Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: pRw4vIJlVVSnUA+eDa3Pi5U/ccTmW2SikQHxSiL8FVw=
Subject key identifier: C9:D0:BB:56:13:D0:56:AB:A2:F2:DC:9E:04:BF:01:ED:96:A6:6A:47
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 0196BE259FAB0650B75E206574FF8109BE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 07:00:58 +0000
Manifest this update: Sun 11 May 2025 07:00:58 +0000
Manifest next update: Mon 12 May 2025 07:00:58 +0000
Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: 4Y9ZWFr4kHO9+dqyOLwyIBDQqS1E8f03h5zeL12EBkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:9f:ab:06:50:b7:5e:20:65:74:ff:81:09:be:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: May 11 07:00:58 2025 GMT
Not After : May 12 07:00:58 2025 GMT
Subject: CN=c9d0bb5613d056aba2f2dc9e04bf01ed96a66a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cb:86:c9:5b:4f:21:1b:b7:51:5c:e4:31:97:
1e:d7:50:b5:fb:5b:53:7b:98:71:4e:7d:9a:aa:61:
11:54:31:92:54:0b:a2:b2:7a:a5:94:47:64:62:7d:
49:cb:57:89:84:2c:02:db:c7:ea:cd:c9:41:0b:d3:
11:8e:68:9e:83:e6:8a:69:70:46:44:a4:ff:4c:ef:
32:7b:be:6a:ad:7b:ad:5f:d9:f8:71:83:da:bc:3c:
19:16:23:77:0c:bf:96:d4:d2:ea:92:88:59:03:a9:
9d:d8:a2:23:2d:02:37:b7:1c:41:9f:2a:67:03:fb:
d3:d7:58:bb:2d:9f:ce:b3:41:3b:0e:a9:ae:8b:ea:
d5:cf:2f:f8:ab:2b:f6:26:3c:01:22:54:23:2a:fc:
d2:e0:0e:40:76:fc:e5:d9:07:0d:3d:cf:af:03:96:
95:f8:ea:47:ec:4f:44:cd:34:cf:96:78:15:08:d2:
18:09:62:6e:76:14:16:f5:af:82:7b:e9:d4:15:c1:
13:e5:55:91:8e:58:5d:14:df:c4:77:bd:b4:10:6f:
f3:e3:a4:e6:5a:e2:4b:95:f9:a4:1a:a3:a2:3b:42:
d3:86:91:f6:34:24:91:e3:fa:0e:2c:b5:dd:8e:83:
e5:8b:39:73:fc:5c:34:d7:c6:1a:51:51:f5:4c:1a:
22:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:BB:56:13:D0:56:AB:A2:F2:DC:9E:04:BF:01:ED:96:A6:6A:47
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:44:d8:37:e4:6d:37:00:e0:04:31:20:f5:6a:e3:87:6e:80:
ca:8a:c0:44:f5:da:2c:2d:1b:be:8d:f7:69:e2:e3:8b:e9:27:
e8:17:52:73:a3:eb:69:bc:31:16:37:d0:a2:55:10:3c:2c:66:
cf:60:2a:ff:dc:cc:63:80:34:6c:e7:45:c0:08:f3:30:22:48:
c1:0a:d1:bd:aa:9e:87:d6:63:26:bd:92:7f:a8:8d:68:66:d0:
6f:9c:b4:90:cf:ce:21:9f:28:1a:0c:6b:3a:d6:5b:70:4d:1e:
2a:8d:50:a5:91:51:70:94:ca:ad:28:17:34:ca:5d:53:e7:85:
0f:d4:a5:71:8d:e5:02:54:84:6d:0d:e0:5d:3f:74:ba:d7:b1:
94:fe:ec:d0:26:81:5e:71:50:13:77:50:54:eb:1f:ed:81:c3:
e6:ae:26:25:10:3b:9b:93:cb:68:01:ce:a2:d1:09:94:70:59:
d0:a1:c7:af:b8:9c:3e:a9:47:bb:21:ad:b2:75:9f:22:bb:df:
54:da:19:57:ad:ad:b4:5d:3f:79:4b:91:bd:6b:4b:e9:c2:29:
20:dd:be:97:d4:fa:e1:7d:ca:d1:4e:3e:f1:73:29:eb:3f:47:
77:12:71:f8:c4:ba:2e:18:fc:0b:d6:36:a7:29:c2:44:e6:87:
34:2a:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:39:46 2025 by rpki-client