Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json)
Hash identifier: NKirfBRvKejEVCQdU9elHRNbboIerqdB9FsOgApa0P0=
Subject key identifier: 0B:C9:F4:64:70:F6:25:26:57:57:48:F9:79:9B:E3:21:89:24:DA:C6
Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Certificate serial: 019696E0E701CE5F4C8E6764D17BFA080BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
Manifest number: 0186
Signing time: Sat 03 May 2025 16:00:43 +0000
Manifest this update: Sat 03 May 2025 16:00:43 +0000
Manifest next update: Sun 04 May 2025 16:00:43 +0000
Files and hashes: 1: ntif6JQzKkt15ZXJfkk8Oj8cYf0.roa (hash: 3JrfUgNRXXI9DKBiBLG/+I75NBSeTwYH7idBMj+gRRQ=)
2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: YP5WCIprEj1rm7EhLVB19/5/1Ks5TG12JJjyEONOfBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:96:e0:e7:01:ce:5f:4c:8e:67:64:d1:7b:fa:08:0b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef
Validity
Not Before: May 3 16:00:43 2025 GMT
Not After : May 4 16:00:43 2025 GMT
Subject: CN=0bc9f46470f62526575748f9799be3218924dac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:c2:51:3a:6c:19:3f:60:9c:49:a1:b6:6b:
97:d6:c8:4e:9a:65:d4:4a:be:e9:f8:bb:9c:86:5b:
77:70:16:67:30:9b:5b:8d:db:b3:6e:5a:1f:ac:35:
d5:f3:72:12:7b:01:6d:f3:73:e1:0c:65:14:24:30:
f2:c5:af:34:59:54:11:82:0a:3d:a5:ba:4b:f4:7a:
4d:a8:e0:68:61:56:bd:45:a7:b5:3c:27:f9:42:5c:
42:ec:00:51:c4:a5:50:e9:e9:1a:ac:a9:6d:66:ae:
bb:cc:4b:55:4f:80:2f:d5:15:7d:e8:e2:aa:aa:ac:
52:05:d2:0b:25:f1:50:19:ce:38:ca:e1:ad:85:16:
81:6c:15:81:12:c1:2f:9c:da:6d:4a:e1:04:6b:0a:
24:54:36:a9:a9:7c:91:57:02:e3:19:85:88:75:74:
e7:52:b5:d6:36:1d:9c:84:33:04:65:f5:46:a2:58:
53:bb:b0:b7:ff:74:2a:2f:5c:ca:cc:ab:17:16:17:
ee:49:66:26:4e:a9:8f:bc:24:0e:4e:77:24:cc:78:
18:18:3f:ec:99:81:03:46:42:06:b1:ec:9c:70:0a:
17:a5:3e:0f:f2:f9:79:b2:10:73:51:f5:d7:05:87:
28:a0:9b:a8:8a:17:6c:01:8c:bb:f9:e8:d1:3d:08:
57:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C9:F4:64:70:F6:25:26:57:57:48:F9:79:9B:E3:21:89:24:DA:C6
X509v3 Authority Key Identifier:
keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:ab:06:03:91:92:29:53:89:22:70:d3:3a:4e:b8:6d:30:
b6:a8:ce:e9:22:41:28:4b:26:d9:73:ef:eb:c0:f9:9b:46:10:
28:02:b9:0b:28:05:1b:52:b7:8a:d6:6f:99:32:5d:56:6b:2b:
b5:be:76:23:ce:9e:1e:12:61:42:8e:a5:50:d2:2b:df:dc:c3:
98:b7:f0:91:9a:76:a1:ef:b0:3a:f5:87:27:8c:7b:58:e4:fc:
5c:12:1a:a0:3e:11:4f:e1:11:fd:1e:c8:d5:4b:55:c9:0a:d6:
1c:e1:5b:dd:5c:06:54:25:4e:c0:d9:75:d8:94:0a:ad:af:40:
8d:8a:53:b7:e6:b5:2b:5e:e7:33:ca:80:54:af:bb:90:dd:11:
32:d1:7f:2d:ff:cf:36:69:78:fa:49:89:d7:1c:01:92:2c:bb:
a3:fc:27:01:69:cd:df:a3:61:93:fb:07:02:db:71:1f:ea:d9:
d1:89:26:a0:03:a2:9a:30:40:42:21:86:30:17:a9:0f:71:6c:
7a:2f:79:87:2b:29:82:fb:9f:aa:30:c1:7b:8f:f1:68:68:ad:
80:5c:00:89:e6:ce:ba:b0:75:5b:98:d1:b7:b6:6e:bd:d7:c6:
91:7f:5a:d9:a3:24:46:3f:a8:f8:ef:a0:5f:94:f0:38:07:c1:
f5:76:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:55:13 2025 by rpki-client