Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
File: z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft (raw, json)
Hash identifier: rg4M1gBEgjF5YxnKJ6OxrnCGwnhEf/FEF7rUEIES5HU=
Subject key identifier: 97:DD:A1:63:E6:32:7F:E9:52:C6:EC:FF:08:7A:D9:E1:55:EF:69:41
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 0196090B65E8639DFB0D656E75208426CFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
Manifest number: 029E
Signing time: Sun 06 Apr 2025 03:01:03 +0000
Manifest this update: Sun 06 Apr 2025 03:01:03 +0000
Manifest next update: Mon 07 Apr 2025 03:01:03 +0000
Files and hashes: 1: C3s5o6S6iMFqA5kUnPyNkOVDKSM.roa (hash: H3u9mvJ7SuTZccRd+wWwmhJZK9bvIglyqc2Q2wLWS1o=)
2: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (hash: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=)
3: eZlHkjP7bcQ5mqdW_8q_Z3CHJtQ.roa (hash: 34+cbh9+LJiKxMOepvEoyovCBwIb8f2BDirppGV1VYI=)
4: z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl (hash: /v2v0X/5YZEh5/xCkFFrnMDibciXnqE1GhkTO1cgKNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:0b:65:e8:63:9d:fb:0d:65:6e:75:20:84:26:cf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Apr 6 03:01:03 2025 GMT
Not After : Apr 7 03:01:03 2025 GMT
Subject: CN=97dda163e6327fe952c6ecff087ad9e155ef6941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:1c:d8:fa:b9:f3:cc:b0:57:ea:9c:af:24:
b2:d5:60:b5:9d:90:1f:4d:23:80:2b:8e:ee:c7:44:
fc:35:90:a8:f5:0b:36:88:18:4a:1b:fb:8f:a9:58:
98:3a:c2:99:16:fc:e8:36:ee:bf:31:8f:7e:56:45:
0e:dd:bb:f4:16:19:79:a2:ae:e5:e0:db:64:4a:35:
29:89:74:d1:ec:6a:69:f4:58:15:ec:21:14:2e:e6:
41:4e:35:ff:a4:4f:1b:fb:2f:a5:0b:20:58:79:a4:
94:46:9c:00:48:6f:48:ee:8c:ed:ff:dc:eb:12:d4:
e0:51:5b:3d:77:8e:0c:a5:b9:a8:43:b6:41:9c:dc:
85:ba:2a:5b:5d:d0:0f:32:8c:d1:e1:9a:8c:51:1f:
aa:a3:40:01:fc:a4:9e:93:6e:cc:0f:fb:95:6f:ad:
e9:ef:61:18:b7:75:36:e8:d1:09:e6:ed:6b:fc:61:
d4:19:cf:27:73:b3:df:88:ac:8d:7b:57:fe:04:8c:
c0:7b:7f:a7:91:75:5b:79:38:61:9f:ec:a7:ba:22:
91:2e:cf:03:a5:9b:26:cc:d6:05:9d:d0:9c:62:ac:
96:14:03:ef:ca:69:36:92:61:0b:28:81:fe:39:58:
ca:e6:e6:13:cd:83:8c:2f:5e:18:bc:cb:5b:d5:0d:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DD:A1:63:E6:32:7F:E9:52:C6:EC:FF:08:7A:D9:E1:55:EF:69:41
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:53:cc:5a:50:2a:7f:cc:4a:cf:5a:6b:bf:d0:46:0b:be:cc:
61:16:69:63:a3:2f:d3:50:5a:b8:97:31:98:f4:53:6c:2f:52:
86:0b:dd:61:d9:36:b3:29:f1:96:bc:bb:5a:b3:18:6b:9d:48:
79:fa:35:90:91:f3:e3:ca:2f:a7:ad:1e:c8:c5:c9:ad:48:ab:
2f:d4:fd:fa:dc:3c:e1:e7:71:c8:2e:1f:6e:fc:72:40:d4:e1:
56:ec:25:0f:d0:8f:a7:95:a3:2e:f2:ba:0a:23:4f:ae:2a:ff:
c4:37:a4:93:e2:11:14:58:70:0a:9e:05:9f:3b:fc:59:dc:c1:
b0:9f:72:ad:6f:29:64:48:51:a1:b1:68:de:4c:2a:bd:56:0b:
20:62:02:9d:15:e8:b1:be:cf:29:34:95:e7:d2:42:1f:d4:17:
dd:17:8b:85:a3:7f:f0:6e:26:52:5d:cc:ad:e7:d5:a2:47:67:
03:1f:f8:b8:d9:c4:f6:f4:78:c5:52:a7:bf:3a:f7:c0:0e:f9:
76:6f:e9:b8:13:99:58:92:d2:c8:17:0e:cd:f6:af:fa:83:c6:
08:ae:45:18:81:cf:ac:c2:c0:8c:d2:c7:05:35:c1:24:1b:8d:
4e:70:a9:3e:73:5e:b2:8a:6a:8f:52:c4:cd:a5:b5:52:63:1b:
e5:4b:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:51 2025 by rpki-client