Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
File: z_N0ZX9XB488oscRCdNZJ8IkhoE.mft (raw, json)
Hash identifier: gJV8jw9Ul0ZSMjEYMBk3Zj89v4NxoF+vzuMk97Kj35c=
Subject key identifier: 0C:42:AD:11:78:A3:95:78:5C:E9:41:BA:A5:60:4F:8D:46:81:16:3B
Authority key identifier: CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
Certificate issuer: /CN=cff374657f57078f3ca2c71109d35927c2248681
Certificate serial: 0196A98B981DAE4EE0FF712F010E290265C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
Manifest number: 0E6B
Signing time: Wed 07 May 2025 07:00:19 +0000
Manifest this update: Wed 07 May 2025 07:00:19 +0000
Manifest next update: Thu 08 May 2025 07:00:19 +0000
Files and hashes: 1: 36HTuZWVYznRWr-Y9OyOjFMfg8o.roa (hash: O957t7QaHPCxhX8NuJXHyZq8mGIQrTkuzTmAY9BjQ/g=)
2: IaXnlnHxVgoEX1UTLs1DE8GtJn0.roa (hash: vQAYnVro3YqKas8+EITAndDR2jmhTfit27limCUGo58=)
3: z_N0ZX9XB488oscRCdNZJ8IkhoE.crl (hash: rg2ym/tkRHy4wkpTsS0ZcdGOeMMAMJJsgBHndRRALYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:98:1d:ae:4e:e0:ff:71:2f:01:0e:29:02:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff374657f57078f3ca2c71109d35927c2248681
Validity
Not Before: May 7 07:00:19 2025 GMT
Not After : May 8 07:00:19 2025 GMT
Subject: CN=0c42ad1178a395785ce941baa5604f8d4681163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:f5:fa:40:1c:a4:27:4e:d2:89:79:a0:5f:
7a:5e:fc:51:61:09:69:4a:80:95:f6:52:05:90:d7:
a2:a2:ca:b3:f5:70:86:e9:29:91:f6:a6:ad:14:e0:
56:99:dc:cf:bb:88:1e:65:0b:52:c2:38:14:29:bd:
17:de:44:ae:22:84:e1:92:aa:09:fe:6d:c2:b9:10:
87:10:44:30:21:98:af:68:50:47:f2:73:8e:fd:57:
55:a1:c8:00:81:96:5a:e3:46:a4:59:bd:90:38:b7:
7f:c8:df:c1:b9:ac:60:6a:26:00:4a:5b:7c:03:12:
66:6c:5a:67:7d:02:33:35:d7:80:f3:b3:e7:4a:4c:
33:16:dd:c4:96:b7:e8:cc:4b:23:c1:4f:b9:1d:f7:
e3:88:5a:88:76:81:60:60:19:90:22:71:d3:67:1f:
8d:b5:d9:5a:c2:ff:f7:4b:b3:91:57:bc:2a:91:6c:
c8:32:8e:da:4d:ee:32:22:33:f6:8f:94:7a:21:ef:
9b:44:fb:6e:eb:b5:23:94:a5:41:65:b6:31:44:93:
02:a8:0d:43:e2:e8:28:60:b4:bd:7d:33:58:8b:5a:
51:80:cd:60:4c:70:82:fd:08:5b:88:5a:33:97:59:
b1:5c:12:0b:12:5d:31:20:ab:29:49:2e:59:5c:b5:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:42:AD:11:78:A3:95:78:5C:E9:41:BA:A5:60:4F:8D:46:81:16:3B
X509v3 Authority Key Identifier:
keyid:CF:F3:74:65:7F:57:07:8F:3C:A2:C7:11:09:D3:59:27:C2:24:86:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_N0ZX9XB488oscRCdNZJ8IkhoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cd2146-7fbe-4e5d-93ba-3ea2ebfe8707/1/z_N0ZX9XB488oscRCdNZJ8IkhoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f5:a6:20:38:b4:ea:c6:9f:38:53:df:8a:de:39:89:19:14:
be:01:13:04:6e:e8:7a:14:d3:ad:d2:04:4f:de:07:9c:61:35:
fd:52:b9:9d:58:c9:24:da:15:9f:6f:31:fc:d9:22:54:e5:d8:
fe:d0:a3:06:b2:bc:a3:b1:aa:bd:d1:3f:e6:bc:9e:a7:43:b1:
13:9c:59:ba:a0:0c:c8:1a:44:ac:61:f3:f9:d3:69:35:ac:6a:
b8:89:c3:9f:e3:86:ce:8c:3a:42:f9:18:5f:ed:1d:37:ae:34:
ca:39:9a:2b:f6:44:5b:5a:7d:0e:05:fe:14:5f:09:fe:81:98:
e5:d8:13:c0:c2:ea:17:7a:ae:d2:29:32:a3:44:db:f9:6d:29:
3a:1b:64:ef:94:39:bb:c2:50:43:76:25:d7:2f:a4:ae:6c:e8:
b6:d1:7e:33:3b:e8:7f:31:92:c8:2c:23:2e:0c:9c:6e:43:a4:
78:56:2f:af:56:d3:79:94:ae:81:1e:f5:0b:43:81:88:07:73:
70:a1:07:3f:c7:45:c7:b7:5c:cc:83:77:37:93:ce:04:93:df:
51:c8:a0:2a:39:74:51:93:37:9b:da:59:94:01:30:8b:41:83:
aa:cf:1a:84:83:a4:05:97:a7:d1:24:49:9d:8f:76:19:0d:3c:
ee:3d:a3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 09:01:32 2025 by rpki-client