Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File: z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier: VgcXETpetguJAgvHxLIXvIZaidf675/OGpyZemzzwpY=
Subject key identifier: 32:1F:01:4A:32:14:6F:88:7F:B9:71:75:16:8F:C5:F7:14:13:F9:24
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer: /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial: 01963F54D90A088B766512C7C12D6AE887B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number: 14F3
Signing time: Wed 16 Apr 2025 16:00:47 +0000
Manifest this update: Wed 16 Apr 2025 16:00:47 +0000
Manifest next update: Thu 17 Apr 2025 16:00:47 +0000
Files and hashes: 1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: mgx23SUWv4ybJSPBKmWt2Cb9+qSjqsWf33aA4bH7rsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:54:d9:0a:08:8b:76:65:12:c7:c1:2d:6a:e8:87:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Validity
Not Before: Apr 16 16:00:47 2025 GMT
Not After : Apr 17 16:00:47 2025 GMT
Subject: CN=321f014a32146f887fb97175168fc5f71413f924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:19:dc:44:d0:96:1e:74:f4:a8:c3:fa:36:
58:5a:3e:9c:b7:03:a4:a7:e9:9a:6c:0a:98:10:73:
39:62:cc:a8:43:63:4b:1f:c1:73:65:bf:6f:ce:4d:
31:56:a6:9a:03:a5:e5:12:0d:63:24:d6:13:a7:7f:
bb:8b:06:21:4d:d8:3f:b2:b7:81:c3:52:b1:e1:96:
82:24:19:e9:2d:75:3a:30:c4:f8:30:18:3e:7b:0c:
05:e1:12:34:7e:e3:9b:eb:93:bf:81:e3:a0:95:20:
3e:70:60:07:a8:47:0e:73:21:21:1f:1e:87:dc:c1:
47:be:15:4d:49:c4:8b:47:f3:2f:2b:c8:f5:68:ed:
7a:85:21:71:37:ce:54:80:97:ef:7c:d5:6b:cc:a3:
1b:59:7d:9e:93:1b:5d:ae:2b:be:28:da:d0:80:03:
34:c4:1a:a0:e5:2e:25:99:ba:55:d1:44:4e:f1:c7:
a1:aa:40:26:4b:04:6c:c9:84:ef:75:38:b2:3e:58:
77:10:e6:69:de:3b:80:85:ca:24:c7:3f:a8:74:6d:
8d:75:16:fb:d5:9d:b2:cb:0f:c7:34:89:85:35:5a:
16:9a:da:4a:68:23:e7:d7:c8:ec:6a:33:38:65:dc:
bc:6e:40:05:f2:e7:f3:b0:85:42:3b:b6:24:46:13:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1F:01:4A:32:14:6F:88:7F:B9:71:75:16:8F:C5:F7:14:13:F9:24
X509v3 Authority Key Identifier:
keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2e:88:81:d5:04:26:84:a9:8a:a5:9a:c4:d2:90:da:93:80:
97:1f:fb:49:6b:8a:55:f2:88:0a:ab:cc:89:04:61:4c:8b:04:
63:3c:b1:41:db:54:26:4b:46:a8:be:18:e2:04:6a:11:76:59:
15:b9:72:90:9c:08:7e:dc:59:0f:ec:36:8d:b9:c0:18:db:b9:
b8:2f:98:43:1f:50:7a:98:a0:6f:84:37:9e:52:89:59:5c:8b:
f7:dc:3e:09:61:58:fc:2b:2c:8b:f3:bf:ca:d1:32:11:bd:4e:
0f:c1:c5:e9:54:82:1a:44:71:7e:bd:4a:43:39:4e:71:a2:35:
ab:b5:6e:07:ff:c8:de:53:56:9a:95:5f:91:7f:d7:e0:3c:ee:
c7:01:93:b5:a2:d3:de:b3:24:a0:f8:7b:6b:e0:09:59:b2:18:
3b:94:9f:9f:d5:b2:73:b7:ee:e2:d8:fb:e5:f5:7c:80:15:9e:
54:f5:cb:18:05:4d:52:dd:c8:1c:a9:cf:91:b2:f1:b4:de:e3:
1b:5b:fc:49:5f:82:89:62:15:6b:62:61:fb:85:35:22:d0:ab:
88:39:54:cc:ba:2b:18:66:09:73:e1:3e:2e:94:ce:42:f9:f3:
c9:ca:3b:d0:82:ab:97:40:3d:29:83:ec:2c:db:3e:4e:e4:f1:
74:08:23:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:54 2025 by rpki-client