Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: ezcgcjpZzDx5y97HtfNStEPbV9jDMYn6/9yTuz7dYG4=
Subject key identifier: 4F:CB:2E:5A:48:9C:5A:9C:E5:A8:2D:69:A3:5C:ED:E4:23:E5:94:C1
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 0196C3B920EA004BA4F5900433677B4DAEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0C2B
Signing time: Mon 12 May 2025 09:00:11 +0000
Manifest this update: Mon 12 May 2025 09:00:11 +0000
Manifest next update: Tue 13 May 2025 09:00:11 +0000
Files and hashes: 1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: JFLdTot0F6RoeSFCiL//poDUlfQHygYtrZGBC4BMIyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:20:ea:00:4b:a4:f5:90:04:33:67:7b:4d:ae:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: May 12 09:00:11 2025 GMT
Not After : May 13 09:00:11 2025 GMT
Subject: CN=4fcb2e5a489c5a9ce5a82d69a35cede423e594c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:df:bd:6b:dd:75:29:fe:7d:af:d2:8f:23:
55:2a:41:07:3e:db:6c:f0:49:54:96:2a:15:14:a8:
8c:30:63:3d:f1:7f:f8:f2:ee:07:0d:d9:a7:5d:0b:
ba:6f:6e:bb:bf:46:14:9d:2d:af:3d:11:76:2e:45:
8c:8a:42:c5:18:49:cd:14:07:7d:2b:d4:6a:82:fc:
2c:9d:62:26:b6:f2:3d:51:ad:4c:eb:13:c8:3a:af:
2f:07:7e:9b:ba:4a:91:e4:b8:a0:63:c0:73:c1:be:
9a:f3:ea:6f:72:cc:4b:04:47:6b:2a:e1:84:9f:2c:
6b:a9:fe:ce:7f:0b:0b:66:75:d9:04:17:db:e0:43:
fd:63:55:e5:be:3e:c8:a5:08:09:d2:2f:76:49:3e:
20:c1:48:69:fa:65:c6:92:f8:bd:81:b0:5f:15:00:
59:61:f7:05:9f:e0:81:ee:51:4c:df:47:9a:39:91:
33:1a:5d:14:54:ca:a4:34:02:f8:ec:c9:83:0d:d7:
4d:46:fa:b9:49:16:42:94:c1:30:0f:9b:5d:c0:8e:
aa:1a:2d:de:9b:bf:ce:a0:91:f0:40:a6:53:3e:13:
72:70:71:01:27:29:7e:8c:dc:41:01:83:60:cd:46:
d2:32:cb:9a:26:40:b8:98:16:01:7e:d4:34:f9:19:
91:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CB:2E:5A:48:9C:5A:9C:E5:A8:2D:69:A3:5C:ED:E4:23:E5:94:C1
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:ad:b1:a4:a4:31:a8:e3:ef:5f:cd:41:84:42:4e:e3:df:
cb:db:f0:cf:b3:bb:89:fc:73:9f:b7:d5:b1:49:db:fb:e2:7f:
5b:6b:74:32:2b:5c:e3:b8:8f:e8:13:52:5f:ef:d4:3f:c0:28:
9d:6b:a5:71:d6:eb:a9:0d:68:5f:b5:ba:4c:4f:13:13:6d:13:
82:04:4e:9e:50:e5:31:49:80:87:bc:a1:9a:a1:f4:fe:f4:ec:
c4:b9:53:41:64:67:80:7d:9b:ec:ff:6e:99:e1:af:d8:9f:cc:
d5:13:07:2c:29:00:27:53:c8:4a:98:39:78:97:1c:d8:06:b1:
33:06:51:28:ce:a1:e2:f8:2d:85:f6:1d:13:59:29:f4:6e:9e:
ae:b3:d6:e0:9f:fb:1d:f4:b4:b6:4d:f2:4f:71:48:44:bc:4b:
24:a5:28:9d:bd:c4:4c:6a:47:ad:df:8d:0f:2d:cb:4f:f5:a2:
44:80:80:0d:bd:17:53:fc:68:ff:c7:69:77:60:02:40:7a:7d:
12:c9:14:7a:db:13:26:26:1f:f3:f6:db:92:a6:29:e3:b6:1d:
2d:ba:c0:05:58:2d:db:f8:e3:5c:98:e8:7d:47:5a:4b:78:05:
41:ca:29:4c:80:c5:2d:92:81:c4:11:07:0b:4d:5f:30:23:62:
cd:c3:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:19:20 2025 by rpki-client