Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: MOC4i4wXuwONaQcW8wYHjRhL5etcCx8OWjbJz3je0lk=
Subject key identifier: C9:3C:FA:7A:5A:33:73:EB:4A:C1:E1:AE:32:AE:E9:EC:8C:BB:C0:11
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 0196BA7FC78EA1F1F582F8EABE86EFFF35D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0856
Signing time: Sat 10 May 2025 14:00:58 +0000
Manifest this update: Sat 10 May 2025 14:00:58 +0000
Manifest next update: Sun 11 May 2025 14:00:58 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: vGvGbRmAFkBdwYCUMk9z/vk0Z6SFze46i5n5xYTcFGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:c7:8e:a1:f1:f5:82:f8:ea:be:86:ef:ff:35:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: May 10 14:00:58 2025 GMT
Not After : May 11 14:00:58 2025 GMT
Subject: CN=c93cfa7a5a3373eb4ac1e1ae32aee9ec8cbbc011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:2a:52:40:93:88:13:0d:ff:b8:05:42:0d:
6a:da:7a:57:54:2f:e9:24:03:9e:2b:78:24:52:94:
a3:d5:e3:28:ff:5f:ad:18:81:60:8d:09:1c:14:4f:
31:77:f7:b5:1c:3b:65:ce:a3:51:a6:76:b1:bf:8c:
03:d9:12:5d:0e:5e:dc:e9:87:34:52:90:8b:b5:cc:
9a:fd:b6:6d:99:dd:69:14:f0:d5:2a:1e:7b:fe:48:
17:34:18:e7:d4:69:95:6b:3c:d1:92:5e:7b:ec:71:
0e:11:ba:42:ce:0b:89:34:a9:36:d5:b4:09:52:31:
86:ae:c2:5d:e6:3e:39:55:46:f0:07:fa:d0:5e:92:
1f:ab:fb:d4:04:aa:94:a4:3b:d6:b4:e4:9a:50:de:
d7:dd:5a:ce:b3:43:cd:96:df:74:e9:c7:90:f2:73:
78:23:55:e6:6f:fd:fa:0c:74:1c:4a:58:53:ab:80:
57:37:8e:1a:59:1d:f1:c6:f6:e4:e4:c3:c5:ae:3f:
3f:93:8a:06:36:0c:8e:44:26:8d:49:87:24:43:d5:
ec:d9:2f:df:20:a9:22:55:ed:03:d6:73:bd:c7:b3:
49:43:f6:35:d0:85:ae:61:94:43:60:a9:7e:62:b5:
8b:3f:c2:65:2e:69:98:dc:b3:68:14:ae:4a:17:9b:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3C:FA:7A:5A:33:73:EB:4A:C1:E1:AE:32:AE:E9:EC:8C:BB:C0:11
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5b:c1:7f:c5:b2:71:df:03:19:e0:8c:91:b4:c4:33:a0:4f:
9d:64:78:95:a2:b4:47:75:08:15:0f:c1:29:d3:df:7b:8f:ca:
91:bc:8f:fc:a8:06:d2:72:bf:8a:7f:04:da:92:d6:72:20:67:
d2:f4:b0:8c:4e:10:33:24:e0:15:28:1b:8a:ec:15:1f:e8:00:
22:0f:ad:18:73:fa:01:13:0c:66:29:5b:f2:5c:4b:2c:3f:8a:
ec:be:3c:4a:34:e5:a0:64:4b:b6:d3:da:69:88:00:b3:55:43:
54:31:3d:92:6c:c6:b7:bf:e7:0f:ed:5c:ae:51:42:dc:e6:f9:
8a:0a:fb:de:7c:14:19:13:2c:bb:ea:a7:78:0d:6e:37:84:57:
5c:47:35:1b:7a:22:20:73:8c:38:ce:44:b6:ea:e6:ec:ea:b8:
70:02:2d:ab:52:6b:1c:f8:4f:0b:3b:a9:68:ef:31:1b:2e:ba:
9c:92:d9:78:5a:b8:87:7d:10:8e:bd:ba:9a:97:22:59:56:c1:
0d:c0:3b:73:a3:e3:66:a6:76:5e:c0:46:89:7f:49:b7:e6:37:
01:2c:56:d1:e8:c6:34:14:46:76:20:fc:55:cb:b2:01:6b:c4:
91:d3:d7:68:8b:54:5b:e5:80:bc:a7:96:b9:48:4f:1f:c2:00:
d4:2a:5f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:22:19 2025 by rpki-client