Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
File: z9bhYdz7e3J3UUnUNbebqdVtFBc.mft (raw, json)
Hash identifier: 1s5ThrOxbRCmZahuxKA+CPjC8rEYvCA+ogacetROjM8=
Subject key identifier: D3:B6:B5:7A:79:8F:74:E1:E8:C5:D9:16:6C:15:A3:75:0D:28:4A:52
Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Certificate serial: 0196BFA5EC260EE9FB5CAE98F1CB90CDA0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
Manifest number: 153C
Signing time: Sun 11 May 2025 14:00:44 +0000
Manifest this update: Sun 11 May 2025 14:00:44 +0000
Manifest next update: Mon 12 May 2025 14:00:44 +0000
Files and hashes: 1: 3RInciSdJGuSvDB_51KkkZIJFSM.roa (hash: 3/HjzRtzuMbFeOMatgJOwMZQLWYkmzjLRu3ceCOI8Rg=)
2: Vwxuf9tXogbGBPbtetxGHltRAJA.roa (hash: 56fbOe+uRKJW3PaHfR9HfAkpkYQK6n+PS05QT68yj88=)
3: r_bOLpGR44Uxr2yZR3U8n-cd72g.roa (hash: 77U0OrAigBGcas60BhBB6LRX9fbaZ0dNBtqvHrAGNSA=)
4: z9bhYdz7e3J3UUnUNbebqdVtFBc.crl (hash: yGvELhpJgaR6w7wuNY3+P2/EqiQXudrvdwWRlW+xfyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:ec:26:0e:e9:fb:5c:ae:98:f1:cb:90:cd:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417
Validity
Not Before: May 11 14:00:44 2025 GMT
Not After : May 12 14:00:44 2025 GMT
Subject: CN=d3b6b57a798f74e1e8c5d9166c15a3750d284a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:16:89:98:01:1b:64:44:b6:23:d1:f3:c7:
78:a2:87:58:f1:13:af:c9:85:ef:9f:62:fe:c8:df:
f4:f7:38:c3:9e:b3:10:eb:e1:69:50:16:b0:42:d0:
e0:8f:d3:43:76:8a:34:d9:a2:9d:cd:cb:aa:3a:9c:
31:03:1a:ea:1e:b4:33:06:6a:9b:45:a0:f6:bc:67:
23:7f:b6:c9:66:8d:1b:03:69:6f:0a:82:80:18:30:
30:eb:5f:a3:91:00:d4:d7:91:90:65:e3:5e:42:30:
06:ac:d6:71:a9:6a:c0:46:83:15:d2:bc:57:da:61:
b4:5c:3f:8b:f1:ea:14:f8:bd:be:27:34:b0:79:c1:
69:26:9c:d6:57:3b:8d:5f:af:e1:f5:eb:ff:99:48:
e1:d1:8a:bc:78:2f:87:d6:b2:a9:79:e7:1d:94:94:
64:63:5c:eb:a7:6e:0b:9a:61:f0:0e:8f:9d:da:a6:
45:52:4b:7d:d9:7f:7f:9a:cd:34:b0:6d:db:ff:43:
43:a4:22:6d:d2:97:7f:27:18:09:ab:c3:f5:82:43:
32:fb:11:bc:9e:12:86:b9:22:a0:ef:a9:88:ef:c9:
fc:74:69:45:97:58:da:b3:2e:50:8c:e2:19:a6:08:
2c:1f:aa:74:61:88:5b:8e:02:91:76:5e:da:a5:6f:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B6:B5:7A:79:8F:74:E1:E8:C5:D9:16:6C:15:A3:75:0D:28:4A:52
X509v3 Authority Key Identifier:
keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:33:fd:d0:3e:3f:37:78:a7:cf:b1:8d:12:98:b9:ef:20:bd:
9a:91:1f:6f:d1:46:b6:cc:96:04:d7:36:54:b9:4d:7e:61:94:
81:ba:f6:d8:be:58:f3:a9:04:ed:5c:b3:c8:c8:ab:6c:40:bd:
d5:0c:02:6e:fc:59:a7:18:26:c7:5f:f5:58:e6:71:12:88:39:
68:10:05:ed:e7:a2:a2:ee:d0:c7:35:e0:80:9a:b0:89:ba:b2:
99:5d:8c:95:90:99:e1:3e:99:0c:83:26:e6:9e:b3:87:36:1e:
58:76:81:33:e1:3b:78:80:32:08:32:ad:b5:16:4c:c9:7a:97:
cd:97:fc:52:5f:ba:fa:9c:24:85:9b:3f:45:f8:4f:e6:f9:46:
9a:75:e5:87:f1:9a:25:dd:bb:54:14:40:c1:b8:4d:9b:09:f6:
82:88:38:6f:fc:c6:0a:b0:f8:3c:9a:49:35:46:d7:4b:d2:2b:
ba:ea:cf:43:2f:4b:d1:97:be:fc:b4:77:c8:8c:b1:e9:74:ca:
3b:6e:84:3b:44:09:1b:a7:ee:3d:7e:12:6c:1b:19:86:fb:83:
93:87:8b:91:d5:d8:94:ad:90:fe:2e:9d:a5:e8:1e:ed:c3:3e:
09:73:bf:87:80:f8:5f:fb:95:39:7a:c1:8a:ca:c8:d6:7b:b2:
8a:ce:d5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:20:47 2025 by rpki-client