Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
File: zR5W5MTEpRjyOIpay1rwRSzCpZU.mft (raw, json)
Hash identifier: oCIwPl+TGDa4ZMqhRd6cz0+RldS/XrMv+CMmAPHG1QE=
Subject key identifier: 92:CC:D3:2A:26:25:C5:1A:17:81:E9:17:27:FE:55:9A:D3:4F:C8:D2
Authority key identifier: CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
Certificate issuer: /CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Certificate serial: 0196AEB2597EAF943C0BDA4EF7709D01FAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
Manifest number: 0CF4
Signing time: Thu 08 May 2025 07:00:45 +0000
Manifest this update: Thu 08 May 2025 07:00:45 +0000
Manifest next update: Fri 09 May 2025 07:00:45 +0000
Files and hashes: 1: ke5imTlr7fT0_-DE8h9O78Ggh4s.roa (hash: 05xyuy/re9IJXLD81+YTPEcHrtJ82VFe2mcpWEaKIAc=)
2: zR5W5MTEpRjyOIpay1rwRSzCpZU.crl (hash: HzKGYN8bhvsRiP/AYebIPxu+xFBxx6wZXqPbAy9LO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:b2:59:7e:af:94:3c:0b:da:4e:f7:70:9d:01:fa:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1e56e4c4c4a518f2388a5acb5af0452cc2a595
Validity
Not Before: May 8 07:00:45 2025 GMT
Not After : May 9 07:00:45 2025 GMT
Subject: CN=92ccd32a2625c51a1781e91727fe559ad34fc8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:40:5a:aa:22:67:e9:2c:33:85:dd:a8:e6:eb:
d0:02:3a:0f:bc:66:a2:7d:75:1a:24:4b:ea:65:b7:
95:65:66:cc:60:9d:35:20:21:ad:10:be:b4:6c:64:
b1:53:8d:fe:ef:29:c9:d1:48:10:24:32:51:eb:3f:
ec:ff:8f:27:40:93:9f:8d:c2:8b:00:a6:1c:7a:79:
b3:8f:47:06:86:d6:71:af:c1:32:82:f3:23:30:5c:
f1:bf:25:e5:83:b0:22:e1:89:3b:b2:45:a8:9a:63:
89:27:37:56:a9:0f:12:05:64:29:f8:42:31:3a:0d:
bf:7d:af:3e:5f:da:88:13:7a:0e:b5:d9:f3:5b:df:
63:75:1a:e7:75:08:87:cc:c3:2a:66:db:ad:55:6e:
d8:b7:db:88:6c:49:f8:13:51:ad:0a:b4:fa:be:a2:
69:6a:5c:ae:a2:c7:49:5c:76:7d:97:22:70:8b:5a:
b1:bd:04:8b:f4:cb:5e:c2:0e:ae:9b:7c:78:93:7c:
c5:d8:df:70:2f:0a:08:3c:30:1f:98:33:07:63:98:
03:46:ff:0e:ae:0c:5b:3c:e1:f5:0b:3d:bb:56:04:
83:77:d4:e9:d3:47:31:62:a6:2d:df:0a:41:81:92:
c4:e2:b6:e6:54:24:a2:83:11:03:c8:b8:0b:0b:86:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CC:D3:2A:26:25:C5:1A:17:81:E9:17:27:FE:55:9A:D3:4F:C8:D2
X509v3 Authority Key Identifier:
keyid:CD:1E:56:E4:C4:C4:A5:18:F2:38:8A:5A:CB:5A:F0:45:2C:C2:A5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR5W5MTEpRjyOIpay1rwRSzCpZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c087e9-d11d-44a6-8c4d-2857f17037a1/1/zR5W5MTEpRjyOIpay1rwRSzCpZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:eb:59:11:a3:8f:05:11:ad:ce:0f:42:2f:8b:78:2f:56:97:
66:40:21:3a:de:0c:c7:06:ab:72:11:07:d4:5c:3b:61:f2:7a:
e0:4b:9b:d1:1c:74:ca:d2:11:b7:4d:26:19:2a:40:92:ff:f1:
63:6e:36:aa:bc:8a:c6:da:85:1b:49:ba:31:02:e6:b2:54:c6:
ab:5a:e8:2a:02:44:5b:6f:9b:f8:b8:2e:28:d8:7d:ba:0e:a4:
25:01:54:14:50:71:58:a7:c8:94:23:65:fc:ba:50:e4:63:26:
fe:ca:47:78:f3:82:bb:5c:54:74:46:4c:1a:89:86:4c:05:fa:
3d:fb:49:61:82:61:cd:5f:8b:ea:c2:c2:f1:25:c2:16:e0:a4:
43:eb:e5:62:a0:91:98:fd:18:1f:88:3b:6c:39:f0:c4:a0:96:
16:d2:fc:6c:0b:19:d1:47:26:52:8b:7e:2d:23:3c:0c:1f:95:
98:18:3c:17:ab:1a:9c:24:2a:b2:9b:3e:fa:d6:03:38:fb:61:
97:20:ca:12:64:be:f5:73:95:97:1f:51:6d:0d:46:f5:40:e6:
65:da:2c:9f:56:23:f4:64:40:db:1d:69:36:36:3a:94:27:48:
a6:ee:7c:ac:d4:dc:33:4a:1d:5c:f5:de:85:1b:c1:e2:ab:3e:
45:a1:86:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:49:03 2025 by rpki-client