Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: IREgRWW41Gdjra0/p0C7Cz8Laezku+GaRsFktjQcbCk=
Subject key identifier: D9:77:9E:47:DB:3B:31:FB:09:B7:AB:74:DE:CE:D5:ED:D2:30:CD:4F
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 0196BD80385605798ECC52B86B36FF2D3F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 01A2
Signing time: Sun 11 May 2025 04:00:18 +0000
Manifest this update: Sun 11 May 2025 04:00:18 +0000
Manifest next update: Mon 12 May 2025 04:00:18 +0000
Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=)
2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: AfyOunogoUmOhmoCqSAgawL/VgfALH1zIxVfjV+QeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:38:56:05:79:8e:cc:52:b8:6b:36:ff:2d:3f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: May 11 04:00:18 2025 GMT
Not After : May 12 04:00:18 2025 GMT
Subject: CN=d9779e47db3b31fb09b7ab74deced5edd230cd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:27:f9:d0:a5:5c:d9:8e:8c:e1:3f:21:46:
54:e8:cd:fe:c1:ec:af:d1:d1:42:93:64:d2:bd:60:
e1:3f:98:0a:2d:46:d3:f4:5c:08:f5:04:84:a7:93:
d2:53:51:54:8c:8a:5d:84:b3:69:b9:66:47:dc:a8:
8a:af:69:bc:00:8f:13:39:fc:42:13:1a:b9:d6:4f:
2c:3c:cd:e4:67:d9:66:17:7a:4f:86:37:fb:34:33:
54:44:48:29:f0:64:df:24:d1:a2:2c:eb:8e:bd:33:
1b:57:9b:b2:fa:1b:3d:82:20:fc:09:49:f0:c7:23:
5e:ec:a4:33:da:40:66:9f:5d:cd:0b:eb:97:db:8e:
0d:11:49:6b:ae:25:e4:f8:bc:1a:99:bf:49:20:39:
df:29:fc:b6:94:6a:77:9e:d8:0f:58:da:1f:5e:ad:
79:44:70:28:b2:ad:65:59:d3:44:05:6f:1b:7a:07:
74:fb:b8:a5:59:db:e1:cc:11:2e:bd:89:76:5e:87:
28:25:8b:b6:19:15:fa:cb:32:f2:1d:3d:22:f0:01:
0f:3c:9d:0d:5f:a7:11:c8:7f:65:13:42:3d:4e:d2:
a4:36:f2:66:0a:08:a7:f7:e2:cc:b1:71:ce:14:eb:
78:ad:fd:c6:6e:5e:e1:5d:83:0d:05:aa:59:98:d1:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:9E:47:DB:3B:31:FB:09:B7:AB:74:DE:CE:D5:ED:D2:30:CD:4F
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bd:ce:a8:c4:09:8b:9a:5f:b5:b2:5b:72:1a:7e:97:18:71:
6f:d6:cf:63:09:8e:34:91:b9:7d:5a:c5:c9:a9:9c:2c:01:03:
33:ab:71:36:c3:ca:ba:d8:2b:30:42:cc:3f:4a:04:12:0c:e5:
39:00:da:d6:4d:8b:91:9b:c9:ed:06:28:22:d3:ec:de:19:83:
ad:91:19:1d:da:51:fc:e5:77:32:b9:2f:66:1f:d6:a7:0f:fd:
d4:0f:c5:e5:8e:2a:47:75:e3:3f:ce:a1:3b:c9:54:81:dd:60:
34:7c:30:ed:f2:29:01:aa:ee:3b:6e:57:10:13:2b:22:61:c2:
c1:9e:d3:94:62:6d:4d:1c:71:ed:e0:1c:22:83:61:7a:55:3f:
2d:47:8d:73:b4:87:62:e9:ab:f6:56:b5:08:83:13:0b:e3:0e:
ca:29:7f:03:1c:7f:6e:06:f2:27:36:52:75:b8:38:49:ef:7b:
1e:b8:4b:ee:27:41:0e:91:50:f2:a1:50:17:84:04:e8:6e:d8:
e6:26:42:96:c8:92:96:f8:b7:d6:67:7b:b5:db:27:31:db:8f:
3b:73:be:d4:98:3c:bc:10:79:7a:41:b2:2a:d5:0e:e7:ce:73:
1f:cf:dc:eb:46:ff:de:cb:6b:7c:0d:b8:af:cc:25:d6:8b:34:
12:27:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:14:20 2025 by rpki-client