Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
File: rz9wBQP0ByCoL3bvFc2mICLx-ak.mft (raw, json)
Hash identifier: JAmuJiFOCkQYlEqIX+akG8lqNaieTv63hz2vqs3nD9w=
Subject key identifier: E4:93:78:78:3A:CC:5F:7B:B2:71:18:28:E4:E9:DB:80:8C:C1:BC:4F
Authority key identifier: AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
Certificate issuer: /CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Certificate serial: 0196BC3705F51987E3F50B93604F6950EDC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
Manifest number: 0BF9
Signing time: Sat 10 May 2025 22:00:44 +0000
Manifest this update: Sat 10 May 2025 22:00:44 +0000
Manifest next update: Sun 11 May 2025 22:00:44 +0000
Files and hashes: 1: rz9wBQP0ByCoL3bvFc2mICLx-ak.crl (hash: G3EQs7Sv4XpYC3JCoDiXqDecolhrBq2h/qozRZ5NGTA=)
2: zHaHHwpWkvwMR4EBkRKLj2nL7g4.roa (hash: dEmOAj28ftGGpyQRnDV2quElsA9Yrv1JJIOo7l9XjEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:05:f5:19:87:e3:f5:0b:93:60:4f:69:50:ed:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3f700503f40720a82f76ef15cda62022f1f9a9
Validity
Not Before: May 10 22:00:44 2025 GMT
Not After : May 11 22:00:44 2025 GMT
Subject: CN=e49378783acc5f7bb2711828e4e9db808cc1bc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:3c:8a:fd:59:58:04:50:4a:7e:39:f3:13:b3:
a4:72:8c:9a:51:74:b3:26:00:04:fa:70:7a:aa:9c:
10:25:a9:ef:d5:6d:f8:5f:36:a8:ce:bb:95:c9:d0:
66:09:bf:48:79:aa:90:f3:3e:48:8c:14:e2:4e:32:
bc:3f:5b:93:b1:d1:b8:e7:6a:5b:7d:01:44:58:27:
9c:8f:0f:63:54:05:93:45:aa:09:2b:6a:d2:6c:65:
97:2d:d0:35:6b:62:1a:aa:f8:a0:74:fc:da:3e:5c:
e1:3f:66:af:47:9e:a4:43:78:95:ac:64:87:7a:cd:
9f:51:5b:2b:56:f8:77:e5:ff:dd:1a:c1:75:2b:45:
55:04:f4:50:68:8f:8f:9a:af:63:84:bb:a0:27:e9:
1c:2e:9f:7d:5a:b8:b4:1a:8d:a3:50:79:cc:2d:0b:
4e:80:c5:8b:79:93:80:da:c3:d3:49:35:42:fc:2e:
4e:8a:2c:79:e0:76:60:3f:43:c5:f4:3a:60:c0:cb:
50:33:6c:8f:9b:36:29:36:d6:0a:24:70:4a:f3:9e:
41:14:8a:30:49:12:b4:1e:cb:a5:01:f8:e9:01:94:
f4:41:19:57:08:79:4e:37:19:a4:d9:ff:7e:9e:d4:
07:90:ca:fb:e3:cb:a8:7f:5f:50:7a:b8:b7:ac:aa:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:93:78:78:3A:CC:5F:7B:B2:71:18:28:E4:E9:DB:80:8C:C1:BC:4F
X509v3 Authority Key Identifier:
keyid:AF:3F:70:05:03:F4:07:20:A8:2F:76:EF:15:CD:A6:20:22:F1:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rz9wBQP0ByCoL3bvFc2mICLx-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7b7f26-f841-4700-aafb-ead0634192cd/1/rz9wBQP0ByCoL3bvFc2mICLx-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:62:4f:a7:59:38:a2:1f:2c:40:2d:23:c3:81:2a:06:16:d4:
97:d7:d9:65:e6:3f:98:27:fb:db:c8:0a:28:18:97:3e:ad:d3:
f2:50:04:12:cf:b6:13:30:b1:4d:3f:55:f9:6b:bf:fb:39:f4:
31:33:ef:e0:04:06:32:d6:34:fa:cd:99:9b:47:d0:64:fc:d3:
5c:71:2c:12:62:4a:78:9c:5e:27:eb:13:c1:ff:d3:40:af:71:
03:65:b1:72:38:c4:c0:50:0c:04:32:7f:6d:58:e5:d4:92:37:
21:e7:d8:2d:48:f1:78:b1:c6:ec:6c:fb:72:02:08:15:bc:05:
8c:02:b5:4a:c1:70:0a:0a:4b:44:ce:0a:14:12:06:e5:5d:fa:
f0:57:9b:c2:d4:3c:4b:10:5d:22:18:da:0d:6c:a2:5e:cc:03:
6a:e7:19:db:48:86:41:b8:60:4a:8f:bb:ae:29:11:1f:83:01:
69:43:2a:ec:28:8d:9c:f4:3d:59:21:ab:ca:4d:24:14:22:b5:
94:62:32:ab:cc:77:66:e8:1b:e8:44:4f:e4:b8:f7:c3:f9:cf:
51:4f:1a:f8:1f:73:46:2d:ee:50:48:b7:8b:be:e5:80:9b:b1:
8e:66:14:de:2b:1f:81:75:c4:2e:da:67:60:36:cf:33:78:2e:
78:ae:f0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:23:42 2025 by rpki-client