Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
File: 1ZVssui7tNQpco4B4g_TyOBfMyg.mft (raw, json)
Hash identifier: L1sPH75vIq8IWtswte9DRbjMx6Cf3fR+WGYJMlwalA0=
Subject key identifier: EE:72:6E:B7:78:01:72:A3:96:21:AB:0F:C5:F4:AF:5F:FB:2E:45:AB
Authority key identifier: D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
Certificate issuer: /CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Certificate serial: 0196BF00F06B5F234149E319D8D88F4EE312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
Manifest number: 04A0
Signing time: Sun 11 May 2025 11:00:31 +0000
Manifest this update: Sun 11 May 2025 11:00:31 +0000
Manifest next update: Mon 12 May 2025 11:00:31 +0000
Files and hashes: 1: 1ZVssui7tNQpco4B4g_TyOBfMyg.crl (hash: P4dwk1aiUbjnsZBDKgo8t2xnaNN5uz5eXarVtuW+0yE=)
2: oZt6wOeBPRzgxfrSHyQvaXZ61CE.roa (hash: 0c3+xTwK5KGYXpDaZhmc1MdZZB2Ym1lrAvZHlgXOKE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:00:f0:6b:5f:23:41:49:e3:19:d8:d8:8f:4e:e3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5956cb2e8bbb4d429728e01e20fd3c8e05f3328
Validity
Not Before: May 11 11:00:31 2025 GMT
Not After : May 12 11:00:31 2025 GMT
Subject: CN=ee726eb7780172a39621ab0fc5f4af5ffb2e45ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:13:51:21:c7:c1:7c:c5:ef:1a:13:b8:09:
df:23:d3:63:06:d9:f3:39:e1:69:54:dd:c3:47:8b:
bb:b7:c1:2a:8e:57:3e:dd:43:b7:2e:fd:ac:a9:ef:
c7:9a:fc:ef:a1:eb:b0:13:51:20:55:f6:d0:93:7a:
bc:20:9c:5f:d3:71:fb:ce:92:48:1d:77:15:ed:f4:
cf:02:f4:98:19:60:f5:05:5a:1b:9b:72:29:96:8c:
d9:ad:f5:d4:06:da:da:16:ba:c8:cc:dd:cd:66:52:
db:a8:ae:20:e4:90:37:76:67:ef:fa:d0:22:33:0b:
54:de:21:28:11:15:93:b9:75:64:87:25:76:08:ff:
17:90:5d:4d:72:c3:75:19:c1:e7:5b:68:de:f4:72:
81:21:61:91:b9:0f:f7:d5:fc:cc:3d:fc:f3:78:35:
6f:d5:68:ff:9a:d3:21:e6:2e:db:03:b3:19:6d:51:
3d:4c:58:fc:93:09:78:c1:cf:b8:a1:60:54:9e:af:
b4:85:07:1c:aa:2e:30:c4:85:ec:a2:08:d3:91:43:
30:c1:f9:52:d6:0f:17:a0:ec:d9:ca:6e:28:df:a3:
64:2c:d5:a3:64:39:23:53:61:e3:0d:48:fb:ea:0a:
9c:ec:81:6f:e8:6c:81:9e:86:09:bd:ae:50:8f:f0:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:6E:B7:78:01:72:A3:96:21:AB:0F:C5:F4:AF:5F:FB:2E:45:AB
X509v3 Authority Key Identifier:
keyid:D5:95:6C:B2:E8:BB:B4:D4:29:72:8E:01:E2:0F:D3:C8:E0:5F:33:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZVssui7tNQpco4B4g_TyOBfMyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/cba718-aa73-4d37-9a04-98dabe3e2662/1/1ZVssui7tNQpco4B4g_TyOBfMyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bf:b9:df:1e:35:94:63:fb:f0:e0:7b:9f:fb:87:87:66:54:
da:08:46:6f:95:7a:6b:7f:4c:84:62:21:09:95:06:12:f8:2a:
bc:8d:33:b8:a3:06:aa:61:ad:6a:e5:31:2a:88:4a:01:6b:2a:
b9:44:84:15:ac:0a:5f:a5:77:e5:d0:9a:f4:ef:6f:3b:03:a0:
d2:1c:19:e0:bb:62:64:c0:f3:3b:da:54:4c:f0:55:a2:aa:0c:
9a:94:25:7f:32:d1:df:3f:2a:4a:2f:65:21:7b:3d:98:33:7d:
00:bc:fc:73:b5:69:60:57:d9:c7:fd:4e:d6:85:ab:1b:44:16:
d8:2e:a2:6c:56:49:49:e6:aa:29:19:76:99:2f:c9:b9:d2:e2:
18:7b:ac:a1:25:29:b1:74:49:85:fa:bc:e1:c1:08:90:1b:b1:
e6:f1:d8:bd:81:06:9a:84:e7:aa:fb:4c:8b:07:6c:01:f4:f0:
3d:e3:6a:92:f9:1c:c0:b7:63:b6:c7:f9:f5:b2:9e:05:ae:8b:
9b:ac:8e:c0:e7:9f:b3:39:49:b1:fe:cc:65:b0:14:54:0c:4b:
8b:7b:7f:2f:e4:31:85:1a:21:6c:2c:3c:64:06:7b:f6:d3:14:
dc:67:d3:14:85:f6:de:5a:83:b3:f6:7c:f1:a6:b7:aa:66:12:
3f:8d:0f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:37:27 2025 by rpki-client