Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: U/BmJ0SCwJwus8hHrueYCSu0vlSwOnOW8yBYVGySwEc=
Subject key identifier: 9C:E8:B0:8A:4E:F0:C3:8F:1E:4B:45:EE:95:F5:62:CC:15:57:4A:FD
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 01969CAC3B124F03BDA43E69A9A8AAFCF080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0845
Signing time: Sun 04 May 2025 19:00:55 +0000
Manifest this update: Sun 04 May 2025 19:00:55 +0000
Manifest next update: Mon 05 May 2025 19:00:55 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: TmB+A4ngP70IHlVLK+gTq1ZtyxiIvl+BazZ/WBhIFzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:3b:12:4f:03:bd:a4:3e:69:a9:a8:aa:fc:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: May 4 19:00:55 2025 GMT
Not After : May 5 19:00:55 2025 GMT
Subject: CN=9ce8b08a4ef0c38f1e4b45ee95f562cc15574afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:5a:b9:3c:b9:0a:78:2a:5c:a8:6f:c0:90:
c0:fe:f8:07:21:a7:bf:d3:78:39:a8:3d:4c:08:ff:
97:93:fd:28:6d:65:eb:28:4b:e1:d0:ca:7c:d4:a7:
4c:3d:9f:e0:28:0c:9c:ae:f4:bf:e2:4a:2c:19:35:
46:d7:72:e4:2f:3f:98:89:3f:d3:83:99:0f:0e:91:
e0:6d:37:80:53:3e:0c:e1:a6:23:69:55:61:65:cf:
ed:f0:10:e2:db:29:ec:78:56:a7:f5:3e:86:e9:b0:
43:84:a8:ca:e7:6a:b9:71:44:72:8b:96:53:ba:55:
73:b8:61:96:32:b5:b4:b9:be:4c:8f:37:93:eb:2b:
81:a9:ba:5e:8b:ce:e2:7b:51:3a:6e:1c:4e:32:d8:
c7:87:a9:04:24:cd:a3:89:c5:04:bb:84:5e:3e:07:
ca:b4:87:26:e8:74:2f:c3:a2:c2:e7:1a:90:78:a2:
29:f6:b5:d9:21:d7:86:09:b8:fe:29:19:db:c8:25:
3f:28:05:81:61:0d:1b:21:df:b3:be:71:35:05:f1:
1a:20:57:97:c2:cf:da:f4:df:98:3b:88:5d:2d:f6:
fa:11:27:ad:38:c5:57:17:cd:cb:91:1b:c0:39:e6:
80:72:f0:b7:65:ec:d4:aa:1a:45:42:3c:34:04:86:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:B0:8A:4E:F0:C3:8F:1E:4B:45:EE:95:F5:62:CC:15:57:4A:FD
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0f:9b:c0:cb:e6:81:c5:57:8e:24:46:9d:37:a8:72:a6:04:
aa:a0:1c:6d:4e:da:b1:ed:be:8c:e3:8b:81:28:83:8b:d0:4f:
27:91:40:2a:15:4f:54:62:a2:7d:a2:b1:04:b5:ae:ae:51:a0:
5e:42:bb:ac:dd:db:90:cd:90:51:50:05:93:d1:92:8d:85:7f:
4e:e8:01:fe:93:f6:cc:7b:66:d9:ef:13:85:b1:b0:f7:8e:46:
1e:7f:56:d5:21:25:a2:65:45:a5:6a:ec:12:ff:5a:97:99:37:
f7:7b:9d:c6:0b:28:a0:21:ac:0c:1d:7f:83:e8:42:ac:67:f6:
69:16:7e:09:a2:62:a0:5c:1a:b0:f7:10:fd:b2:89:50:15:a4:
16:d1:f0:dd:8b:eb:8a:6d:c8:49:e5:cf:95:ef:5b:e6:6b:ef:
4e:1c:78:da:a4:82:b3:2d:9e:60:0f:df:c5:b9:24:ac:8d:05:
95:9d:21:4a:75:c5:da:2b:99:81:4c:3a:05:3f:93:7d:df:e5:
15:f8:f6:3d:b8:5f:7d:bf:09:10:83:4b:f6:e3:ae:1d:a2:e3:
30:89:86:da:54:a3:d3:fb:4e:8b:65:5b:ec:ba:6d:23:94:c3:
90:8d:2f:26:1d:d3:06:bb:ef:8c:7f:c9:a8:89:5c:e7:1d:14:
5c:fb:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:08:44 2025 by rpki-client