Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: wdvWRqMscxq6rWCryeb1POgKCTOXqnZttlUPZ4eOm1g=
Subject key identifier: 75:36:26:CB:D7:9A:F7:A3:54:E2:C5:42:B8:5D:77:CD:AA:38:8D:A7
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 019657CBB595ED6A82BCC766E220869F39AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: D1
Signing time: Mon 21 Apr 2025 10:01:30 +0000
Manifest this update: Mon 21 Apr 2025 10:01:30 +0000
Manifest next update: Tue 22 Apr 2025 10:01:30 +0000
Files and hashes: 1: Mdz7gFP_KbOqqYubu7U76xBnbk0.roa (hash: jA9ulv112lR/bkdkG+34ufilO6znCYlwpUBfU78DlcQ=)
2: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: HpomrbZ14eR4q+/PEtcfY3ZxVpvd6pgsJFVxj5wXGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:b5:95:ed:6a:82:bc:c7:66:e2:20:86:9f:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: Apr 21 10:01:30 2025 GMT
Not After : Apr 22 10:01:30 2025 GMT
Subject: CN=753626cbd79af7a354e2c542b85d77cdaa388da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:3b:b8:4f:3a:05:26:de:a7:ad:4a:6d:61:
c7:2a:36:e9:9d:7a:f9:fd:e5:05:f1:ea:1c:54:57:
72:0d:1b:73:15:94:90:f1:38:be:4e:fe:c9:d1:b5:
21:15:c6:42:8f:6d:f3:72:86:3c:63:ea:48:fe:a2:
1a:0b:24:fa:6a:80:4a:a3:a7:3e:b6:57:19:96:64:
aa:63:b6:b8:5e:69:95:04:7a:b3:89:b4:36:eb:f2:
ce:31:ea:a3:d5:36:c2:bb:49:8a:20:8e:0b:67:23:
bc:c6:2b:1d:7b:b3:d8:f0:81:39:70:3f:d7:c9:86:
ff:93:01:3a:09:bf:f4:15:e2:df:c8:69:d1:61:c7:
da:ac:0b:5e:9e:c9:5d:e4:b4:a0:ad:c4:ff:4d:e7:
f2:d7:f8:4f:b4:92:80:2e:bc:c6:a7:30:0d:e4:3e:
2f:ab:0c:97:74:be:62:67:78:60:f0:ad:b4:3e:57:
e8:b0:4f:aa:01:50:7b:16:03:21:ee:f7:02:6d:e9:
3e:1d:b1:6a:dd:d4:be:9d:61:ec:34:03:2c:ab:86:
e2:a0:5e:20:ce:29:f7:6c:c6:33:62:92:62:66:d6:
1a:8c:83:f4:27:b1:3b:cd:83:95:51:a6:b5:91:0d:
3a:23:7a:66:0c:4d:a4:2c:54:5d:b3:d1:e4:4f:37:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:36:26:CB:D7:9A:F7:A3:54:E2:C5:42:B8:5D:77:CD:AA:38:8D:A7
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:54:3a:8f:9f:d1:20:42:8c:d5:0d:6c:de:9d:35:33:ba:5c:
40:47:cc:d8:e5:2b:20:e3:0e:ba:e8:84:11:af:63:f1:8c:99:
04:fd:46:65:82:85:fc:f7:7e:e9:2a:5f:ff:05:e2:f0:3a:36:
a3:39:ce:2f:99:a4:d7:eb:59:48:1f:f0:59:5c:80:c1:72:55:
22:a6:cb:ff:7c:e7:fe:30:9d:0c:69:91:e6:e9:f6:4f:9b:74:
79:c8:71:af:70:52:f2:2a:fc:b9:89:e2:a4:aa:ba:e8:85:7f:
d5:b9:83:52:fc:bc:a0:ba:e0:49:f9:b0:f6:58:2c:d4:98:f5:
75:a3:7a:8e:3e:0e:04:f0:4a:68:52:07:49:8c:aa:9d:73:96:
5c:4c:24:1e:84:33:23:e2:51:52:ac:94:ec:96:cb:a2:8b:85:
47:dd:ce:e6:0f:70:32:ea:ce:df:17:ac:6d:0f:b9:ee:a6:48:
a9:7e:30:6a:ca:37:70:30:18:92:16:ba:11:66:26:0a:19:5a:
06:09:fd:1e:63:3e:3c:9d:70:31:ea:fb:71:52:5f:6f:6f:22:
fb:31:6d:1c:b5:5a:3b:ca:54:5d:d3:5b:eb:c5:49:fd:29:3f:
57:e6:fc:ed:e6:ee:74:75:37:8e:24:aa:5e:6e:c2:a9:90:00:
48:a7:6c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:20 2025 by rpki-client