Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
File: z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft (raw, json)
Hash identifier: 90sOGAyl+FAIDjVldQIE92iB/KBRblBEkhx1shXmujg=
Subject key identifier: 0E:B3:DE:BA:A8:C4:9F:CA:FC:E4:55:61:B4:EB:85:4D:16:A2:94:22
Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Certificate serial: 0196C08165E827F54783C55962C750259FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
Manifest number: 153A
Signing time: Sun 11 May 2025 18:00:27 +0000
Manifest this update: Sun 11 May 2025 18:00:27 +0000
Manifest next update: Mon 12 May 2025 18:00:27 +0000
Files and hashes: 1: Fv5Q4Jgph76jJA6WFQsqRmXCw8s.roa (hash: MX3HFB8kT23MsRMUZ5iOzHB5WYojkHCu+itSb597FCw=)
2: z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl (hash: 15wf7WBKSIjoHAcfhemynvq3Yj0Jupki3GpUuw9dg9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:65:e8:27:f5:47:83:c5:59:62:c7:50:25:9f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492
Validity
Not Before: May 11 18:00:27 2025 GMT
Not After : May 12 18:00:27 2025 GMT
Subject: CN=0eb3debaa8c49fcafce45561b4eb854d16a29422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:fa:1e:93:af:36:35:96:05:4a:34:a8:fb:
d4:11:9d:ec:f0:c0:a3:f7:17:7a:68:35:d4:23:c0:
ae:65:24:06:1c:8e:13:5d:40:72:1a:26:09:16:4c:
1b:97:76:ac:bd:88:ca:6e:8f:e1:2b:bc:89:77:df:
23:71:c9:2d:4e:f0:0f:27:fb:5e:cb:c6:a7:c3:e6:
32:37:38:45:7a:d1:d7:3f:62:28:1f:43:7c:9a:f2:
25:02:70:92:a2:e8:81:68:a0:2e:1a:43:b3:e9:5b:
b3:af:80:01:4c:9e:e5:bb:6f:be:52:07:0d:70:85:
3e:82:cc:c2:a6:3f:2b:fa:9e:ac:da:de:b6:c8:7c:
72:2e:6b:4d:c5:78:a5:96:aa:b8:26:5b:72:4a:ba:
b1:78:6e:2c:d6:91:8e:09:a4:99:64:aa:e3:f7:d2:
c3:dc:76:76:15:91:a0:38:8c:60:be:d1:f0:b8:d7:
78:48:ea:e9:d6:dc:e1:ac:91:50:87:b7:c2:a0:da:
48:40:59:09:0c:bc:2c:77:2f:de:96:ad:4c:af:c1:
94:9c:7d:a0:57:de:4c:37:7b:7d:d7:5c:4d:e0:0b:
9f:f1:74:f0:0d:77:73:65:da:cd:3a:98:55:d5:4b:
ff:ba:b2:30:e8:cc:c2:42:55:5d:8a:bd:85:f8:6e:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B3:DE:BA:A8:C4:9F:CA:FC:E4:55:61:B4:EB:85:4D:16:A2:94:22
X509v3 Authority Key Identifier:
keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:16:ca:65:7b:5c:41:8a:ef:aa:6d:f7:b1:bb:c3:03:39:aa:
a9:ea:c5:eb:00:5b:38:c2:fc:08:9b:ea:8d:19:ee:3d:7a:43:
84:eb:a2:c0:f4:da:c6:2f:58:06:4d:78:b8:44:21:3f:59:ae:
65:01:5a:0f:51:4a:78:23:01:fb:64:f5:c7:d5:a9:cc:0a:1a:
41:46:d5:58:08:5c:5a:d0:b0:7b:aa:72:b2:c7:7d:69:83:71:
ae:a7:12:48:a5:cc:c9:6f:da:89:a7:5d:81:9a:4d:0b:4c:eb:
ee:b3:68:26:03:e4:2a:f6:3b:e4:33:5b:48:14:f8:ae:81:50:
22:0c:16:41:9a:a0:95:0a:04:48:3b:99:df:7d:00:cb:91:85:
e7:70:8d:8b:19:ec:01:fc:25:74:57:b5:52:8e:26:71:42:1c:
b2:70:c6:c0:44:31:85:dc:7c:ce:26:15:c4:29:4d:63:0e:dc:
f3:50:26:31:1e:a1:b9:ec:08:4a:6c:f7:2b:68:49:e0:5b:69:
e9:e2:6b:65:21:11:d4:23:1f:dc:67:f5:4b:0f:f2:01:10:0d:
38:e0:67:73:a7:58:ad:06:cd:57:bd:b4:8d:af:4d:10:ee:2a:
78:58:01:db:f7:c0:96:05:a1:c9:e7:d7:ca:82:30:8d:c5:30:
7a:f0:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:54:18 2025 by rpki-client