Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File: z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier: 5MfyKDDC19jvElITuNCZW2Fz5m9Af86wbhUIPEUzpns=
Subject key identifier: C9:34:61:BD:9D:FB:94:B6:55:0E:C8:96:DD:7F:99:7D:41:B3:C1:EA
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer: /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial: 0196BC3717B41FC84534446577001D44FCE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number: 0105
Signing time: Sat 10 May 2025 22:00:49 +0000
Manifest this update: Sat 10 May 2025 22:00:49 +0000
Manifest next update: Sun 11 May 2025 22:00:49 +0000
Files and hashes: 1: Mdz7gFP_KbOqqYubu7U76xBnbk0.roa (hash: jA9ulv112lR/bkdkG+34ufilO6znCYlwpUBfU78DlcQ=)
2: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: Hc1Wine5IClvMinV1mOmW/pDvVsr0yveDK/F1a5yaVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:37:17:b4:1f:c8:45:34:44:65:77:00:1d:44:fc:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Validity
Not Before: May 10 22:00:49 2025 GMT
Not After : May 11 22:00:49 2025 GMT
Subject: CN=c93461bd9dfb94b6550ec896dd7f997d41b3c1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:e5:15:43:93:db:4e:3b:af:0b:40:e5:db:
b0:d3:ca:76:33:51:8a:1f:16:18:d2:77:29:82:73:
1f:8a:50:49:83:d6:52:d2:70:b5:07:fe:27:76:11:
0f:6c:b4:9b:ad:66:6c:55:fd:e6:84:70:2b:87:6c:
ff:2b:6b:fe:b0:90:d2:a2:59:34:8e:6b:a7:82:47:
31:50:0b:e2:0c:7b:7d:e7:2e:92:1b:78:e6:52:b3:
39:fc:f0:35:05:d5:f2:24:cb:0f:2c:ad:af:6e:fe:
ab:ec:0d:5a:79:c9:ba:c5:b3:7f:69:50:f7:c3:e3:
36:85:eb:e5:43:9a:ea:28:29:51:20:e6:a2:88:8b:
b2:54:92:28:23:37:40:bf:92:32:b3:49:10:9e:e1:
3d:a2:a7:e4:82:3f:6d:46:a2:bd:e5:c5:57:ff:84:
cb:9c:3b:71:10:b3:e9:f0:e2:54:ab:b7:7f:5b:1c:
5c:dc:29:8b:b4:db:19:a3:be:e5:5d:68:cf:72:77:
1c:b1:07:b3:e9:c1:bd:4f:57:8d:0d:e0:a8:09:ea:
f6:52:4d:92:20:7c:8e:02:6a:63:6b:a0:cf:9a:6b:
e2:29:57:9f:a6:83:c7:be:59:31:96:da:2e:3e:d9:
22:3e:0d:6a:0d:75:70:83:42:42:d5:66:20:57:36:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:61:BD:9D:FB:94:B6:55:0E:C8:96:DD:7F:99:7D:41:B3:C1:EA
X509v3 Authority Key Identifier:
keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:23:81:bb:09:16:d5:bf:d5:4e:f2:26:a1:47:f0:4e:40:7f:
14:b0:a5:87:35:ba:53:e2:ea:83:2a:e5:d3:79:47:6f:66:c7:
b8:bf:dd:02:4f:c0:06:7e:27:34:39:17:0b:f7:aa:24:c2:36:
88:fd:db:48:a1:e8:be:46:25:a4:bf:cb:1b:b8:40:1f:6a:8a:
0a:fd:0d:87:b8:ee:6a:48:e5:09:a1:5a:72:22:34:e0:00:77:
49:4a:8b:6a:7f:27:bb:ff:00:91:b3:be:e8:18:1d:5d:ac:93:
2e:bd:88:ba:c5:2b:f8:98:f9:df:2a:a8:e8:df:06:78:a3:3f:
1d:86:15:5d:5c:ec:94:0f:c9:d0:a3:62:e0:89:82:10:f1:91:
1a:33:f6:b7:6b:8b:f3:6d:18:f1:14:f9:51:2a:ee:fd:b8:9f:
9c:0c:44:cd:60:31:4b:e5:02:b6:57:d6:53:92:ab:b0:ed:6c:
8c:89:ae:17:88:d7:a5:3f:8b:a4:6d:e0:37:1c:0d:1e:61:83:
09:03:3b:d0:b9:86:58:c2:11:a7:1f:ad:06:b1:af:90:6a:37:
a8:be:69:6d:44:61:12:7e:cf:5d:1a:72:af:f1:c1:ac:a0:f4:
89:1e:9e:59:65:a9:1d:c7:11:81:de:aa:ce:4c:7e:3e:92:bb:
2f:aa:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:49:59 2025 by rpki-client