Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: tv72X6gax7bmyx+p72G1pu7kbxn2fM7zg0JlzDY+ojU=
Subject key identifier: 6A:9C:8B:76:42:1F:12:15:69:C8:49:B2:89:15:F0:45:69:B7:6C:65
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 0196BB91C7DF712B0106C4316065C75C4D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 0199
Signing time: Sat 10 May 2025 19:00:15 +0000
Manifest this update: Sat 10 May 2025 19:00:15 +0000
Manifest next update: Sun 11 May 2025 19:00:15 +0000
Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: Lzt7kq0qjFBvTUCJugWIUz3hPb7TND3I+Ct/Rrv/GVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:c7:df:71:2b:01:06:c4:31:60:65:c7:5c:4d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: May 10 19:00:15 2025 GMT
Not After : May 11 19:00:15 2025 GMT
Subject: CN=6a9c8b76421f121569c849b28915f04569b76c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:5c:48:25:b5:31:a4:dd:c5:70:8f:fe:90:
1b:e8:eb:89:8d:ff:10:ef:7c:9d:f4:52:71:d7:69:
18:8c:99:56:d6:d6:da:d0:38:b1:ee:5b:e2:c5:3d:
eb:3b:d8:a7:fd:ce:22:27:4d:b3:f5:53:9c:e2:35:
c9:88:d6:f2:28:21:48:da:37:49:5f:5f:1c:f9:c9:
3a:7e:99:4c:18:95:c1:7a:89:b2:3e:ff:69:c5:63:
77:53:bc:20:9f:c6:85:cf:b0:76:a0:00:10:13:ef:
1e:f0:39:b5:57:5a:bc:f3:92:67:0e:8a:6b:fa:e9:
d3:08:aa:56:f0:4d:1f:f1:f5:ea:5a:06:84:dd:cd:
d4:ab:02:ba:32:87:3c:08:53:e9:54:ef:1d:f3:bc:
48:19:45:5f:9d:a3:ac:91:0c:72:b4:46:1c:7d:3d:
b8:48:68:c6:64:c4:5f:7d:e7:6f:ec:82:15:52:ef:
dd:e4:f2:b8:21:13:f8:68:fc:3a:39:8e:4a:08:1f:
e9:44:2d:2c:45:cc:73:bd:e0:e7:70:29:08:41:cb:
b1:9b:ae:d1:66:de:8c:5f:42:58:d6:ca:22:55:ed:
79:3c:22:16:8c:e3:32:0a:3c:44:eb:48:23:3c:cd:
14:ac:0d:99:1c:29:77:0e:29:54:ce:d6:26:bc:87:
14:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:8B:76:42:1F:12:15:69:C8:49:B2:89:15:F0:45:69:B7:6C:65
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:88:11:a6:13:87:8e:02:02:85:f1:7d:94:bb:90:67:d8:4a:
57:ef:fa:49:16:e6:ad:67:cb:b8:78:ec:d8:e7:d7:dc:78:3d:
9d:55:ed:62:9b:aa:53:c4:56:45:a0:ff:fc:d4:72:1b:1d:9c:
f6:fc:42:ec:ad:8f:b4:ac:d8:69:b2:3b:0d:85:32:55:a8:f4:
5b:e2:a7:b7:9e:43:e0:a6:a0:20:25:14:a8:c9:5f:9e:81:ac:
f7:c6:04:71:f7:c4:67:5c:4a:b7:e9:61:47:8f:f9:85:ad:4a:
d0:61:de:14:98:f6:da:77:0e:44:fd:a1:09:66:bd:35:36:f0:
62:8c:72:7a:c8:ea:47:fd:c3:d9:00:fd:1a:e9:10:29:a1:89:
10:a2:ee:74:d8:7a:8d:4e:82:61:ec:85:f7:d4:86:fc:ed:1e:
a2:8c:b0:28:3d:ed:11:4f:8a:77:fd:e3:c7:fc:d2:cd:73:c1:
d4:dc:c9:86:1e:23:9e:a1:5c:81:f9:46:65:43:16:87:ca:ef:
9d:0d:b5:f1:c5:37:9f:9c:fa:c6:d0:c3:7f:8c:03:2d:3a:6c:
4f:ab:83:08:b9:46:54:5c:83:41:14:71:f7:aa:71:11:23:88:
fa:bc:53:4a:14:8a:e1:09:9e:e1:d4:9f:12:52:93:dc:27:42:
16:11:73:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:42:47 2025 by rpki-client