Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
File: z3F496AF-Td59GjTS628zBuc6lA.mft (raw, json)
Hash identifier: GnMsRSjdTNozyyp9lgt+mm485TJ8DWVnO2LPgKm8vfI=
Subject key identifier: 41:8A:D7:49:96:16:9B:86:DF:36:F8:D6:2F:1E:2A:7A:F2:0F:68:48
Authority key identifier: CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
Certificate issuer: /CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Certificate serial: 0196BE25B6C948D24F4D9BBFD5367958EB45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
Manifest number: 0DF2
Signing time: Sun 11 May 2025 07:01:04 +0000
Manifest this update: Sun 11 May 2025 07:01:04 +0000
Manifest next update: Mon 12 May 2025 07:01:04 +0000
Files and hashes: 1: z3F496AF-Td59GjTS628zBuc6lA.crl (hash: eQFfLJicREhXcnhXO+TJlCo1ZbiNylIYc4u5LLeI70k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:b6:c9:48:d2:4f:4d:9b:bf:d5:36:79:58:eb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf7178f7a005f93779f468d34badbccc1b9cea50
Validity
Not Before: May 11 07:01:04 2025 GMT
Not After : May 12 07:01:04 2025 GMT
Subject: CN=418ad74996169b86df36f8d62f1e2a7af20f6848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:d7:8f:c5:ef:11:a2:6e:8f:e1:91:88:f7:
d3:28:c0:23:85:14:bc:cb:02:46:a2:4d:1c:76:14:
dc:d9:99:9e:c9:01:9d:46:8a:6b:2b:d7:50:86:86:
33:92:60:2a:d8:39:e5:12:87:27:d4:b6:fd:0d:45:
45:2e:e0:f4:a8:43:0d:e1:db:03:f8:c7:df:b8:b1:
b9:5b:ac:28:bc:22:52:4d:ad:77:e3:f3:d8:3d:a3:
7d:4b:31:88:c5:fc:b1:03:05:7d:1b:9b:c2:db:8f:
1c:4f:77:90:16:8d:91:7f:35:24:fa:a6:a8:23:95:
16:2b:dd:89:ce:85:26:db:bc:fe:0a:02:a0:73:9f:
68:61:f5:53:09:36:58:d2:22:c7:92:8c:44:00:9b:
74:09:5f:11:83:09:d0:a4:4a:47:6a:f3:c1:7e:4b:
3c:6b:d8:57:de:74:0b:54:73:e7:12:34:1e:74:fb:
9a:88:08:d9:64:c0:8d:5b:c9:e9:37:45:db:f0:6e:
c3:97:fa:88:19:bf:99:6e:4f:44:d7:84:12:5d:b3:
69:c8:7e:e4:48:c2:92:dc:80:04:34:16:64:e8:d0:
ac:c8:b4:b6:d0:6c:20:b3:f3:d2:c9:b5:55:e7:6e:
09:b0:f7:6b:98:f1:0f:c5:57:26:53:ca:a0:71:64:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8A:D7:49:96:16:9B:86:DF:36:F8:D6:2F:1E:2A:7A:F2:0F:68:48
X509v3 Authority Key Identifier:
keyid:CF:71:78:F7:A0:05:F9:37:79:F4:68:D3:4B:AD:BC:CC:1B:9C:EA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3F496AF-Td59GjTS628zBuc6lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/259bea-2931-4de0-be42-5a3d8f0ecbfd/1/z3F496AF-Td59GjTS628zBuc6lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:4b:67:2e:ce:d6:d1:46:e2:a5:ab:29:93:4d:54:38:2b:89:
70:7a:fb:cb:19:96:55:69:a6:17:0c:14:e5:1f:a3:91:85:5e:
4b:01:22:47:60:2c:e6:d7:b4:a3:56:b1:ba:4e:b9:13:8c:c6:
54:64:ec:33:c4:fa:67:0a:0e:04:cf:cb:e7:d1:cc:3c:99:33:
76:ad:c8:7c:61:fd:5c:7b:f7:90:78:cb:da:3a:94:e5:a4:d1:
c0:c8:0e:b3:e5:88:4b:a3:16:d3:f7:38:e4:17:00:1f:52:90:
17:06:ff:63:56:04:5d:8a:27:54:13:7b:51:99:b6:b3:41:b4:
89:9f:51:8f:ce:27:ff:d8:59:9a:79:9b:1a:6a:9f:4a:56:11:
2a:4d:dc:7c:46:9b:d0:b9:90:b8:10:89:6e:71:4b:4b:89:68:
01:8c:fb:72:3f:11:65:e5:ad:fd:67:50:a2:7d:b7:c8:c9:9c:
eb:6f:ca:19:2a:a9:8e:92:66:f4:1e:cc:c3:f8:ab:f4:fd:b3:
d0:f5:b2:9c:f9:90:4b:09:83:d9:bf:c7:ed:f4:7f:a8:76:0a:
89:74:6d:42:21:18:91:2b:7b:4e:59:ba:e3:fd:e4:5a:93:be:
08:f5:69:5b:21:cb:7a:52:ff:0d:76:ad:48:eb:32:d3:e3:8a:
06:9e:9f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:48:46 2025 by rpki-client