Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: Ku+JhEL9kAy1ewZ5JFwdlZsubeEfRnMcFKhUKQuGVVU=
Subject key identifier: 67:78:81:4E:15:29:30:26:A0:25:40:11:87:01:85:A2:85:65:3D:15
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 01969E9AEF87743BF1A3B042DA1A5AA94F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 02E2
Signing time: Mon 05 May 2025 04:01:16 +0000
Manifest this update: Mon 05 May 2025 04:01:16 +0000
Manifest next update: Tue 06 May 2025 04:01:16 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: kg8eCu+A4E+XJkkRRiPMYMbHvmxsB/bD3qNgigjsXGI=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:ef:87:74:3b:f1:a3:b0:42:da:1a:5a:a9:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: May 5 04:01:16 2025 GMT
Not After : May 6 04:01:16 2025 GMT
Subject: CN=6778814e15293026a0254011870185a285653d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:58:15:e5:a3:23:10:d7:aa:31:2e:f9:32:21:
7e:00:b7:dd:0d:e9:f9:15:15:13:c4:d3:61:d0:e8:
99:fd:43:00:72:7a:bb:75:d7:55:13:e7:ae:ce:51:
d7:23:67:97:11:f3:9e:98:e9:75:15:7e:31:c4:54:
11:50:3e:e6:a4:90:40:c2:2d:47:60:c6:41:fc:51:
58:be:4a:9c:50:8f:1c:2b:2c:db:07:aa:62:3e:e5:
94:46:0c:aa:c9:d6:68:99:11:66:5e:2b:41:89:9c:
1d:cb:fa:7e:eb:fb:73:5e:d3:80:86:1b:e7:bc:56:
6a:13:96:87:a0:a6:8c:27:f5:c8:01:5a:bc:cc:d1:
8b:36:91:98:42:56:8a:9f:f3:9d:e7:d6:d2:4c:a2:
08:6e:86:24:12:28:88:58:5e:60:bb:66:88:19:ed:
77:12:66:47:99:51:dc:3c:29:56:0f:51:2e:01:8c:
32:eb:b1:b4:56:73:2c:cc:7f:36:91:67:64:b6:a2:
20:4a:5b:c0:a3:c5:a5:18:1b:6d:4c:31:9a:d0:d5:
c1:e6:8d:44:80:87:86:9f:d2:71:fc:e1:5c:8e:3c:
ad:e1:28:04:18:a0:58:51:ed:7d:95:d8:71:05:14:
0f:a6:18:35:60:e5:08:3e:ea:9e:4f:5b:1d:bd:8c:
32:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:81:4E:15:29:30:26:A0:25:40:11:87:01:85:A2:85:65:3D:15
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:71:f4:2a:4d:4f:19:40:5b:3f:52:b2:74:e5:46:a9:eb:47:
40:a1:36:65:55:07:7b:a2:04:62:b1:bf:fc:84:b8:c3:2e:47:
f3:e0:db:ed:7e:29:e0:1e:78:ea:9e:27:52:4a:a1:cf:3f:af:
ef:9f:7b:ce:65:ce:d2:da:00:b4:4c:9c:9b:c0:f4:93:8e:6a:
93:59:e8:32:7f:d8:f5:53:7b:ab:fc:00:ba:00:06:d2:e1:1b:
04:c2:29:6b:29:c4:ac:57:82:cc:64:60:de:c2:9f:4f:db:fb:
d4:7f:7c:ae:c5:eb:05:d9:34:a4:6a:42:8f:3e:df:fd:5e:bf:
d9:f8:5f:17:f2:38:39:b7:68:71:06:90:5d:71:4f:24:ca:99:
b8:25:c3:f9:db:a8:9e:06:18:c8:bd:ed:5b:14:4c:d0:db:81:
89:51:a5:db:c7:d5:90:38:ef:ca:ac:6f:60:cd:a5:cc:a2:5e:
4a:39:75:f6:66:df:91:2f:da:c9:a4:7d:a0:f6:88:69:50:9c:
4b:d0:86:69:9b:14:a0:dc:b6:62:a6:e3:f4:62:b2:69:a2:84:
58:1b:dd:c2:19:80:56:63:be:9d:48:23:99:04:b8:bc:bf:a4:
90:05:57:5e:ac:ae:f5:43:75:b8:a5:0f:72:e2:1e:44:af:6d:
0a:a6:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:45:31 2025 by rpki-client