Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: zOSkLwh0tMZX1L88wrh+6ioT+Lg1guE8ccmkALFYuCg=
Subject key identifier: 35:CA:03:91:EE:D7:B0:CA:02:79:F3:26:7E:64:B7:0E:1D:A0:6F:AF
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 0196C917744293310C763E14E3E0D15ADF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 05FB
Signing time: Tue 13 May 2025 10:01:19 +0000
Manifest this update: Tue 13 May 2025 10:01:19 +0000
Manifest next update: Wed 14 May 2025 10:01:19 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: Ibk02+/Or1hY5CV4zKqyHCNDDRPEx1darScXQW4c4JM=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:74:42:93:31:0c:76:3e:14:e3:e0:d1:5a:df:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: May 13 10:01:19 2025 GMT
Not After : May 14 10:01:19 2025 GMT
Subject: CN=35ca0391eed7b0ca0279f3267e64b70e1da06faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:a6:f3:90:3c:08:2e:6e:3b:ec:9f:c9:ce:
36:f3:93:34:09:fb:95:4d:ff:56:6c:94:dd:54:32:
82:0d:6e:08:09:33:bc:83:02:8c:dd:43:14:60:d5:
18:ed:07:21:6c:b1:1f:01:82:f0:22:4e:46:8e:bf:
4d:cc:2e:c2:17:fb:77:75:ff:0b:7a:a9:b7:05:67:
c2:e6:13:7e:e5:3a:e9:09:99:af:25:2c:1a:0d:f1:
cd:9b:5a:65:ae:2c:32:53:9c:2a:a6:7a:ad:57:6f:
31:dd:84:4b:df:7d:68:aa:14:c1:d2:22:c5:de:94:
ea:9d:0a:06:a0:63:59:84:fe:df:e2:23:f6:b8:a0:
0b:9b:03:ca:61:c7:8f:c5:cf:1b:1a:e6:f0:00:1f:
98:a0:ff:b5:71:92:c1:0b:8f:3a:75:ab:35:d5:71:
a5:2c:76:14:bc:d4:d8:4d:a3:2a:ab:f9:db:14:49:
5d:3c:8b:b7:4c:ee:c9:62:72:a5:15:04:a5:55:a9:
8c:d4:6f:bd:d6:e1:8c:9a:97:67:eb:90:4a:2b:2c:
18:2c:34:22:13:8f:a9:86:ed:f0:51:f7:1a:e8:c5:
20:46:de:4a:58:3b:df:ec:56:e0:8d:cf:df:f8:ce:
94:78:a2:2b:e6:7c:6d:89:17:58:1c:88:73:97:29:
fd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:03:91:EE:D7:B0:CA:02:79:F3:26:7E:64:B7:0E:1D:A0:6F:AF
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8e:24:fc:cd:62:b9:33:3d:73:e1:1c:21:a1:8c:67:69:e2:
a2:8a:07:b2:31:83:ba:bf:77:72:11:67:9f:99:e4:09:cd:21:
6b:5c:0f:63:30:51:6d:ca:9b:d4:45:38:8f:ee:08:d2:38:b8:
45:4e:82:91:ba:81:7f:e0:03:34:c6:8f:83:f8:b9:50:79:54:
87:a5:74:21:70:81:21:f6:d1:66:2c:10:48:8b:3a:12:1e:c5:
9b:c4:e1:07:b7:06:03:a1:bb:cf:a5:17:5e:3c:51:06:d5:d1:
9e:f9:ad:d7:72:ec:53:81:42:99:87:64:5f:80:c2:3a:c8:16:
56:f1:84:8b:87:e7:83:65:5a:1b:b7:d6:d6:bc:2c:62:32:f0:
d6:64:89:70:e6:13:aa:66:39:4a:b5:ad:88:92:a0:0b:d9:1b:
09:14:16:d5:d0:6a:4b:60:69:d4:ca:bf:7f:6b:59:c1:ea:5a:
45:7b:02:87:d8:8b:bf:e5:05:80:30:86:1c:bf:75:41:2b:bc:
f8:33:2d:67:23:6d:a5:1d:f5:9e:0f:4a:09:80:fe:53:e0:5a:
8b:86:85:26:3f:b1:f6:83:63:80:bf:dd:b7:9e:4b:da:fc:d0:
05:e3:2e:eb:a1:31:dd:73:d3:71:c8:5a:6f:7c:97:4a:da:b5:
c3:41:9d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:18:20 2025 by rpki-client