Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File: sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier: k8750b+jdfVwradyge7VXf2UC5nW/xWy70PSaalhsyY=
Subject key identifier: 25:3E:3A:9D:72:49:AE:2A:86:7E:EF:C8:42:2A:D3:7B:B9:5A:EB:7C
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer: /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial: 0196BFA580627852D674B4102BED0CFC962A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number: 09B1
Signing time: Sun 11 May 2025 14:00:16 +0000
Manifest this update: Sun 11 May 2025 14:00:16 +0000
Manifest next update: Mon 12 May 2025 14:00:16 +0000
Files and hashes: 1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=)
2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: 6Eksvho+aLbv68IK5MkfzT9pDKzUrn2ob0NRP+VStiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:80:62:78:52:d6:74:b4:10:2b:ed:0c:fc:96:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Validity
Not Before: May 11 14:00:16 2025 GMT
Not After : May 12 14:00:16 2025 GMT
Subject: CN=253e3a9d7249ae2a867eefc8422ad37bb95aeb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:4f:3e:6e:17:35:bd:a9:71:b4:b8:98:76:
5f:3a:5f:2c:ec:68:32:b5:cd:5d:c9:bc:b0:66:57:
5e:d2:4a:34:01:11:db:e1:ed:42:89:ae:8e:e9:b1:
fb:2e:4f:0f:86:3d:95:f8:b9:8f:ac:45:c2:9b:21:
e5:b8:3d:2e:07:4b:4b:c9:a0:20:98:93:48:fc:b7:
da:67:0d:ea:f7:e4:90:20:b4:cf:3b:e0:87:8a:ce:
ce:05:fb:15:8c:fa:a9:c1:db:26:39:61:d7:2a:f3:
b3:bc:20:a0:61:ff:b4:4b:6b:56:b0:d1:d5:b3:4b:
38:40:aa:fd:0c:9b:22:b2:d0:65:57:08:a1:bc:c7:
7b:01:7d:c8:c2:20:8c:11:fe:94:f6:f4:07:2d:7d:
94:21:96:8c:c4:72:7e:c9:99:0f:44:43:49:a7:36:
6d:ed:8d:2e:58:90:3e:ac:25:9d:58:cf:40:99:ce:
3d:2b:b0:61:77:a2:91:db:a2:92:e2:06:3b:2e:07:
11:04:02:68:52:56:64:57:07:11:fb:d6:06:c6:cb:
b9:b6:01:36:af:a2:67:19:6b:72:5a:ce:5c:9d:0e:
be:d5:98:a1:8f:29:71:c2:76:bc:43:1a:ca:ec:e2:
95:52:b4:b7:bb:72:0c:08:37:00:19:0f:eb:8f:99:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3E:3A:9D:72:49:AE:2A:86:7E:EF:C8:42:2A:D3:7B:B9:5A:EB:7C
X509v3 Authority Key Identifier:
keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:ee:8f:65:26:05:c5:9f:5e:10:32:91:29:24:c5:42:f7:
f0:0b:c5:f6:c7:f0:58:cd:42:be:75:7a:db:09:7b:72:40:62:
82:de:d5:06:d1:e1:d6:52:2a:18:cd:72:8b:f1:5d:5b:6e:98:
7d:f1:23:9b:58:e4:da:54:9d:7c:92:71:2f:3a:14:63:ac:49:
86:6a:0f:7f:e9:45:ac:f2:78:72:49:86:e6:0e:a4:3b:f2:c3:
03:ce:27:8c:18:f4:df:b7:e0:e0:6f:28:52:50:be:de:0f:e0:
d5:bf:67:67:e1:64:ab:9d:0c:b5:ee:79:bf:fb:9a:93:a2:00:
d8:62:36:a3:5b:d1:a2:11:d4:aa:70:93:ab:e0:37:17:d9:49:
45:a9:d0:d5:14:af:17:73:30:bf:7f:b6:df:29:fc:87:bc:c0:
b5:01:19:a5:5a:b6:98:58:db:7e:0c:25:f0:9b:7b:73:00:4d:
8d:4a:0d:5a:f5:42:18:4b:f2:b0:48:80:fc:3f:42:eb:f9:97:
72:40:a7:26:6d:04:ef:f7:1f:ab:9d:8d:a0:4b:cd:6e:b4:dc:
e8:91:b2:6c:53:13:5d:9e:87:fe:96:3d:9e:46:15:b4:c9:b9:
26:87:f3:81:a2:59:ed:3f:fa:af:de:5b:ba:45:ca:b2:af:59:
37:37:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:59:31 2025 by rpki-client