Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
File: z96Fu9R49ehC9MT42FIl0QDg9N8.mft (raw, json)
Hash identifier: EFT4Hsc4uTpKaqNu9lwiaT7fOadqxOrK+2IGeGf7uUE=
Subject key identifier: C1:DA:36:10:4D:2D:5F:47:CC:82:21:87:A0:13:9C:F8:24:0C:3B:83
Authority key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Certificate issuer: /CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Certificate serial: 0196C2397A8EF94A48F2E26AD54C0B923BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
Manifest number: 1358
Signing time: Mon 12 May 2025 02:01:08 +0000
Manifest this update: Mon 12 May 2025 02:01:08 +0000
Manifest next update: Tue 13 May 2025 02:01:08 +0000
Files and hashes: 1: 1OyTbfvyzmfZUNYirXuCCHsANm4.roa (hash: 8Jgw64hOUxLe070arL4RcZ6Gx3UQtUhbiE1+5vQ3hTQ=)
2: HiBnbI4CFkO6wbFUo2RvuU6f-fw.roa (hash: VhgmQS29C66Fmy2SkFAZ0WnJ9LUtI+BDLROZ169cE4c=)
3: eruPfcR2X7_l3Y9JlxvSybx24b4.roa (hash: tPGfvy1XKjh90gA2MYIwq6OAfzeCCdfOe3OzNmyJzq0=)
4: z96Fu9R49ehC9MT42FIl0QDg9N8.crl (hash: f3nnMExE6Kw8kfiAbpK20sCxNNKYysOxjsano3Uks5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:7a:8e:f9:4a:48:f2:e2:6a:d5:4c:0b:92:3b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Validity
Not Before: May 12 02:01:08 2025 GMT
Not After : May 13 02:01:08 2025 GMT
Subject: CN=c1da36104d2d5f47cc822187a0139cf8240c3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:01:23:e7:8f:d7:a9:ea:f1:ee:0f:55:7f:bf:
95:93:2a:ca:a5:d8:f0:53:c9:7e:18:01:67:5d:b8:
2a:55:3d:04:01:b0:83:f7:54:f4:95:e0:ee:9b:1d:
29:9f:42:5b:96:ae:92:62:ae:a5:a8:77:78:b0:e1:
73:49:42:0d:40:24:02:b9:80:b6:ff:b1:55:f7:1a:
b0:e0:8d:28:e7:2d:d4:03:79:d0:7c:da:02:fd:eb:
2f:79:e3:d1:34:c4:95:10:a0:2f:e4:5e:ff:da:4c:
56:33:9b:a2:69:3b:e4:27:0d:0d:a0:ff:90:fc:fc:
94:5c:d7:05:1a:32:a0:52:c0:9a:74:03:8b:fb:23:
7f:8f:74:09:a4:23:63:9a:0c:73:24:94:f3:0a:b6:
a1:12:1b:8a:46:08:4c:03:e0:a9:6a:40:3f:f0:d5:
1d:3f:77:3c:65:ed:55:5e:ab:55:b1:f8:5d:a8:30:
11:55:2e:0e:80:18:10:5b:57:6c:17:d5:0c:6c:25:
89:af:67:21:93:a8:cf:91:4f:14:fd:65:6c:15:28:
bb:b6:96:e1:11:c7:3b:13:42:dd:f9:2a:38:12:e6:
80:c2:c7:fc:97:36:7c:3d:09:e0:ee:82:15:24:49:
85:54:dc:04:d3:0f:47:2c:e6:a6:3f:a7:19:0c:b6:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DA:36:10:4D:2D:5F:47:CC:82:21:87:A0:13:9C:F8:24:0C:3B:83
X509v3 Authority Key Identifier:
keyid:CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:8c:7c:59:f5:5a:a9:e9:cc:cb:1b:79:62:9b:78:91:bc:35:
99:9a:76:5b:f1:30:22:f4:67:f9:06:d8:1e:1c:ba:9e:a5:b3:
2d:6c:5a:11:05:7f:c9:e7:1a:c4:8d:5e:a2:18:a3:2b:f3:8b:
3d:1d:36:9f:52:9d:72:36:a9:35:ab:23:04:c4:7b:c5:e7:45:
6d:e9:be:53:86:22:a1:1e:d0:93:ba:9d:8b:8d:29:51:a9:bd:
17:a5:db:8c:85:ba:5c:66:e3:16:d8:77:a5:fb:e5:ee:c0:12:
f9:42:85:10:0f:f3:20:bf:81:0b:f3:5a:34:a7:86:58:5d:d8:
bd:ff:06:17:2a:02:3a:c2:b2:f1:d5:d4:bc:74:09:37:c4:f9:
9f:d4:be:d3:dd:2f:8c:94:23:40:50:29:47:09:59:7e:a8:9b:
eb:6a:2f:a5:f6:59:20:05:04:5a:93:c3:fe:16:9c:72:74:7a:
19:b1:51:53:d1:36:90:9b:95:5e:d2:6f:21:43:a3:83:ec:f4:
46:7e:57:5b:d0:04:5d:23:b7:03:66:bc:61:17:81:e3:4f:75:
89:1f:b2:42:c1:5c:f3:ba:d2:96:7e:2d:a9:4f:59:21:59:ac:
3e:82:d6:b6:cb:74:dc:be:19:70:aa:fd:cd:aa:21:33:a1:d0:
71:28:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:02:53 2025 by rpki-client