Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: 5A+dL/L9jPQYQBtxanSkJ1vkcdEotp+Dcbsi46JNHbU=
Subject key identifier: 4B:A4:83:55:45:67:C6:56:49:73:87:9C:3E:AB:40:A1:ED:AA:4F:C2
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 0196BA489D2950A020463A56E1BB486E20F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0B39
Signing time: Sat 10 May 2025 13:00:43 +0000
Manifest this update: Sat 10 May 2025 13:00:43 +0000
Manifest next update: Sun 11 May 2025 13:00:43 +0000
Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: kVC76r1PpnFd2eqKp/zQ7BTalKgb7x9XwXmTavBIaLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:9d:29:50:a0:20:46:3a:56:e1:bb:48:6e:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: May 10 13:00:43 2025 GMT
Not After : May 11 13:00:43 2025 GMT
Subject: CN=4ba483554567c6564973879c3eab40a1edaa4fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:db:76:4f:ca:6b:01:63:ad:36:a5:71:12:
5f:7b:1e:7b:20:30:4d:fb:9d:14:f2:33:67:cf:f5:
65:4c:41:ea:08:c6:7d:08:b1:4c:22:d7:d9:41:4c:
c6:0d:fd:30:75:b6:1c:05:a6:57:6b:5f:34:12:4a:
c4:99:13:06:4a:c5:c4:19:4d:46:0c:a8:06:c7:3e:
42:53:37:70:14:6d:f6:71:57:dc:3d:a0:e2:b0:1c:
dc:e7:65:6c:39:96:c5:e2:2c:02:76:4b:98:9a:54:
2f:67:98:81:c0:55:da:42:cf:08:ba:1f:01:da:50:
ec:a4:f7:e0:20:f0:22:25:bd:1b:3d:32:80:a8:25:
40:72:15:bb:34:bf:d0:bf:a9:e8:70:a4:49:61:d5:
c0:7d:c9:54:91:83:a9:39:98:0b:ac:7a:15:64:e6:
7a:75:90:b9:80:27:8b:42:a0:c4:f1:d4:d0:3e:67:
05:0a:04:64:42:76:6d:a7:7d:cf:f9:30:0d:55:89:
ef:0f:73:f0:db:bf:9b:df:48:0d:eb:eb:fc:08:b7:
c0:c9:46:b7:e9:c0:ae:13:d4:5d:bb:c9:8f:71:78:
48:94:49:82:15:0b:4f:8d:88:62:70:41:e6:1f:00:
e3:72:67:33:5d:6c:55:ff:66:f9:db:33:b0:3b:a5:
2d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:83:55:45:67:C6:56:49:73:87:9C:3E:AB:40:A1:ED:AA:4F:C2
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ce:72:c9:53:f3:c0:f4:b3:62:75:ac:24:2a:89:7e:06:1e:
c9:38:25:30:32:32:ce:71:72:c2:a1:0f:14:6d:56:6f:17:b4:
8a:a1:77:41:c6:50:21:01:d0:ee:c8:86:38:81:c8:73:c6:a9:
52:6b:77:36:d2:0c:32:2b:e2:6d:39:ee:ca:be:38:1b:da:b7:
73:e6:c0:3b:c7:fa:78:90:ff:f7:8c:bb:8e:9d:6e:30:b1:09:
97:e0:6b:c4:45:8d:ca:52:3f:fb:e4:3b:67:97:5b:93:af:51:
b8:27:5a:25:be:d5:e4:ca:b3:64:ce:4f:73:be:29:ec:9a:c3:
89:a6:47:e5:dc:9f:a1:b3:22:6a:52:f5:ef:26:b8:39:35:99:
9b:68:27:23:27:81:60:70:94:53:70:9e:37:ee:cc:a5:96:65:
02:22:5d:e4:49:35:fc:ea:2e:47:87:83:58:fc:47:68:ef:99:
a6:3d:7c:17:74:03:a1:be:2c:29:cd:16:2a:9f:66:b4:7a:e7:
48:af:5f:04:67:fa:e9:05:a7:d7:23:66:4e:2b:81:e5:6c:ac:
bc:55:50:23:f2:cb:b4:74:ae:5d:8b:b4:30:c2:55:fb:71:01:
73:8a:f6:09:f2:cc:52:a4:3e:e3:a8:8f:f2:c7:55:2e:6e:ab:
40:15:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:28:22 2025 by rpki-client