Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
File: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json)
Hash identifier: cWyaYXsrheJfGNFnBVRHANZMk+n4l3B3RnGXDK+EZU8=
Subject key identifier: 70:17:22:A7:79:54:E1:AC:69:B3:8A:B5:15:F5:23:57:93:2E:5C:CD
Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
Certificate issuer: /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Certificate serial: 0196CB73268829FA2CB8E19C2C20E54A865E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
Manifest number: 120A
Signing time: Tue 13 May 2025 21:00:43 +0000
Manifest this update: Tue 13 May 2025 21:00:43 +0000
Manifest next update: Wed 14 May 2025 21:00:43 +0000
Files and hashes: 1: Qv3hVGEIw5Ck_5QiJYApdipPmqI.roa (hash: C4rOq98XQlQBOJoaFTi64wzA4+qXQilqH0FLuH6cokY=)
2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: QzzpPhfLCuKbOaEv+yikIaKgLlpjGnbbzavzS7DU3+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:26:88:29:fa:2c:b8:e1:9c:2c:20:e5:4a:86:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8
Validity
Not Before: May 13 21:00:43 2025 GMT
Not After : May 14 21:00:43 2025 GMT
Subject: CN=701722a77954e1ac69b38ab515f52357932e5ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:8f:11:cf:4c:78:11:cf:a1:5f:36:f1:7e:
68:5b:b9:c4:27:f8:7a:1b:66:e0:5b:a8:9e:ba:97:
d1:bc:2f:3d:96:d2:80:be:ae:ce:f8:fc:9d:d0:6f:
ee:9c:8a:b8:c4:50:87:ae:40:4b:f5:3d:b8:7e:d7:
0a:48:fc:71:ec:7f:79:53:73:fd:94:a0:81:22:5a:
4f:35:07:67:77:f5:13:5b:e1:78:1a:54:af:a6:6f:
23:92:d9:59:a4:66:f9:84:01:75:3f:bc:df:6a:a4:
a3:db:22:77:5d:c2:f4:62:d0:d8:22:bd:6f:ae:4c:
2c:fd:12:ae:79:90:18:dd:4b:61:de:ee:9d:43:bf:
6d:39:58:e3:a1:58:4c:c1:54:87:67:77:56:99:c8:
1a:0e:5a:4e:39:06:de:59:d7:6e:fb:b0:85:a2:d1:
19:f3:a4:06:f3:84:a1:12:b3:2a:18:2e:36:1a:4f:
3e:0c:4c:15:02:69:07:6d:46:f4:74:b2:90:39:c0:
74:ba:79:9b:e3:1e:b0:70:b4:24:73:62:db:f0:26:
50:0d:5d:b1:d5:6d:06:e8:69:f6:08:0d:73:7f:dd:
83:51:0b:e4:38:cb:39:b3:ea:1a:87:b8:64:b0:da:
bc:4f:b5:43:26:61:45:ef:cc:7f:8c:ea:76:ff:ac:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:22:A7:79:54:E1:AC:69:B3:8A:B5:15:F5:23:57:93:2E:5C:CD
X509v3 Authority Key Identifier:
keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2a:49:51:16:68:da:9c:f6:7f:f6:2d:4e:35:bb:c9:e9:35:
47:ff:8f:ce:13:6b:87:8c:93:1e:f4:32:d4:9c:b8:ce:41:00:
1e:97:3e:d0:c6:3e:ef:60:42:00:d1:85:4b:81:ab:f0:c3:5b:
43:d2:b3:38:d7:fb:86:cc:40:e9:0f:45:09:b4:dd:d5:6e:82:
74:e8:f7:1f:d3:ba:f6:f2:c5:80:b3:a0:bf:1a:26:ec:39:98:
01:27:59:04:54:26:c2:ba:c9:cc:33:10:b1:ef:af:8d:59:e9:
16:79:0a:64:f1:f5:e9:49:ec:d9:fd:3d:f3:bf:e0:1b:5e:bf:
0f:57:93:0a:62:c8:14:b2:5b:76:fb:af:32:d4:2d:a2:32:08:
76:c7:81:71:2d:2f:c8:e6:25:ac:25:28:d9:12:a9:e2:27:8e:
bc:da:2e:63:43:b8:20:f4:e0:a5:e7:40:b6:41:7f:c0:5c:b0:
a9:d5:c4:16:b3:87:a4:83:32:7e:c4:c8:b1:26:54:10:9a:73:
70:1d:96:0e:9e:cd:5a:14:a5:cb:78:62:3c:dc:39:fa:f8:d7:
2e:4d:d6:1b:ea:06:2a:c9:a8:c9:2c:23:b9:19:04:24:1e:20:
45:70:eb:5c:72:70:6d:d8:a4:81:60:4e:71:3f:2a:24:4f:70:
bc:a9:b9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:30:28 2025 by rpki-client