Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: qRngL5NvOLAIGEjkcm/8XTc3R5bsC+P/QnghgDhmPIY=
Subject key identifier: 85:3D:46:B6:CB:31:E2:F6:F2:9B:80:B3:B1:EC:14:2D:C5:A8:0C:15
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 0196A19B00F47C4FC0A20635B3378ABAF48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 078A
Signing time: Mon 05 May 2025 18:00:12 +0000
Manifest this update: Mon 05 May 2025 18:00:12 +0000
Manifest next update: Tue 06 May 2025 18:00:12 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: 2Oa4+8oGOpMbuGTkbHGauRCd9q/QGOUZ3pTNphq2SpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:00:f4:7c:4f:c0:a2:06:35:b3:37:8a:ba:f4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: May 5 18:00:12 2025 GMT
Not After : May 6 18:00:12 2025 GMT
Subject: CN=853d46b6cb31e2f6f29b80b3b1ec142dc5a80c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:23:e5:11:7f:99:f4:14:6e:97:7c:74:fa:65:
1b:af:d5:b2:98:bf:ec:96:d3:99:68:ab:43:3e:27:
16:e8:7d:dd:0d:b0:fb:3a:7d:e0:43:cd:90:30:83:
ee:70:92:1e:07:8f:50:7c:a1:08:18:b5:cd:a9:a3:
a6:2f:d4:6c:ef:4f:bf:ae:d8:0b:d7:39:85:66:df:
31:e9:a4:47:14:86:83:e3:ef:3c:40:18:4b:49:74:
1e:df:6a:d3:6c:f4:c5:83:5e:07:4a:20:e1:34:eb:
a2:aa:34:0d:12:36:a1:40:f6:e6:f4:55:69:c1:96:
9f:aa:70:4f:e4:56:3e:8a:50:42:00:5a:e1:57:4d:
56:db:69:6d:2e:b1:4b:5d:29:f8:ab:61:be:40:f5:
e1:ea:dc:60:f7:10:42:85:6b:25:8a:83:38:12:50:
57:96:e4:af:3c:f3:49:27:ea:55:5e:2c:a7:f2:4d:
0a:f5:63:0c:a8:05:d4:f6:c8:03:67:d6:c7:f9:2e:
ce:89:53:46:ef:6e:f7:e4:f0:0e:9b:ef:db:20:e9:
b4:55:65:f5:81:13:4d:e4:87:06:28:40:b0:f5:2d:
81:1f:b6:b4:cc:ca:68:b7:65:dc:94:5c:25:9a:70:
d8:6f:80:03:22:fd:c3:51:fc:1e:aa:06:e7:b4:c8:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3D:46:B6:CB:31:E2:F6:F2:9B:80:B3:B1:EC:14:2D:C5:A8:0C:15
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:73:ac:9c:ac:c0:84:53:8b:7f:52:41:14:ed:90:e4:95:89:
eb:79:a9:c9:6c:53:03:64:b9:ee:60:a1:82:e5:b2:1a:4c:77:
c6:a2:c7:85:e1:bd:cb:cf:74:4f:f4:7d:2d:3d:50:41:3a:56:
01:51:fd:e5:4e:60:f7:65:f0:9d:45:e7:d8:e6:99:1e:4b:e8:
3a:8a:f4:2d:3f:02:0d:12:9a:18:6b:8e:94:18:01:b2:b8:8a:
66:b0:18:a3:af:2a:d7:c4:15:ab:2e:fc:d2:07:8b:55:75:02:
88:a4:09:44:2b:f7:d5:c1:e9:85:69:aa:97:18:cb:38:c1:87:
7e:ad:ac:42:e4:ba:ee:22:8a:e0:e7:a5:72:2c:5c:c6:db:7b:
06:04:44:9b:1d:ce:9b:19:d5:a2:4f:12:70:4e:64:3a:63:6a:
c4:f0:a8:2d:00:99:ff:20:28:05:5c:77:29:17:83:f4:88:5f:
f1:28:0a:38:bd:f3:db:f0:c3:ed:aa:34:bf:20:f8:22:af:ec:
da:de:21:6b:2c:58:14:cd:c1:27:c3:e0:78:41:15:3c:32:cd:
2c:cc:12:c9:0e:ee:78:2d:4f:af:74:ef:de:c9:2d:57:48:b9:
46:48:27:18:f7:c7:32:e6:33:56:6d:26:59:d8:24:ce:1a:bc:
bf:59:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:57:46 2025 by rpki-client