Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
File: RZYupWYFRlbvgqrOLXHHbRsLiLs.mft (raw, json)
Hash identifier: 6nwA+DTPAktkTSJP2MtSVqwJa6Idxv+BZPTtr2waiDo=
Subject key identifier: BB:97:1E:05:B9:2B:5E:46:D4:BC:AB:50:8C:F4:97:46:6D:1D:50:35
Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Certificate serial: 019602D2A7F01919A7A8D0FB2ADD6EB7CB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
Manifest number: 0E10
Signing time: Fri 04 Apr 2025 22:01:22 +0000
Manifest this update: Fri 04 Apr 2025 22:01:22 +0000
Manifest next update: Sat 05 Apr 2025 22:01:22 +0000
Files and hashes: 1: QNIQdG4Tu9zIYU5pnHAiIv-6jdQ.roa (hash: iDeA+sQiPag5Td4fIdhnGBEsGTbasSmj20N0QdB9b24=)
2: RZYupWYFRlbvgqrOLXHHbRsLiLs.crl (hash: CfZTRHWrwt9iN14AjbjWaPvw69V2edvzznupoXg2cII=)
3: WEolIktBESdvgc8hNiaPN7u1uwc.roa (hash: epUS51OLDZ6qazQuvjy3IHtOX7T0vUZAhescISw2oWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:02:d2:a7:f0:19:19:a7:a8:d0:fb:2a:dd:6e:b7:cb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb
Validity
Not Before: Apr 4 22:01:22 2025 GMT
Not After : Apr 5 22:01:22 2025 GMT
Subject: CN=bb971e05b92b5e46d4bcab508cf497466d1d5035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:38:01:ee:9b:33:5c:ee:13:dd:1a:d4:ca:
25:31:68:07:9e:13:84:62:f6:4d:6e:41:36:50:8e:
66:41:e8:6e:c6:21:1e:cf:72:ce:9c:05:9b:4d:42:
2b:6b:8a:9a:6b:66:a9:3f:96:b3:3b:42:26:80:1f:
39:2a:bb:aa:34:68:17:12:53:7c:c0:d4:c6:c6:be:
27:d3:a7:ec:ac:ef:32:93:34:85:c4:6c:03:80:0d:
2a:82:fa:35:10:9a:37:a2:88:20:f2:95:4e:9c:4f:
19:04:e5:e3:93:98:da:b6:eb:67:3d:ea:b6:05:96:
be:03:45:1f:59:e9:82:d2:5d:82:8e:27:20:a2:6e:
db:6e:f8:de:e0:f5:94:f1:b2:9e:08:41:ad:b5:5d:
49:97:1b:13:5e:76:d6:e7:f6:49:74:45:bd:15:3a:
0e:ce:c7:7a:47:46:2a:2f:cd:f5:81:27:ac:4e:1d:
52:03:e1:65:03:f7:6d:35:6c:66:d5:78:89:14:ce:
de:b3:96:e7:94:c4:78:cf:34:52:1b:c9:ab:5a:70:
72:3e:7f:0f:27:b3:ca:99:e7:a0:c2:82:f1:a0:c5:
58:e2:f3:fe:b7:46:dd:f4:6b:7a:a6:b6:29:61:33:
4d:10:7a:40:63:c6:d9:09:73:63:16:1f:9b:94:93:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:97:1E:05:B9:2B:5E:46:D4:BC:AB:50:8C:F4:97:46:6D:1D:50:35
X509v3 Authority Key Identifier:
keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1e:b7:d9:b8:8c:01:7f:91:7f:f0:18:0b:86:9c:9c:3f:dd:
4c:81:a9:3d:64:82:1e:49:d0:02:8f:50:08:d9:2e:d3:3c:c9:
c4:a9:3c:3a:bf:56:91:bd:3d:9d:58:2e:c2:f9:d9:9d:0b:00:
09:29:8c:b7:d5:f6:9b:a7:e0:dd:8e:92:05:50:c1:b2:51:96:
83:9f:15:8a:7f:8e:32:b7:f3:61:12:56:f0:a2:34:53:78:25:
f0:ed:1e:e2:23:4f:74:b4:c9:6a:84:18:6c:57:6b:e0:c1:66:
77:ec:46:9e:1c:b6:ce:ae:aa:d2:5a:10:82:28:1b:13:e0:e9:
b9:df:99:97:c1:fa:e9:3f:ca:c5:5b:2c:c9:83:fa:f5:2e:b2:
c9:c4:c2:64:e4:f0:93:ce:c0:5b:55:8a:0d:c2:64:7f:ac:50:
a2:eb:e2:34:c7:1a:da:64:39:73:17:dd:5f:fb:24:cb:3b:7b:
b2:68:c3:94:36:48:13:ea:64:c8:7c:f4:e2:12:b5:7b:9a:0a:
9c:31:ca:c3:84:72:b3:0b:d9:14:d2:75:45:3f:b8:67:0f:74:
e3:6a:c0:73:63:7a:83:74:e5:03:98:29:0a:ba:2c:fa:62:bb:
c5:96:da:71:c5:52:43:16:e8:ba:80:43:7c:aa:39:66:ea:03:
6e:fe:e1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:32:07 2025 by rpki-client