Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier: 2GMP6epscOGVLAjXobuL3GCbD03CmNRSWPSeA63xYk4=
Subject key identifier: 86:05:6A:11:A4:76:03:D6:F4:88:0F:64:B8:33:A0:D7:E7:31:B9:04
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer: /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial: 0196C34BEA7111E2FAC4120DCF2B8C0B44DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number: 0C1A
Signing time: Mon 12 May 2025 07:00:54 +0000
Manifest this update: Mon 12 May 2025 07:00:54 +0000
Manifest next update: Tue 13 May 2025 07:00:54 +0000
Files and hashes: 1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: 5RJKBHD+amDSWuP0yW1ZB/TE7P4sdnMgBHe836UveIc=)
2: iP-SKYMlS2lzoYdf9k-IY95BiIU.roa (hash: y3r4nf2YS5R0GgEpIX4QQg5XE7ABIRh22yt4DkGX/UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:ea:71:11:e2:fa:c4:12:0d:cf:2b:8c:0b:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Validity
Not Before: May 12 07:00:54 2025 GMT
Not After : May 13 07:00:54 2025 GMT
Subject: CN=86056a11a47603d6f4880f64b833a0d7e731b904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:66:1c:f7:b5:01:b3:fb:d9:17:a5:66:06:bd:
e6:72:54:38:75:8e:eb:c3:dd:5b:41:fd:17:41:fe:
e3:37:55:a6:94:d9:29:5f:34:4d:6b:21:ef:63:5d:
27:cd:9e:4d:d1:fc:79:bc:31:69:34:a4:46:ec:8e:
ac:da:9a:a6:5c:5f:e9:3b:31:93:ac:d9:f8:1e:e5:
1a:29:45:d4:ea:5c:fc:f4:79:0c:0d:d4:e6:99:5d:
20:c6:82:8a:e1:b3:ea:8f:45:2b:c9:58:37:84:ac:
27:56:30:08:ac:60:9e:60:ea:0e:d8:f6:63:23:af:
36:3e:9a:81:53:25:a1:55:96:2c:c4:37:32:9d:ff:
81:87:26:99:4b:56:b6:d8:f1:1c:86:0d:a5:77:57:
dd:60:98:a3:38:5f:0a:ca:20:00:d9:98:a3:cb:41:
aa:80:ae:51:c9:ad:3a:91:79:71:51:37:e7:0d:30:
9d:94:a8:a9:d6:ca:fd:ca:ee:34:ee:48:81:91:43:
cd:75:fe:e5:72:33:db:a3:10:9d:ac:6d:b3:59:95:
88:a0:71:a8:17:77:54:92:ab:29:8d:dc:30:a4:62:
3b:71:e2:b9:36:ec:ac:77:47:57:a6:ca:3f:ad:aa:
8b:f7:b1:18:9d:f5:2c:0e:84:11:bf:61:5c:40:09:
07:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:05:6A:11:A4:76:03:D6:F4:88:0F:64:B8:33:A0:D7:E7:31:B9:04
X509v3 Authority Key Identifier:
keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:46:63:e4:a2:f8:92:cc:b4:dd:97:f5:60:ca:63:4c:0c:28:
aa:00:55:db:9f:67:0a:7a:2a:73:82:d0:3f:a7:f7:16:04:c7:
54:fe:bf:0d:09:b2:0e:d4:07:81:e3:a6:4e:e1:26:69:ad:f4:
b6:bd:d6:e5:71:8f:cd:ec:ee:1c:5d:bc:63:c9:d7:09:8e:20:
1b:6d:27:d0:67:b2:e8:8d:a9:6c:b3:24:20:0e:f8:f3:0a:a4:
5c:ed:a0:c3:40:31:18:e7:09:22:c6:dc:29:6f:7c:0a:4a:38:
61:06:f7:c5:d8:e0:89:c7:1d:04:26:9f:ac:99:3d:26:5f:c2:
52:fa:f1:8a:96:e4:25:09:19:d1:fb:15:20:72:a4:7b:00:32:
6f:a0:a7:22:57:2f:4c:c9:8c:dd:89:47:ed:c0:53:37:35:24:
52:28:d3:5e:c8:c6:a2:e8:cd:bd:0c:62:f7:21:60:34:e8:3c:
54:b4:f7:0a:52:20:a9:11:d2:af:af:bc:19:7e:28:58:db:9f:
4a:a3:79:87:58:97:e3:ca:a9:11:a3:cb:2e:d2:a1:bd:40:a4:
3c:73:83:3a:86:3a:2d:8d:99:63:29:ba:a6:3c:31:e8:90:d6:
d9:d3:b6:3d:90:be:d4:8f:9b:17:45:f7:ad:d9:e3:8e:9e:1c:
09:93:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:42:19 2025 by rpki-client