Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
File: z6ExZhMNKdWtimB9gUmNpmAm0DY.mft (raw, json)
Hash identifier: R+iXxESFRQ7cGuH/nDMniQV9iWwcK1jd4oZlWkbZfvU=
Subject key identifier: 13:51:55:76:CC:C0:EE:93:84:82:A6:9A:14:2E:FD:5C:C3:8E:B1:75
Authority key identifier: CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
Certificate issuer: /CN=cfa13166130d29d5ad8a607d81498da66026d036
Certificate serial: 0196BD498C6CD8186BDBF197DCB817DF13B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
Manifest number: 0242
Signing time: Sun 11 May 2025 03:00:35 +0000
Manifest this update: Sun 11 May 2025 03:00:35 +0000
Manifest next update: Mon 12 May 2025 03:00:35 +0000
Files and hashes: 1: 8NRIip7PRvYkRKm_8iGpYTYG-fQ.roa (hash: baP/2HoWmnxywqu4ozYPStRBgvEVcCSlNjY9VrvxlOY=)
2: z6ExZhMNKdWtimB9gUmNpmAm0DY.crl (hash: 1Lkd7hpcugZdSxBFY6cH8BO179MhvJALPs7O/eN7Qi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:8c:6c:d8:18:6b:db:f1:97:dc:b8:17:df:13:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa13166130d29d5ad8a607d81498da66026d036
Validity
Not Before: May 11 03:00:35 2025 GMT
Not After : May 12 03:00:35 2025 GMT
Subject: CN=13515576ccc0ee938482a69a142efd5cc38eb175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:b6:1b:95:27:3b:39:bc:c2:a4:b3:b8:20:
3f:01:0b:a2:98:53:d7:50:30:c7:23:74:3e:dd:cd:
c5:90:70:76:14:2a:b7:fb:80:61:09:43:fd:31:37:
67:e3:ea:4f:24:47:0b:e0:8e:bf:18:8b:6b:d5:fd:
bf:c7:01:1f:23:67:92:80:b0:9d:e1:f3:23:19:d9:
17:99:2f:ab:dd:26:e5:99:fd:e5:c8:a1:88:63:60:
d5:d8:ee:c8:cf:9a:e5:21:e9:c5:59:f0:48:c6:7f:
55:9d:21:9d:a4:f7:64:22:31:f0:b2:9f:39:d9:f7:
e6:05:b4:c3:75:de:22:b9:df:30:19:44:52:29:45:
8b:85:e0:7e:2d:c5:0f:32:9c:2c:48:e4:64:b8:ac:
56:b4:f0:1f:67:86:b9:42:0c:56:b0:3c:b0:70:77:
c8:90:51:a5:62:3a:30:34:73:87:7b:22:6f:62:22:
25:06:cf:c5:bd:27:dc:7e:e0:fb:34:6b:c3:c4:be:
dd:d3:bd:c8:14:ce:4c:f0:18:9b:4c:fe:0c:ee:02:
a5:24:c5:7d:7f:17:f2:80:4d:40:98:7c:c1:2d:e9:
b7:5c:80:95:1a:2d:0f:3a:86:74:3f:01:c7:cc:6b:
68:6c:54:c6:42:fa:08:b6:d3:60:e7:5e:71:17:01:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:55:76:CC:C0:EE:93:84:82:A6:9A:14:2E:FD:5C:C3:8E:B1:75
X509v3 Authority Key Identifier:
keyid:CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:bf:41:32:2a:75:5a:d3:5f:4f:d9:38:d0:07:d4:97:d5:
df:58:4f:d9:37:33:1e:8c:c4:dc:1a:de:69:31:ba:91:53:29:
9c:f4:d3:27:03:44:c3:ec:d9:12:6a:77:6c:3b:15:6b:8d:23:
29:0c:f6:5c:7c:c7:5d:6b:7e:fb:c9:b1:5f:8a:1a:4e:00:ca:
ea:bb:15:4b:7d:ef:ea:4a:53:63:ab:c4:d9:bd:44:34:c4:dc:
9a:00:a6:26:44:58:15:62:58:dd:b3:c1:c3:74:e0:a5:64:05:
fb:ef:52:0c:10:d0:ec:84:a7:ef:2a:e2:07:ca:f4:38:3c:14:
b3:1f:09:8a:48:30:d5:e3:45:4f:28:78:34:2c:40:0b:38:77:
cf:91:4d:81:e4:6a:9f:f5:2a:da:88:4a:fd:b3:9b:2e:d0:b1:
4a:ff:f1:2f:da:f5:b8:11:29:5b:10:c3:35:6e:1f:c6:ce:76:
b4:50:0d:c0:05:a3:90:28:11:8e:63:29:75:ec:27:af:e2:36:
b0:7c:cd:6c:7f:bb:12:1a:f4:d1:ce:d3:f9:de:9a:c8:bf:01:
55:aa:a7:18:62:99:e6:f9:b2:ca:46:e1:c4:08:ca:e8:23:22:
24:f6:40:ed:dd:57:94:27:7b:fc:c9:eb:b6:2f:5c:c6:ce:03:
f3:c7:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:39:04 2025 by rpki-client