Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: YtDpZj0Elq5ccCikQtuq0N0ULL8vnZyh0i7kDMpPQ1k=
Subject key identifier: 09:77:C9:59:8E:73:08:BA:67:21:EB:5C:03:80:13:D9:F3:C3:0A:5B
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 01964A0F744DD02EC9091989FB0C97BCF454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 18:00:48 +0000
Manifest this update: Fri 18 Apr 2025 18:00:48 +0000
Manifest next update: Sat 19 Apr 2025 18:00:48 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: 2eZ3DXKuhBg+uDh8pGlL3UUtgrEopDlp6PGmbKZlo5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:74:4d:d0:2e:c9:09:19:89:fb:0c:97:bc:f4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: Apr 18 18:00:48 2025 GMT
Not After : Apr 19 18:00:48 2025 GMT
Subject: CN=0977c9598e7308ba6721eb5c038013d9f3c30a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:73:46:92:e6:6e:4b:58:c2:5a:ac:13:30:
28:26:75:a6:11:01:2c:91:74:a1:5f:74:95:9d:21:
d1:74:68:ca:fa:74:24:7f:a3:90:26:d7:d4:70:84:
2d:d2:d9:64:e2:84:0e:ba:90:bc:9d:b3:6c:b7:b5:
e5:1e:50:bf:11:d2:27:e2:86:35:4e:0c:5e:eb:d5:
f1:4d:3f:08:96:16:63:40:f4:f6:a8:15:8b:cc:72:
18:47:75:3d:7b:0f:38:b2:60:d0:06:c0:a1:65:64:
dd:87:fd:69:7a:ab:72:48:48:fa:46:f2:1b:c5:32:
eb:42:7e:68:19:d0:90:8c:82:94:06:8e:11:3c:de:
31:2b:f4:17:19:fa:06:0e:b2:43:37:76:98:4b:83:
f4:1d:81:f2:1b:61:cf:42:68:d6:bd:31:e2:91:d6:
76:54:45:a9:be:21:f0:9d:24:8a:28:2d:b2:af:db:
bf:e4:c0:63:9b:e5:bf:b6:98:7f:42:ad:45:1e:2a:
18:12:c3:69:f7:b5:1b:e0:ca:ec:1f:ce:31:e9:c5:
08:79:74:da:57:1d:0a:22:1d:9a:6d:3f:01:58:e0:
ff:5b:0d:e2:45:db:be:b3:d2:ed:6c:9d:9c:62:88:
d9:84:3a:4c:c5:01:d5:e6:fc:4f:10:10:1d:07:a9:
7a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:C9:59:8E:73:08:BA:67:21:EB:5C:03:80:13:D9:F3:C3:0A:5B
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:08:96:af:ed:fa:fd:67:a8:20:01:b3:a2:e9:58:ee:e4:33:
49:0c:a7:78:c9:33:89:b1:da:aa:dd:05:c5:4c:c9:a3:93:7b:
d2:f7:af:73:33:b1:81:ad:5e:4a:73:23:ea:1d:cf:59:1d:2d:
13:ac:75:69:12:ea:71:08:2b:c4:f6:55:4c:f6:90:34:a3:0b:
8b:98:55:88:3e:b9:77:95:50:8f:2c:d8:ec:44:1d:00:f8:4c:
a3:88:b5:18:67:2d:d9:96:93:f8:3b:ae:25:cd:bb:e6:31:fe:
5c:cc:43:44:65:0b:6a:1c:99:11:ff:66:03:4a:78:f6:89:6d:
21:a5:88:5a:2b:fd:50:65:1f:4c:36:07:66:57:57:7d:6a:fb:
b1:87:ee:6b:f9:ce:3c:84:b7:28:95:52:15:00:b6:cd:4d:d1:
a0:06:3c:d3:ba:91:2e:c9:7d:e0:43:bd:0f:d2:1c:11:eb:c9:
89:a9:cd:2b:ce:8f:2e:76:f2:1a:81:de:9e:da:4d:67:ff:35:
a5:bb:76:b1:6b:ef:84:74:80:24:7f:01:ce:f3:d9:3f:29:6e:
30:9a:4a:a0:65:e5:5b:39:c3:86:4d:2b:ae:7d:ab:c2:6b:58:
b6:e7:e1:01:d8:77:72:c6:3c:07:a8:93:fd:1d:d9:9a:37:1e:
c1:82:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:22:20 2025 by rpki-client