
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
File: z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft (raw, json)
Hash identifier: K2U6MBPflIY+82w+T3JmeOuyOMrUtlUYh8Ahzz8exDU=
Subject key identifier: 7B:34:B2:CE:CC:C0:A9:9D:E1:55:27:0E:84:81:C6:70:15:39:E0:87
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 0196BD49A6C68AF39226DDAF061501999F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
Manifest number: 1093
Signing time: Sun 11 May 2025 03:00:42 +0000
Manifest this update: Sun 11 May 2025 03:00:42 +0000
Manifest next update: Mon 12 May 2025 03:00:42 +0000
Files and hashes: 1: 3Se2yOnJsVWCGsg0f4PtxlfB3UY.roa (hash: TnQIP8m/z9TeUL6T1o3LFStwx3OkwZWYEkGyH7pKVzQ=)
2: C6G26s2_9rDhMVp1kQhNB3w99vU.roa (hash: /Sx9ARb2KrLY9zv7k7Qpt7h2hX4KWumGuc1xaBNSC/E=)
3: IeIheuUZIrSao3cwITZ9a7Vr14M.roa (hash: D6ff1htYAOrTrHoE1npjdhSz9xEaYGaeMk7OAb0vWUY=)
4: OToS6J8sZcb-NOk0SLebRPhhIy8.roa (hash: hJi47h64zp0y7tuydNdIF9Tsj0N17DTgxMy6IbUz6LM=)
5: TdLHKlZzjrEpDoV-ssGo-ZoVFdQ.roa (hash: olUxSsNWWfOkaH/tshrZT1VhUO7Fs87MPQLfSyoOypI=)
6: g25IGTKfPYjST4HNSDfCkGR8U-U.roa (hash: shszXMRp8pWU+jn/kDMsa59h70gxIvBt7/Q+QM/PucQ=)
7: z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl (hash: XEBL79o2quVmlBq5qNa66yciVGGh+1H8sGy9kfeeNYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:a6:c6:8a:f3:92:26:dd:af:06:15:01:99:9f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: May 11 03:00:42 2025 GMT
Not After : May 12 03:00:42 2025 GMT
Subject: CN=7b34b2ceccc0a99de155270e8481c6701539e087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:37:05:39:0b:03:05:d4:36:b0:b2:94:09:
16:2a:61:68:e3:e9:a7:90:02:87:80:1d:dd:9b:14:
30:45:8f:a9:d3:3e:8f:42:08:da:c6:c5:ea:34:34:
c0:33:4a:6b:29:e5:52:0d:a2:08:1e:92:0b:04:67:
0d:7c:3c:c0:2b:75:ba:0d:b9:12:4b:44:07:e9:f6:
f6:ea:27:d7:76:1f:cc:44:ad:ee:dd:73:9a:21:48:
ec:7a:c6:75:50:9d:cf:48:03:dd:24:26:82:ff:a3:
ce:a6:d0:40:3c:55:14:91:1c:55:3f:40:f2:00:c7:
f8:79:51:ac:49:31:46:a7:51:bc:5b:e1:21:01:a9:
a1:33:36:41:9b:6f:d1:22:59:92:9e:10:71:d8:38:
2a:f3:ab:a7:c3:1a:91:76:bb:56:d0:03:70:f1:04:
58:66:1e:f8:92:f7:06:dc:1f:b6:33:14:94:cd:6c:
d2:f7:2b:4f:5f:18:5b:9f:14:4d:73:09:7e:43:64:
39:be:ab:cd:6e:7c:71:8a:e4:4f:1f:66:90:dc:99:
9b:bb:ed:28:1a:78:4c:77:0e:9a:d5:3a:e8:ab:ae:
1a:69:5f:17:63:f0:f5:99:e2:14:60:79:76:b8:07:
3f:37:c8:5b:95:91:25:21:54:93:b8:e1:93:0e:72:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:B2:CE:CC:C0:A9:9D:E1:55:27:0E:84:81:C6:70:15:39:E0:87
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:6b:65:21:11:08:b7:d0:86:d5:e9:86:30:dc:6c:52:af:
f0:34:08:ce:03:11:84:21:25:b7:c9:ab:93:2e:f4:e8:13:97:
8c:80:9f:c1:56:6c:d7:c6:de:0a:8c:ab:2a:61:c9:80:0c:db:
90:de:84:1d:df:94:27:8f:bd:81:35:ca:b2:2e:b1:29:56:b0:
80:d5:94:54:99:45:94:bd:cd:f0:30:87:62:ba:d4:d2:09:1c:
49:30:45:ef:fa:16:97:08:aa:43:ce:9b:4d:d5:13:ae:0e:f9:
6c:ff:fe:83:b6:98:84:c4:8d:43:c0:a1:ff:38:88:2c:e7:4c:
c9:4c:51:b6:6e:a1:fd:c0:d7:d4:c0:91:41:e8:f4:d5:b6:e4:
7b:7a:35:10:ac:3f:e6:0d:94:bc:9c:65:b3:20:ba:27:ec:44:
9c:b7:bd:09:a9:c2:b1:d4:02:c1:00:e4:61:5a:5d:2f:35:7c:
db:b5:bd:76:37:c8:39:37:6b:96:84:85:c4:f6:a4:61:7b:dc:
5d:d1:64:dc:d5:09:82:c4:07:68:5b:1b:53:73:5b:01:45:7e:
dc:8c:d0:39:69:ac:ef:26:e8:01:9c:f5:f0:d0:db:8f:9b:03:
76:d2:cf:a1:09:4f:53:f6:48:68:00:36:b0:5f:10:33:15:d8:
9b:f5:12:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:35:28 2025 by rpki-client