Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json)
Hash identifier: HYUjiFT6x8cORlR5usV62TE8OZYzN1atGZpjX7ARYiI=
Subject key identifier: EA:FB:95:66:9C:81:75:41:BE:E6:DD:60:39:24:14:79:C4:99:C9:E8
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 0196B0A08096A6DC59DB06B0FD218C1CC29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
Manifest number: 14BE
Signing time: Thu 08 May 2025 16:00:30 +0000
Manifest this update: Thu 08 May 2025 16:00:30 +0000
Manifest next update: Fri 09 May 2025 16:00:30 +0000
Files and hashes: 1: fqj1j_FDhTxK5wCrypWCi5_Wlwc.roa (hash: /ZrSpI+gwPBK/gmIVmYYxFTakYRnjJvL4Gztj8QVd0c=)
2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: vyjoK6ZRAxZkUHEIXltFnigdaz+ybT98VjzCpV7OvgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:80:96:a6:dc:59:db:06:b0:fd:21:8c:1c:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: May 8 16:00:30 2025 GMT
Not After : May 9 16:00:30 2025 GMT
Subject: CN=eafb95669c817541bee6dd6039241479c499c9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:e1:a6:26:8c:68:75:0b:7c:ca:ab:42:4a:
e1:0d:3b:b1:49:51:63:23:47:ce:8d:6f:9a:23:de:
ee:fb:6a:c1:3c:7d:19:d7:d9:9a:59:98:7f:44:d3:
cd:f3:03:35:b0:dc:db:ee:fe:bc:23:d2:47:fc:4d:
f6:0a:e7:cc:63:ec:19:ac:ce:bf:88:b4:d6:b9:45:
08:80:b4:a5:1f:5c:05:33:be:fc:c3:5a:ae:ac:46:
46:02:d7:dd:81:2c:f9:d3:5a:23:b3:fc:1c:eb:ad:
8a:e3:28:e0:00:42:63:2f:fe:74:20:c0:0a:43:70:
f3:1e:db:37:f6:59:77:08:00:4f:12:47:67:7a:eb:
9e:d1:bb:60:fb:fa:27:00:d6:10:ee:4e:f9:03:2c:
00:05:06:ca:68:69:68:06:83:74:5f:97:ea:57:3e:
4b:fc:a3:3f:12:c3:e8:1c:bd:25:ea:d3:29:7e:e5:
62:32:dc:e0:22:66:28:a9:e7:03:9e:89:d7:85:99:
5e:0a:50:64:0b:12:82:d9:ce:09:2a:c6:6b:a9:53:
01:48:c5:d7:f1:9b:c7:ce:4a:5e:7f:23:72:a9:69:
b0:90:4c:e5:e9:1c:74:89:9d:8c:2f:8e:2c:ab:f1:
4e:7f:1c:ef:7e:97:ae:0c:86:c3:ef:cb:b7:33:a2:
76:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FB:95:66:9C:81:75:41:BE:E6:DD:60:39:24:14:79:C4:99:C9:E8
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6d:08:ff:78:87:fd:1e:60:07:83:bf:8d:20:1d:b9:61:19:
1f:9e:db:a3:81:b2:4e:6c:1d:96:fe:8b:73:89:6b:f7:11:c7:
02:27:d8:2b:cd:05:96:90:77:f8:91:52:76:13:d9:f5:c2:81:
e9:0a:bf:ab:7d:cd:c8:bd:2d:b2:a9:c9:59:9f:bf:55:e0:e7:
5e:22:34:f9:20:ea:85:88:c8:d5:b3:fa:b8:47:2f:44:52:72:
fc:66:0a:a5:09:d0:ce:e8:55:e5:32:23:f0:07:c1:0d:48:28:
19:08:ed:38:f5:6a:b8:98:be:05:fc:b0:5e:08:ef:b6:01:1d:
c1:96:f5:00:05:7d:2d:ae:da:9e:87:f8:5a:9e:70:0c:8a:e7:
0b:05:27:91:25:4e:f7:dd:32:f4:ce:b4:a9:cc:19:e7:91:de:
8b:70:1e:c9:aa:71:a8:a8:7c:58:4e:73:c5:4d:2b:05:7c:de:
69:3c:2f:5f:7b:5e:38:ed:4f:d0:f1:52:f3:6d:bc:79:45:be:
00:45:b4:a5:54:1c:b7:b4:13:93:57:43:8c:ee:79:cd:da:3e:
01:9e:b4:06:e0:5d:0d:d4:6a:67:8f:c0:fe:56:b6:56:2c:61:
15:d4:14:71:85:f3:68:bb:cb:fe:1a:b7:e9:1f:3d:df:f1:fe:
98:23:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:11:27 2025 by rpki-client