Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: 3sVIlTGSew96MJlZ5/fAV3cI+FQRizGx009zZ/kVdfU=
Subject key identifier: C8:B3:5C:D3:8F:C4:6C:37:BD:4A:DB:C6:5C:D2:C7:C8:63:4D:87:33
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 0196C08158D539AD28583551ECB0CC58C9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 0D95
Signing time: Sun 11 May 2025 18:00:24 +0000
Manifest this update: Sun 11 May 2025 18:00:24 +0000
Manifest next update: Mon 12 May 2025 18:00:24 +0000
Files and hashes: 1: 1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa (hash: xHdOOR5x+I+BVkrKwEv1LdA4W3/XGAhIP6d+Tp6sbDA=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: 7G4U333qZ/TVqNjC+b8PYbSzlg1Yl5yMAMGBIODVDpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:58:d5:39:ad:28:58:35:51:ec:b0:cc:58:c9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: May 11 18:00:24 2025 GMT
Not After : May 12 18:00:24 2025 GMT
Subject: CN=c8b35cd38fc46c37bd4adbc65cd2c7c8634d8733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:88:8e:82:a8:19:e3:93:74:64:c3:b3:d6:
e5:8c:2b:e0:6a:87:ad:ed:cc:20:d5:cb:18:36:45:
a5:68:93:53:bf:3b:db:fa:18:59:e0:d1:46:d6:12:
01:3c:8e:f9:50:be:8e:b3:71:b1:6b:2b:40:f7:9d:
92:b0:89:db:c5:8b:2f:b8:8e:bc:e8:89:32:c9:38:
ba:9d:4c:6d:d0:b7:e7:44:6f:b3:50:db:af:1d:bd:
aa:88:f6:b8:81:55:52:09:f3:9c:9e:28:17:67:98:
5c:0a:b9:d6:f6:7c:fc:a0:7f:09:04:00:d8:51:fa:
a6:90:af:e3:b7:ad:48:8b:3a:45:c2:8b:22:65:20:
7c:34:20:2b:aa:b7:61:29:7d:e9:b0:18:97:cc:d7:
93:16:8e:a6:fa:41:3b:76:dc:31:be:8d:77:88:94:
2c:b2:1a:af:bb:c9:ba:6e:f4:42:e0:0d:52:40:19:
e9:0d:37:19:d5:12:6a:6a:be:aa:eb:14:45:99:75:
c9:85:10:ef:23:43:a1:78:5b:76:29:84:2c:62:45:
e9:be:ec:87:6d:9d:bc:3c:8a:5f:96:3c:a5:34:a9:
c5:b6:0a:c4:c7:eb:5c:9e:a0:92:48:59:a7:9f:ba:
96:db:31:69:fb:84:fc:39:16:5b:98:20:1a:22:da:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:5C:D3:8F:C4:6C:37:BD:4A:DB:C6:5C:D2:C7:C8:63:4D:87:33
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b2:f5:75:4d:c7:85:87:10:65:7f:b9:e8:ef:65:6c:13:8b:
8e:4b:63:85:41:48:25:cf:2d:5f:64:1d:54:eb:ab:1c:46:7f:
81:10:cd:67:47:ab:ca:a2:d8:0e:1e:9d:e3:7b:17:95:c9:c2:
72:70:af:b2:37:97:01:8e:54:4a:26:ab:21:d5:33:64:e5:0f:
7c:a0:ed:c2:a4:89:32:87:6f:3d:e8:ec:e8:63:60:9a:ad:76:
4f:c2:55:84:6f:af:ed:51:33:3c:be:e7:72:db:c4:9d:b7:c4:
cc:c3:61:4e:9e:ac:1f:4a:80:ef:01:77:c8:88:ac:13:ee:e5:
2d:fa:3b:01:e9:85:93:4b:3c:dc:6b:a1:7f:56:cd:24:4c:29:
67:6d:56:0c:76:a4:17:c5:62:eb:2d:61:ed:e6:76:ad:3b:19:
9a:92:f3:8e:77:4b:d6:e8:93:dc:4d:fb:40:32:01:e8:74:72:
0d:3a:d5:c9:c0:05:b4:66:68:c2:1a:7e:03:1b:50:55:cc:af:
d2:b5:22:9a:1a:c7:d7:b2:f9:ff:52:55:8e:5e:f3:59:5f:6c:
9c:6a:7d:e2:c4:be:ab:ae:f7:c3:9a:6b:49:dc:30:7f:c2:86:
0c:b4:06:06:38:ac:9a:85:bd:09:82:cf:94:c1:3c:ef:37:65:
eb:32:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:33:19 2025 by rpki-client