Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: DLzf95WfjNzruJVE+quEqweEBdT5YSYmugqeHawoO+o=
Subject key identifier: 42:9F:83:88:FF:28:50:5C:B3:08:D3:E1:7A:5E:50:42:2A:3A:1C:B6
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 0196BF37FBDA3658B96B5317B7EDC7EFAEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 0D9C
Signing time: Sun 11 May 2025 12:00:39 +0000
Manifest this update: Sun 11 May 2025 12:00:39 +0000
Manifest next update: Mon 12 May 2025 12:00:39 +0000
Files and hashes: 1: yWwaX-C9O2Mkit2E4nlnb9d56-8.roa (hash: sDT2KmFAHGk7K/2LRL7JWVshbJE2mKFleisnOgV9U7k=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: ZAHXef1phy9ecjFNbFFn7vp+uMyYPReuQzPFWgicPts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:fb:da:36:58:b9:6b:53:17:b7:ed:c7:ef:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: May 11 12:00:39 2025 GMT
Not After : May 12 12:00:39 2025 GMT
Subject: CN=429f8388ff28505cb308d3e17a5e50422a3a1cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:91:8d:54:77:6f:10:9c:9d:15:66:d9:cf:
fe:7c:3c:f9:e8:96:2c:42:f2:a3:6d:4d:df:59:43:
9d:be:c8:06:2f:aa:af:43:19:d7:da:0b:07:46:1a:
d0:a5:6a:b0:b9:47:f8:36:83:30:23:00:a7:9c:ab:
22:67:49:7c:c6:8d:5f:9c:bf:60:4e:ab:7b:76:0a:
84:83:2c:8d:e3:f5:bd:ff:59:9b:dc:5b:3f:6e:55:
25:86:a9:62:5f:3e:c4:ba:e3:f3:2f:14:a1:5f:85:
51:fb:7c:a0:cb:c2:02:59:3e:f0:aa:9e:c3:61:9c:
aa:3d:1b:1c:b7:a1:e2:b5:f3:c8:ee:7b:41:56:1f:
61:ce:e8:0f:58:a3:05:92:9f:f5:4f:87:0b:84:8d:
82:f9:2b:73:0c:9a:91:8f:11:e8:7e:18:62:ff:6f:
7e:c5:6c:52:a9:57:eb:73:3a:69:17:ca:b9:21:7c:
b4:5f:0e:a3:e0:ea:79:02:aa:8a:e0:1f:60:71:62:
3f:1f:2d:1f:6b:77:fd:98:78:75:a5:03:6a:79:cc:
f1:24:6b:be:f9:7e:1a:68:08:93:c0:0d:a7:7a:d2:
96:8c:68:17:1f:5b:e7:5d:1d:9e:61:01:30:32:f3:
4c:88:7e:74:76:6b:2f:c8:26:a5:52:97:25:51:db:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9F:83:88:FF:28:50:5C:B3:08:D3:E1:7A:5E:50:42:2A:3A:1C:B6
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ab:c8:87:c8:9a:87:c0:a9:8d:46:64:ce:9e:87:61:a2:7d:
fa:70:b2:87:b6:e2:3b:d2:19:75:16:a6:c4:ec:cb:ef:c3:95:
22:c8:7a:b4:33:a3:be:fc:ea:2e:10:77:30:a9:c7:72:7f:03:
1d:9d:e5:e7:ab:70:6e:54:a0:2a:40:b2:ea:0f:13:a5:4f:1e:
c2:c8:02:58:9b:97:a4:c1:e6:e7:c7:2a:a1:f4:97:ea:3e:eb:
f1:41:3f:ec:d4:0b:5d:1a:d1:5c:38:a2:12:d5:1b:b2:c2:30:
39:95:1c:07:b4:d6:00:6f:7b:60:f7:48:00:58:ac:9d:3a:30:
25:9e:f9:6c:7d:0e:db:46:67:a8:d3:fb:7d:7e:55:c2:a9:e8:
3d:b2:4a:52:32:d9:d9:c6:40:2a:bc:11:e1:7c:7a:ce:aa:41:
ba:6e:35:33:3a:39:39:ca:f5:cd:13:7b:f9:77:f8:91:84:db:
5c:43:7e:c2:aa:86:34:dd:79:a0:81:83:d1:2b:5f:9a:05:dc:
c7:80:fc:d8:f9:84:a8:58:fd:b6:44:07:8d:3d:f1:11:a7:b0:
f1:60:0a:65:bb:27:4d:fe:09:63:6e:46:f0:7b:1e:d9:df:e7:
3f:31:a4:85:68:b7:1d:ea:11:2d:14:9e:58:b6:14:28:f7:45:
62:94:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:23:40 2025 by rpki-client