Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: WwnpyF1sBCDTTEcoGbtq1ta743TXflPHLoY0AIaqZsk=
Subject key identifier: C8:98:6F:B3:F0:B5:FB:DC:7D:79:A9:B2:1A:F2:9C:95:F2:E5:76:7B
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 0196CF18DB534D326600664A9479F5150898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 10D1
Signing time: Wed 14 May 2025 14:00:34 +0000
Manifest this update: Wed 14 May 2025 14:00:34 +0000
Manifest next update: Thu 15 May 2025 14:00:34 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: opLpa/JY4zoQTzjkTCI2IyvrJTMfYH3ul7kfWOFSz84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cf:18:db:53:4d:32:66:00:66:4a:94:79:f5:15:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: May 14 14:00:34 2025 GMT
Not After : May 15 14:00:34 2025 GMT
Subject: CN=c8986fb3f0b5fbdc7d79a9b21af29c95f2e5767b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:5a:93:9f:53:3c:c8:a5:b7:10:c1:85:92:
d9:3d:12:b6:6c:d3:7e:10:11:48:c5:ed:8f:4b:5f:
3d:7a:47:ae:fe:9d:d0:03:7c:d4:0b:fe:0c:69:f5:
4e:65:81:40:84:08:47:03:b5:5e:c1:ef:35:c8:ce:
a6:b7:eb:e7:30:18:f8:5a:fd:9a:69:44:ac:f6:8c:
52:dc:d1:e4:41:69:a8:b9:de:b0:23:44:06:fe:53:
19:15:ae:ca:8c:6d:15:11:56:09:42:a2:33:37:6e:
7c:4d:06:80:9c:a9:b3:0f:3c:76:b9:69:5b:cc:b6:
d2:b8:99:89:52:35:d6:63:18:82:c8:1c:b0:7c:2b:
5d:4a:a8:f7:74:94:94:d3:d8:65:5f:f9:5f:ef:8e:
fb:50:3f:73:94:d3:61:82:80:93:1a:57:bd:0b:5f:
c1:41:f8:79:01:f8:79:32:dd:66:1e:11:53:b4:2c:
49:ca:16:33:e3:63:68:43:ce:e3:1a:85:de:cc:d1:
41:74:05:5e:81:c2:ac:0d:85:64:09:1b:22:f1:fa:
6a:fa:aa:d3:3d:f6:1b:30:ab:f2:96:ef:13:29:c8:
2a:c0:c8:f5:e2:e1:68:82:a4:50:d2:bf:4d:04:86:
2b:42:b2:67:d5:ba:4a:85:d3:00:2b:d5:da:88:5f:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:98:6F:B3:F0:B5:FB:DC:7D:79:A9:B2:1A:F2:9C:95:F2:E5:76:7B
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3f:33:ba:14:47:5e:cc:37:79:1b:ca:a9:6c:18:2a:17:af:
85:5f:b7:2a:79:b6:40:44:b4:70:85:28:5f:8a:7c:cb:02:99:
34:8f:07:a6:47:7c:77:1c:4c:d1:46:ac:96:ac:ef:f9:93:c0:
05:bb:1b:04:34:80:7e:45:81:ef:69:3c:ef:4c:6f:c3:8c:7f:
e0:7c:de:25:b1:37:ae:47:f4:c5:b4:67:fd:61:84:b5:13:67:
f1:4e:92:f0:24:f0:9c:1a:ba:3a:46:e2:53:65:1b:d8:7f:9c:
03:6a:d3:eb:6c:fc:a1:fd:14:cc:7b:61:94:a7:80:3b:95:a1:
42:00:c8:d6:29:19:22:d1:a9:e4:d2:a7:f7:e8:b6:07:b9:ab:
a5:b8:0c:ae:b0:9f:4d:2e:ae:91:37:b3:8b:42:c9:9e:60:ab:
a4:f4:03:47:9b:58:b6:41:10:f7:49:d3:54:77:1c:bc:80:20:
e1:bf:0c:1a:85:6b:a9:6b:24:b0:ce:26:6b:ca:c9:82:de:b4:
5e:e9:53:53:fb:bf:c9:77:35:43:83:32:17:7e:13:37:54:c3:
cc:b7:26:5b:64:87:5f:de:57:43:2e:77:93:e7:16:e9:2d:ac:
8c:8b:dd:59:80:85:bd:35:1b:71:09:f7:5f:a5:7d:d7:90:09:
b2:ab:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 23:42:00 2025 by rpki-client