Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
File: RRZvo3x2TNxioAvKKyssh5_2mdk.mft (raw, json)
Hash identifier: aaxLQpbVI5l4thmeL9hTkjDuRtxV+RpPOjVgc6znZNs=
Subject key identifier: 1E:FC:05:2E:0F:FB:80:15:8E:C5:F2:ED:8F:48:EB:51:9F:D3:35:EF
Authority key identifier: 45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
Certificate issuer: /CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Certificate serial: 01958F982C7F07900B8361DF7F70D0AA2EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
Manifest number: 0B6E
Signing time: Thu 13 Mar 2025 13:01:09 +0000
Manifest this update: Thu 13 Mar 2025 13:01:09 +0000
Manifest next update: Fri 14 Mar 2025 13:01:09 +0000
Files and hashes: 1: RRZvo3x2TNxioAvKKyssh5_2mdk.crl (hash: WwwzUV3EcE67CTxLXtK2df8C2mqpZfW8KfagAy8Tt9k=)
2: wWyM4PnxUHq-TrKwhSjR_q8t_q8.roa (hash: eIaYl/XQCMrWCrG41jkzzFId5xb3CG5cunZSp8FL+Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:2c:7f:07:90:0b:83:61:df:7f:70:d0:aa:2e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45166fa37c764cdc62a00bca2b2b2c879ff699d9
Validity
Not Before: Mar 13 13:01:09 2025 GMT
Not After : Mar 14 13:01:09 2025 GMT
Subject: CN=1efc052e0ffb80158ec5f2ed8f48eb519fd335ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:e3:52:05:10:46:73:69:77:1d:59:3d:7b:
9a:ac:a2:95:46:5f:61:cb:fe:f8:94:43:e0:94:46:
e4:90:66:2d:4d:2f:20:81:dc:ac:12:0a:23:10:37:
cf:cb:a5:bc:5e:85:f7:f9:b2:98:a8:88:0d:fc:35:
e0:a5:3e:74:ce:64:29:71:1c:64:5b:a6:96:9b:41:
2c:87:98:24:ff:b0:6e:87:a4:48:ff:8d:de:86:24:
33:8a:a4:76:c0:79:66:8d:d7:25:af:a8:a1:72:26:
56:75:16:09:87:fb:a1:8f:ca:5a:46:c9:74:1c:56:
42:cb:15:35:c0:4c:e5:af:21:aa:1a:d9:9b:76:cf:
94:0f:fb:d2:1c:5a:c1:6e:95:34:9e:8d:f7:e1:bb:
0a:1e:e9:bc:7e:7a:10:b0:7b:b3:f3:c6:07:04:3c:
39:ba:9b:c5:d7:f6:90:d0:7c:c2:12:08:9b:a8:aa:
77:d5:26:5f:1a:e1:0e:3b:93:17:7c:f9:47:f2:46:
aa:c1:61:fb:70:00:84:cb:aa:a7:9f:bc:f6:90:02:
3f:04:d0:d4:ac:34:c7:80:9f:b9:18:0e:01:95:84:
10:13:6f:a0:92:94:3c:10:ac:33:aa:46:7b:90:97:
71:f5:a4:24:32:a2:a8:5c:c6:3b:4a:21:f3:7c:2f:
c5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:05:2E:0F:FB:80:15:8E:C5:F2:ED:8F:48:EB:51:9F:D3:35:EF
X509v3 Authority Key Identifier:
keyid:45:16:6F:A3:7C:76:4C:DC:62:A0:0B:CA:2B:2B:2C:87:9F:F6:99:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRZvo3x2TNxioAvKKyssh5_2mdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/08e2cd-f91a-4025-92ef-e0660d023104/1/RRZvo3x2TNxioAvKKyssh5_2mdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:10:1a:e6:9c:94:a8:91:99:4a:ff:cd:cc:ab:5f:11:3b:ab:
fb:93:65:87:a1:f7:dc:4b:e2:f5:2c:9a:37:4f:22:b3:1d:60:
03:d9:1d:7b:a9:c4:03:c3:c6:72:5d:06:ec:bd:3c:4b:b0:ac:
f7:b7:fc:b5:7c:f4:5f:4b:fd:f8:79:4b:23:ad:bf:a8:53:a4:
3d:e1:76:26:58:5e:4b:8b:ab:37:7f:14:03:04:40:1d:2b:59:
1e:a4:96:4b:66:62:29:d3:c9:9d:40:19:5a:fd:80:4d:a8:6c:
28:1e:61:52:45:e4:b6:6b:03:18:4a:c8:55:c8:5e:36:d2:52:
cb:9e:56:a8:cf:06:2f:ab:12:c9:80:b5:c3:88:48:67:4a:d2:
ed:d0:e0:8a:e3:d6:a9:8f:92:a1:73:e8:97:82:4e:8f:05:1b:
5c:02:7e:77:d4:ce:ce:e3:55:55:b8:ec:d7:a3:26:76:be:16:
4b:7e:93:c6:d8:fd:90:35:90:11:2b:63:a8:4a:5a:da:6e:8a:
f1:fe:bc:9d:72:7b:c2:f4:c7:4d:97:81:5e:72:c6:a3:b7:91:
cd:80:1a:68:1c:b7:c6:6d:66:c6:c7:4c:12:97:72:3f:4c:60:
2e:17:b0:34:84:50:7f:45:79:ab:9e:2e:ad:f2:40:63:04:b4:
04:74:67:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:58:53 2025 by rpki-client