Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
File: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft (raw, json)
Hash identifier: KEUbmocTs/JefX/OpqGbi/4P9VxRZkXPfqGmUHWdCY4=
Subject key identifier: 2B:0C:36:8F:6E:17:00:8E:EF:BB:8D:33:14:03:95:AB:5D:4A:89:67
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 0196586F89E1E7C55065C116F1E5061B2C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
Manifest number: 0B3F
Signing time: Mon 21 Apr 2025 13:00:26 +0000
Manifest this update: Mon 21 Apr 2025 13:00:26 +0000
Manifest next update: Tue 22 Apr 2025 13:00:26 +0000
Files and hashes: 1: LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa (hash: 7TRQZhECen5sQILgMQ/YVGL/75Sg6nbZxTLOGOZ3zSk=)
2: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl (hash: dtND7HSvg4cq81/DzX6KvMuYO1nMe7M1cNsJESPPy8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:89:e1:e7:c5:50:65:c1:16:f1:e5:06:1b:2c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Apr 21 13:00:26 2025 GMT
Not After : Apr 22 13:00:26 2025 GMT
Subject: CN=2b0c368f6e17008eefbb8d33140395ab5d4a8967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:bb:c7:40:8f:a9:71:22:4e:6f:f9:1f:de:
a4:07:3b:1e:c2:92:e0:20:d6:6c:66:eb:10:6e:ef:
f6:fd:99:ba:33:0a:44:4a:9e:29:f5:31:37:1c:58:
75:de:b8:a4:18:22:c8:9b:7f:e2:fa:b2:54:f4:94:
ce:6c:7c:90:91:b7:a9:e0:3e:c1:95:aa:dc:f8:95:
d6:fe:70:1d:08:a2:18:82:7f:60:65:86:fc:12:e9:
8c:22:b4:d5:96:4e:29:3b:1c:27:eb:87:66:f0:98:
c7:06:b9:b4:ed:d2:38:ba:5b:d1:39:d2:0b:90:c8:
13:bd:97:e9:b3:84:b8:ec:43:19:b3:51:0a:22:43:
22:4a:22:3f:b1:ff:77:fb:b2:02:71:df:43:ae:6a:
c5:f5:d7:29:c1:50:08:53:76:01:04:e5:df:da:89:
77:90:fb:cb:0d:ba:a8:da:c5:1d:b2:60:1a:02:c9:
d7:4f:3b:ec:e2:95:e7:dd:6f:98:1a:1e:aa:be:5d:
4b:a2:82:60:39:88:68:aa:47:e7:02:74:5e:62:0e:
1c:bd:fe:31:f2:4a:39:01:34:08:ba:29:e5:9e:9a:
bc:b1:7f:93:fb:04:84:06:08:2c:b9:f7:ed:0d:5d:
4b:e6:13:b6:6f:b8:d7:93:74:50:8c:7f:18:ea:a1:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0C:36:8F:6E:17:00:8E:EF:BB:8D:33:14:03:95:AB:5D:4A:89:67
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a3:be:e1:02:9f:1a:f2:f4:0a:bf:37:98:d1:fb:d7:2b:44:
af:7d:a1:92:2b:35:aa:f8:0c:ba:a5:4a:e1:ba:19:d1:33:ee:
91:93:02:06:83:02:7e:af:56:7c:57:8a:bd:7a:5f:ec:01:1e:
cb:d1:44:f7:54:ab:28:8e:0a:2b:55:8f:ae:ba:13:41:57:6a:
da:75:ea:5b:c5:ad:8d:12:3a:a6:66:8c:9c:94:07:3f:70:b9:
d0:16:25:3d:3b:d5:fd:01:81:95:12:6a:92:d1:fb:24:7f:28:
3c:f8:e5:ef:57:8e:d0:2c:a1:df:32:2a:89:6b:15:d3:df:e2:
b4:01:26:f1:04:8e:d1:59:73:f2:49:0d:7b:5c:28:f7:aa:8e:
25:77:7a:c8:39:e0:17:80:2e:4f:86:66:87:3c:5b:06:91:8f:
36:fc:82:b4:0d:01:a4:b6:08:7c:e7:86:2b:bc:63:ae:8d:0b:
75:38:15:d4:c6:50:6c:9a:66:14:bd:3e:68:bd:0e:cc:f9:33:
52:a6:e0:fd:31:a5:6b:ce:46:5a:62:eb:87:23:51:4a:51:1d:
1b:71:a9:c8:a0:ac:00:c7:84:91:e3:e7:de:71:b0:a6:0f:f0:
55:b0:06:a5:8e:fc:9a:ca:8f:d0:bf:82:3d:9e:a6:06:99:f5:
f3:d9:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:03:54 2025 by rpki-client