Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: BbZVoSvgjFCGb9efS2ODLgajbAxv/vkCVRbx4Mj3Xn4=
Subject key identifier: E7:8A:C6:28:AC:8A:F3:95:0A:E0:74:EF:7D:3F:3D:36:6F:76:40:06
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 0196C615A575E195F34848925FD3C456FCA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0BD4
Signing time: Mon 12 May 2025 20:00:29 +0000
Manifest this update: Mon 12 May 2025 20:00:29 +0000
Manifest next update: Tue 13 May 2025 20:00:29 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: /r3g2bczz3VlObfcsZiAh9MhGOEuNPYLL0we0U6TZ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:a5:75:e1:95:f3:48:48:92:5f:d3:c4:56:fc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: May 12 20:00:29 2025 GMT
Not After : May 13 20:00:29 2025 GMT
Subject: CN=e78ac628ac8af3950ae074ef7d3f3d366f764006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:56:d8:69:fb:05:b8:ab:4c:14:bb:2f:9c:
01:ad:24:95:65:f7:42:ee:1c:1c:fb:2c:2c:60:a5:
77:7e:2a:3f:ca:32:07:18:8c:91:5d:a3:39:ca:bb:
ff:e5:d8:0c:d3:7b:7a:78:ff:33:1e:b3:82:90:35:
17:24:84:40:a6:24:2e:13:a4:f6:24:33:4d:1c:9e:
e0:35:bd:42:c3:ae:7b:52:6a:65:0d:e2:df:db:52:
76:8f:20:a7:04:0c:21:ae:ba:e7:16:dd:cf:b9:c5:
71:f5:60:2a:a6:84:5c:b5:30:66:06:f9:78:19:74:
49:57:f6:03:c1:72:29:3e:22:3c:36:16:74:2b:2a:
3a:0d:06:9b:2e:32:42:d0:b0:71:87:95:3b:57:a8:
3a:3f:61:9a:3c:34:c5:a7:cd:32:18:5d:da:58:f8:
cf:10:9c:27:f5:18:08:ef:f0:73:8c:f8:d1:1f:88:
84:c5:06:f8:61:9c:0c:fa:fc:77:cc:6b:f1:bf:6e:
46:8f:a2:02:4b:6b:f8:74:36:01:f5:97:88:35:51:
76:cf:82:f1:d9:1a:31:3f:20:f2:c5:5b:a6:f9:87:
d7:35:2e:d1:86:b0:c8:9b:58:d8:ad:26:60:f8:e9:
b0:75:ff:fd:f7:f2:c4:3e:34:34:33:4a:de:6c:83:
2f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8A:C6:28:AC:8A:F3:95:0A:E0:74:EF:7D:3F:3D:36:6F:76:40:06
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:13:cc:7f:63:dc:63:cb:42:3f:5d:13:87:bc:ef:12:91:e2:
f1:db:a2:00:93:42:3b:24:8a:f5:dc:5f:30:d7:f6:34:88:2d:
8d:08:76:f5:d1:cc:84:b5:68:6a:a1:14:db:93:6e:b6:e2:07:
e3:d3:3e:bc:af:2c:d9:43:f4:34:ab:f3:64:98:af:f1:2a:6f:
6f:6d:0e:99:35:75:28:6d:f6:c8:d8:fa:4e:00:57:b9:cb:cc:
3f:04:a6:98:34:97:03:df:81:6c:c0:9e:94:0a:df:d4:dd:ac:
6f:e2:2f:29:ae:56:93:b8:67:b3:35:5a:0c:c6:83:b5:a4:25:
bc:75:80:55:f6:72:6d:9c:19:c6:cf:2a:1e:f1:c3:3b:8d:fb:
b4:75:4f:b2:6b:e4:9e:f3:1d:05:a0:16:72:b4:19:71:2b:40:
32:79:24:f3:73:07:2e:c4:d8:6f:63:12:b1:8f:5e:42:85:f5:
b6:16:cf:f8:c1:0c:a3:cd:15:20:6c:db:da:f9:40:51:7e:97:
23:87:6c:c8:94:8f:80:ee:81:9d:ba:52:11:56:e1:79:d2:33:
e6:7a:ac:11:a3:92:bd:99:b5:03:d3:2b:46:f4:78:cf:48:22:
5b:42:cf:45:a0:4c:95:cd:be:20:c1:4e:45:e5:71:ab:1d:f3:
55:8b:c6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:05:38 2025 by rpki-client