Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
File: zABy2pgRQZPBBM4aYJ2SppdvnEA.mft (raw, json)
Hash identifier: QODsbLD5GlBQCrNOVKx2XYj3b1BOUwCtQd4uBv+oRNU=
Subject key identifier: EE:F5:88:E9:02:52:60:83:E7:6E:35:62:EC:C5:A8:EB:BA:11:45:69
Authority key identifier: CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
Certificate issuer: /CN=cc0072da98114193c104ce1a609d92a6976f9c40
Certificate serial: 0196BF6E7A22181D6A4CF78E9173A2E890A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
Manifest number: 0B93
Signing time: Sun 11 May 2025 13:00:10 +0000
Manifest this update: Sun 11 May 2025 13:00:10 +0000
Manifest next update: Mon 12 May 2025 13:00:10 +0000
Files and hashes: 1: 3v8-AVmS3D60nr6oY5txeF-mNWE.roa (hash: Ro3j6Io0YHQvcRgbnIeBRX8S3cmUUvXexUWF9lq8elQ=)
2: zABy2pgRQZPBBM4aYJ2SppdvnEA.crl (hash: /F7iLGISxNFI6TMhmM64d69j+b8yM2qP3Z9F6wXBmI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:7a:22:18:1d:6a:4c:f7:8e:91:73:a2:e8:90:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc0072da98114193c104ce1a609d92a6976f9c40
Validity
Not Before: May 11 13:00:10 2025 GMT
Not After : May 12 13:00:10 2025 GMT
Subject: CN=eef588e902526083e76e3562ecc5a8ebba114569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:19:2f:f3:7f:85:26:1e:5c:c7:8d:b1:6b:
ac:8c:2f:48:5e:2b:4c:c9:ac:1f:fa:83:92:f3:cb:
06:df:bc:cd:93:ad:28:61:7e:e5:9c:86:9a:ca:ab:
87:c5:2c:5d:71:d8:c8:98:e0:9b:b8:de:bd:14:2b:
db:25:08:79:a8:dc:47:1c:50:b0:e1:6b:70:01:a0:
90:17:bf:8e:07:5e:c0:c2:e0:98:40:c2:ea:a3:8b:
7a:e8:25:68:4b:42:15:1a:81:b7:d5:81:7a:75:03:
49:d6:de:fb:7f:71:9d:99:52:42:04:85:87:47:31:
18:61:cf:f3:9f:49:c5:e5:fe:14:04:41:a3:24:b3:
d7:f8:38:c2:7c:66:d7:6b:61:d4:98:0f:8a:12:70:
22:e5:80:db:98:25:02:94:6f:f2:94:3a:19:9c:7b:
56:56:27:27:00:7f:fc:a7:f3:85:a9:1d:fc:e3:1d:
30:f9:fb:77:ec:29:60:cf:75:be:88:bf:d7:16:ce:
98:31:0a:8a:f0:1c:f0:65:9a:9e:09:c4:8c:c0:0c:
89:f3:bb:67:02:fb:03:51:00:c7:eb:2b:17:f3:6c:
4e:28:9c:fd:6f:c1:a8:4a:34:1d:5e:b4:d1:b7:de:
89:75:c8:55:62:f5:73:22:9c:b2:b8:41:3c:a5:d0:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:88:E9:02:52:60:83:E7:6E:35:62:EC:C5:A8:EB:BA:11:45:69
X509v3 Authority Key Identifier:
keyid:CC:00:72:DA:98:11:41:93:C1:04:CE:1A:60:9D:92:A6:97:6F:9C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zABy2pgRQZPBBM4aYJ2SppdvnEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/607caa-8f49-459b-aa74-c0ec8b95ab77/1/zABy2pgRQZPBBM4aYJ2SppdvnEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d6:01:b0:40:78:fd:30:e7:77:e7:7a:b3:06:95:b1:0d:39:
bf:7e:8a:cd:df:d2:1d:ae:cd:aa:97:a5:37:3c:c4:f8:c1:d0:
e9:f2:e9:51:a1:dd:9f:45:b8:12:50:cd:8b:40:c5:80:f6:77:
8d:ec:93:55:2d:91:ee:5f:14:d3:43:71:1f:65:df:7f:e7:4a:
15:62:4f:d7:d5:08:fe:fd:9c:c8:50:82:06:fe:14:0b:6b:73:
13:41:3d:28:45:20:42:59:d4:26:77:a4:26:79:9e:2a:df:73:
0a:6b:54:b0:41:92:93:63:b0:59:6e:40:8c:a8:f6:fb:90:14:
6e:f8:8b:3f:36:2f:13:2f:e1:04:55:a4:e1:ba:e3:2b:0f:d2:
62:5d:25:cc:8f:5e:ab:b2:08:c0:32:12:64:57:0b:c5:72:ff:
d6:ec:5f:32:ac:2d:6a:10:27:6d:a3:13:9d:09:73:e2:16:b7:
17:aa:e3:37:3f:df:45:dd:e0:d9:73:eb:06:1e:b6:a8:26:f7:
d7:1f:47:ef:4d:3c:52:6d:db:0c:15:b3:a1:d4:da:5c:92:1e:
b1:63:1e:72:d6:f0:15:41:97:0a:ea:2f:a3:63:1f:18:0b:cf:
96:17:1e:21:e6:37:02:46:4b:5b:33:eb:22:dd:66:b5:b7:dc:
66:26:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:11:57 2025 by rpki-client