Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: IEmF0162e1Pr2qjlxXc0RWhvWU6O9zMAFqaZPxm8djs=
Subject key identifier: 57:C2:73:33:90:6C:9F:DE:7C:B1:F0:91:13:72:26:DA:CA:37:92:8F
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 019604F7869AAB198EB4D2D070FFA1687CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 12F6
Signing time: Sat 05 Apr 2025 08:00:52 +0000
Manifest this update: Sat 05 Apr 2025 08:00:52 +0000
Manifest next update: Sun 06 Apr 2025 08:00:52 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: 3mYlkumVEAyIkdZefzP8Ve1sTlJ4XKB2/0hpBz6KSt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:f7:86:9a:ab:19:8e:b4:d2:d0:70:ff:a1:68:7c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: Apr 5 08:00:52 2025 GMT
Not After : Apr 6 08:00:52 2025 GMT
Subject: CN=57c27333906c9fde7cb1f091137226daca37928f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:79:56:cc:77:8d:91:e0:6e:f9:e8:87:ee:c7:
34:2e:55:dd:47:be:62:2b:4d:13:ea:4f:a3:97:d3:
65:b9:e9:60:16:5e:43:a1:44:54:43:7d:34:84:72:
5f:57:ed:47:99:f9:11:b8:65:82:51:c9:f9:f0:44:
bb:3a:34:cb:2e:6d:e8:82:08:e2:ea:8f:ae:61:86:
f7:f0:96:f5:9d:8f:82:5f:68:65:70:3a:6d:76:73:
d7:04:6e:0c:37:71:00:db:67:c7:14:cc:f2:83:11:
3c:aa:9a:f0:43:98:c5:e6:fa:4c:74:16:b9:cf:3b:
2d:79:2c:ff:e8:56:8c:a3:a2:01:46:c0:6e:2e:56:
86:d7:b4:fb:74:bc:aa:41:f8:de:e4:3c:68:2e:3c:
48:fb:43:cf:f3:de:91:7d:04:64:85:82:81:fd:d4:
f8:e7:e4:b0:e5:1e:d3:c1:15:c7:07:94:cd:2f:1c:
7e:5d:d1:cc:bd:97:3f:45:23:16:78:f9:1e:e2:36:
f2:01:ee:48:a5:59:26:65:f0:be:3f:bb:c6:f3:a3:
5c:c3:5f:ca:f4:0c:e4:78:f5:79:b6:a8:88:46:12:
0c:1f:8f:0d:c9:ca:95:69:3a:4c:98:71:94:f5:ba:
72:c2:a8:e5:59:45:44:67:2f:63:a5:b0:a0:91:9a:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:73:33:90:6C:9F:DE:7C:B1:F0:91:13:72:26:DA:CA:37:92:8F
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e3:95:4b:cb:e5:c9:5c:ed:f8:08:76:46:ff:23:80:87:81:
52:8e:83:cb:36:96:74:1c:9a:e7:38:f2:76:0a:c6:4b:d1:47:
65:ce:34:d8:2c:37:14:bb:11:0c:04:43:94:72:38:37:78:eb:
84:2f:55:d3:35:b5:00:b3:9f:04:64:56:3e:37:53:c3:3c:ef:
65:ed:f8:c3:a6:cd:f1:6a:6a:9a:37:bc:3b:35:92:97:12:be:
00:f8:9b:51:63:48:e1:a2:7f:2a:3b:5e:3b:9d:c4:fe:5c:91:
56:9a:e7:8b:3b:9d:54:5e:cf:53:a2:ed:12:22:07:e5:4d:6d:
34:c6:6c:ea:ef:50:ca:5c:ce:c7:c2:3f:25:bf:cd:6f:bf:01:
2c:b4:9d:cd:62:30:1a:a9:9c:bc:44:7f:cd:66:37:dc:72:9b:
e0:bd:13:1d:e7:2d:c1:50:83:fa:0e:00:f1:cb:77:46:33:62:
29:d2:fb:32:0a:4f:be:bf:8d:32:d0:20:a3:48:c4:56:32:ca:
69:cf:0f:ea:8c:0c:fe:53:2b:a7:fb:4b:e9:75:5d:37:4b:c8:
d4:db:ee:85:77:49:87:64:37:21:00:fc:0c:07:35:f9:79:55:
6b:0a:9e:9d:55:3e:65:50:cf:63:1a:c8:7f:99:91:d2:08:9d:
ca:37:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:30:28 2025 by rpki-client