Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: HY/MIBPYLkxHhtYZEVDvgghQr3K81QqLBT2IovvubL8=
Subject key identifier: 11:07:6D:83:C0:DE:2D:DB:A5:DA:FD:39:A6:41:E5:5E:5B:CE:20:B3
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 0196BD49394AF6AF1F04FB2C4FF72F9DE36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0A95
Signing time: Sun 11 May 2025 03:00:14 +0000
Manifest this update: Sun 11 May 2025 03:00:14 +0000
Manifest next update: Mon 12 May 2025 03:00:14 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: NRDzrp3n/OphSNw1dPjIH6ICodEYuWG672e1vPOOHEk=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:39:4a:f6:af:1f:04:fb:2c:4f:f7:2f:9d:e3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: May 11 03:00:14 2025 GMT
Not After : May 12 03:00:14 2025 GMT
Subject: CN=11076d83c0de2ddba5dafd39a641e55e5bce20b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:6e:da:d3:49:32:49:1b:5a:98:96:e3:b0:
95:e4:d1:c7:2f:17:ef:1d:a4:2f:55:52:cd:4f:44:
54:8e:2b:d2:ac:11:b7:5a:44:d9:a1:0c:6a:e9:03:
e7:37:55:64:f7:87:2d:60:2e:18:46:ee:ff:48:ab:
a8:1f:72:59:0f:6b:04:38:48:1e:48:ea:d9:86:c5:
70:cd:22:62:c2:22:c2:c2:89:28:2c:3f:2a:c0:08:
aa:22:80:8d:b1:43:9a:51:a9:fc:c0:59:95:78:9a:
a4:14:04:a0:d6:9f:14:4c:fd:5e:9f:4c:b7:7c:8a:
ab:55:24:cc:45:ed:3b:a7:55:0b:b6:08:8b:08:af:
4f:fb:85:0d:30:c1:77:d8:3b:33:85:6b:d9:48:57:
74:b3:fc:2e:19:ff:02:c2:05:36:5b:f2:76:0e:27:
da:82:e1:58:25:5b:14:f6:3f:65:4e:0a:38:10:f7:
0b:96:89:7c:6f:33:f3:25:a8:c5:0f:71:56:42:a5:
17:29:61:53:15:72:ec:00:e0:b5:ec:af:03:c7:20:
4d:2f:1c:33:5a:68:56:a1:8e:ad:f3:ba:4a:ea:59:
76:18:27:9f:c5:8a:f8:45:87:05:57:78:02:87:a8:
52:74:2b:2e:67:42:67:d4:bd:d5:59:76:fb:03:9c:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:6D:83:C0:DE:2D:DB:A5:DA:FD:39:A6:41:E5:5E:5B:CE:20:B3
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a1:4d:65:68:76:b8:ec:77:f1:aa:93:de:08:dc:6e:13:e7:
04:86:f3:df:66:77:02:4e:fc:8c:81:4b:64:75:09:0d:0d:45:
60:bb:fe:a6:8b:f3:fc:12:0d:75:ba:a8:3b:1e:05:07:e3:f9:
88:65:fe:25:13:9c:c1:d1:1f:5b:eb:62:a2:85:b3:c6:8e:3b:
3e:72:c7:f6:a3:4c:53:94:b3:db:9c:86:fa:63:e4:cd:6b:51:
e8:9d:a2:28:4c:03:14:5f:39:28:79:db:18:4e:4f:60:bc:b4:
45:42:3e:3b:2d:c9:71:06:17:60:60:6b:ec:a0:27:b5:f7:ca:
08:91:48:2e:55:b9:ec:92:75:8b:70:ec:cb:aa:4d:eb:5c:20:
e4:0e:d4:88:55:50:b6:39:2c:6f:d8:26:a6:8e:dc:50:02:33:
d0:87:b1:ec:69:e4:b9:59:56:cf:da:ed:68:76:68:58:5f:ec:
41:27:02:e5:b7:25:1d:8d:d1:36:f3:35:48:b6:2d:32:0b:d4:
93:3d:d3:46:8e:6c:36:c5:8a:12:1e:01:1f:ff:f1:8e:8b:79:
d0:57:80:2c:9d:26:21:fc:2d:b4:57:bf:14:c1:86:84:07:f9:
6a:5d:43:ca:3c:52:b8:83:d7:02:e7:14:99:5b:3d:9d:c5:fc:
a3:18:83:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:10:40 2025 by rpki-client