:98:77:01:d8:d9:a8:93:5b:e6:cf:1a:54:2c:14:
97:7c:ef:c7:f7:8b:95:ac:b7:61:b5:a0:38:bc:d1:65:6d:56:
f0:a3:48:aa:e7:6c:f9:bc:3c:55:51:27:05:35:05:51:d7:36:
05:38:2e:2a:a6:01:cf:3c:69:06:f0:48:71:16:53:c3:59:a5:
19:f0:62:56:07:7f:51:5a:c4:c4:3e:e2:2a:b4:10:86:6e:18:
76:c2:57:86:29:45:c9:7f:de:95:bf:bc:c8:95:04:99:5b:2a:
88:ea:2e:b1:c4:4f:a6:36:c0:b7:1e:d8:01:f2:27:d4:e2:2d:
64:d6:fe:ad:a9:91:92:00:55:6f:96:4b:30:5e:19:42:ff:fc:
5a:7d:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:34 2025 by rpki-client