Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier: 11rMz97lWXzjDao24BqkPVVR9gtAq7eaqzCEaw6xBoI=
Subject key identifier: 17:C0:05:8C:A4:B3:35:F5:FB:43:30:7A:2F:73:EB:DB:98:EB:04:46
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer: /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial: 0196B8238654E06E018036AD79AA02771987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number: 0E18
Signing time: Sat 10 May 2025 03:00:57 +0000
Manifest this update: Sat 10 May 2025 03:00:57 +0000
Manifest next update: Sun 11 May 2025 03:00:57 +0000
Files and hashes: 1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: aS8kMCXurd5oXCIWvsH+9yBEw/7jPk81fscCyn/iCiQ=)
2: UesYrwjQAt5n35nunWJPeTym_vc.roa (hash: xvLW7BNqth0hAIyaZRHIz1XgxFZZgFJP35nzCDnm5eg=)
3: VkrZn1OK4ewvaG0hvjQYI0AmlKU.roa (hash: hX22Joel+B6dtADSTT6SWZZD0pTzxNgeLdaxKxr+J+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:86:54:e0:6e:01:80:36:ad:79:aa:02:77:19:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Validity
Not Before: May 10 03:00:57 2025 GMT
Not After : May 11 03:00:57 2025 GMT
Subject: CN=17c0058ca4b335f5fb43307a2f73ebdb98eb0446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:d3:7f:75:79:fd:dd:21:57:02:ed:1c:4b:
e7:f3:64:81:f0:7d:22:01:e9:bf:1a:0f:1d:d8:1b:
fa:27:94:9e:e1:30:a6:a9:da:9f:80:ec:1f:50:c8:
30:c7:b0:36:41:08:66:39:ab:22:ec:a0:b6:e7:17:
8a:40:22:b2:8a:21:b2:3f:d2:58:a9:60:7d:69:11:
ad:6f:48:fb:79:6f:53:13:69:80:7e:3d:76:2b:44:
02:64:94:71:c3:00:4a:31:f5:a8:a6:5a:56:ea:5b:
d0:65:c9:aa:7c:fc:41:4e:1e:10:41:37:23:91:8f:
1d:12:a3:88:3c:73:9f:23:0c:75:ad:2b:83:c3:a6:
b0:af:74:f3:f7:e2:be:0e:d6:e4:14:fe:76:9b:c4:
d6:bc:dd:55:2b:62:b7:bb:b3:e9:72:95:b8:60:69:
b3:b3:21:c4:22:f8:19:3d:dc:67:81:c7:ab:03:56:
5f:a9:76:32:3f:a1:d1:82:92:bb:83:3b:36:31:eb:
f0:89:89:c6:bf:f2:5e:62:62:64:aa:72:4e:1e:cf:
93:fd:a5:57:00:90:3b:88:38:00:eb:eb:e9:ed:d6:
6e:58:a4:fd:97:c9:32:87:9f:36:19:1b:23:6a:4a:
35:4b:d8:9e:d4:0b:b6:c6:cd:82:12:53:ec:87:7b:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C0:05:8C:A4:B3:35:F5:FB:43:30:7A:2F:73:EB:DB:98:EB:04:46
X509v3 Authority Key Identifier:
keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cc:48:a4:9e:ec:4b:8d:be:e3:2d:6d:b2:9b:04:b3:79:5a:
30:68:e3:a1:09:1b:cd:95:ea:0f:24:e7:7b:c8:c3:0c:e8:55:
8f:62:2b:08:fe:1c:f8:a6:79:bf:25:ed:6e:1c:78:22:e6:5f:
ed:7d:69:b7:da:29:d6:e0:95:1b:c0:90:49:72:be:58:fd:c2:
f9:dc:a1:b1:b1:da:6d:71:6b:81:ce:c3:ab:17:ad:48:8a:17:
1d:17:bc:da:ce:98:f6:60:5b:8e:04:b4:50:19:11:65:f4:f6:
89:35:2d:0a:62:93:a4:16:1b:8f:a9:f3:ab:1d:2f:f9:a5:b1:
db:78:c2:b3:a4:db:f6:ec:fa:50:c8:78:2b:9d:e0:c3:57:48:
a8:1d:5f:94:12:13:f9:3b:8d:db:25:8e:6a:7c:82:bb:0f:f2:
ca:34:b5:2c:d6:e4:53:21:70:d1:82:0a:d1:04:bd:45:9f:56:
5a:1f:80:f5:4b:c1:e4:43:a5:b3:9f:46:6b:e0:94:f4:10:ba:
9e:bc:df:94:d0:60:a2:16:05:d9:8a:9b:9b:2d:ed:90:f4:69:
2a:a3:f3:5f:cc:6b:cb:67:fb:84:8f:3b:2a:0d:65:fc:6b:bb:
ff:93:1d:ea:dd:13:1c:cd:0d:07:cb:8a:e9:5f:84:eb:51:02:
ab:21:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:38:38 2025 by rpki-client