Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: oYe+IGZkmycq3V+QC70oRbPnoS/L5/NsJvd2LxYFj78=
Subject key identifier: 6D:09:0F:17:D4:0D:C7:A4:08:84:D1:63:F8:FD:A3:5F:50:17:DB:3D
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 0196C1260B591F54C2F4CAD6059EA76D4BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 157D
Signing time: Sun 11 May 2025 21:00:18 +0000
Manifest this update: Sun 11 May 2025 21:00:18 +0000
Manifest next update: Mon 12 May 2025 21:00:18 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: IN1jwgPTduaczkteZQrmL6TGH3c6pQkvyn2TUQPRhOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:0b:59:1f:54:c2:f4:ca:d6:05:9e:a7:6d:4b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: May 11 21:00:18 2025 GMT
Not After : May 12 21:00:18 2025 GMT
Subject: CN=6d090f17d40dc7a40884d163f8fda35f5017db3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:5c:7e:36:3b:05:54:58:96:9c:f0:5e:5c:
dd:1e:32:38:3d:d9:ff:e1:65:e4:ec:07:c3:94:07:
5d:bb:19:7c:a1:bc:aa:83:43:d1:1c:ed:ab:fc:93:
44:de:21:83:a2:e7:da:25:aa:0d:5c:51:5d:ba:a3:
da:b4:2c:f5:38:da:12:5d:d6:c2:fe:ed:12:f1:e0:
59:3b:ed:ed:33:e3:c8:20:da:3f:2f:64:8a:b9:85:
15:ff:01:d7:da:50:ef:55:07:3c:8c:04:38:5e:e8:
40:fa:e7:d5:1d:26:0a:a9:1a:76:d1:b5:aa:c6:25:
93:02:2a:fe:da:8c:4e:1a:43:62:44:c7:8d:7e:af:
76:64:ce:ed:c0:79:5c:2b:67:a7:23:78:5b:85:8c:
48:e1:be:b1:0b:c0:c6:ce:12:c2:57:c1:8d:5a:fe:
a2:28:42:97:44:38:fd:75:7e:79:ae:2a:92:a8:2e:
07:de:72:a9:64:53:96:79:cd:19:68:b1:51:c2:d0:
0d:09:a8:d9:f2:32:f5:4c:ff:72:18:c4:48:13:3a:
c3:20:d0:71:ce:65:88:9b:49:68:0c:99:02:46:4d:
0f:91:9a:d0:0e:da:3f:bc:41:a9:ef:b2:fc:25:64:
9e:e4:05:ad:78:bf:f7:fc:ab:5e:6f:13:d7:20:aa:
cc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:09:0F:17:D4:0D:C7:A4:08:84:D1:63:F8:FD:A3:5F:50:17:DB:3D
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:7c:6f:db:5e:ff:d4:ad:49:cf:73:55:3d:a3:56:14:84:e4:
db:fe:c7:b6:fe:38:64:31:58:af:27:6a:f1:21:b2:0e:80:d6:
e7:96:09:c3:c6:c2:32:e5:3b:4f:59:1c:f0:01:07:d9:7d:2a:
dd:67:e0:15:94:9c:75:db:7f:b1:0a:3b:79:ce:6a:ca:9b:a4:
02:6d:ae:19:a4:48:b6:91:78:14:b0:91:a8:27:e5:5d:64:8f:
2b:97:29:db:7f:a2:40:d8:1c:67:bf:b5:22:d4:03:86:54:ed:
08:86:94:3e:48:ee:39:15:5a:b4:5d:fc:57:45:4b:52:8b:58:
69:9b:96:bc:c7:cf:d5:9b:c4:ef:ee:98:5d:62:4a:7c:48:de:
b7:73:f8:d0:4b:77:d4:ea:09:6c:ac:23:6a:12:e2:6b:11:48:
00:47:6f:5f:b4:c8:d9:13:2d:dc:70:9c:00:e0:f2:41:93:fd:
1c:17:68:d0:fb:ec:cf:98:ed:fa:ac:f8:48:66:e5:45:c6:e6:
0f:72:a7:ba:93:99:75:35:19:17:f3:e7:eb:33:76:5c:64:79:
94:a1:cc:6a:1f:13:45:34:84:7e:71:cc:c7:95:f2:52:a9:a0:
40:a6:3f:73:6d:8f:95:ae:18:c3:bf:13:5e:63:96:5b:68:5f:
16:40:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:19:32 2025 by rpki-client