Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
File: zS0OOdePxiAiVaW0rbVFg9ne3c4.mft (raw, json)
Hash identifier: N/Ktx49LmUy1ritLiUjOYejxlSicaGTvIoOwHVuIksk=
Subject key identifier: B9:04:4E:F8:F9:43:B6:D1:33:0C:97:E4:FB:0C:CA:66:04:96:17:B5
Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Certificate serial: 0196827DFC14F8DD35688EFF3D139DCF7606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
Manifest number: 0839
Signing time: Tue 29 Apr 2025 17:00:16 +0000
Manifest this update: Tue 29 Apr 2025 17:00:16 +0000
Manifest next update: Wed 30 Apr 2025 17:00:16 +0000
Files and hashes: 1: 3EEDSMX4c2BQtUFlexj7ViVaNFg.roa (hash: i/HEM5WN4SpMsFYFUufkSvdwrDOTS979dTw2WJmTqxo=)
2: zS0OOdePxiAiVaW0rbVFg9ne3c4.crl (hash: eRlKOakGerewW8GqnQgK0/7o9vOWnspwgfPSQLGPGcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:fc:14:f8:dd:35:68:8e:ff:3d:13:9d:cf:76:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce
Validity
Not Before: Apr 29 17:00:16 2025 GMT
Not After : Apr 30 17:00:16 2025 GMT
Subject: CN=b9044ef8f943b6d1330c97e4fb0cca66049617b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:fb:15:39:ea:b7:f1:82:5a:54:86:c9:eb:
42:fc:59:e8:db:be:4f:83:d8:82:bd:2c:ba:fd:f8:
58:5a:21:ec:c2:02:bf:7b:ca:d4:89:e3:ac:ff:43:
07:9d:bc:b1:51:7e:79:00:24:fe:96:61:ea:b8:fd:
b4:67:95:60:2d:44:2c:9b:cb:13:21:8f:c4:b2:27:
87:aa:81:4b:7c:a4:85:22:02:a6:c4:f9:a4:af:c1:
8a:d2:bc:81:66:53:0b:08:45:b2:bb:0b:96:f9:84:
29:92:b4:7b:34:fb:cc:fb:77:cd:b1:ec:f7:c1:08:
06:57:85:2d:46:60:cb:2a:ba:18:5f:0d:61:0a:ec:
26:8e:b0:f2:91:c6:33:b4:63:d8:e2:42:f4:d8:86:
38:e1:29:ac:4f:10:d6:c3:5c:44:dd:bb:7e:f8:d3:
01:b2:60:c6:8b:ea:8b:d9:8b:7a:25:dd:31:bd:79:
a1:7b:22:b7:42:67:ef:72:0c:29:92:2c:cb:88:de:
7d:1d:80:d8:8d:e5:fd:83:e9:e4:a5:e5:e8:40:b1:
7c:14:3d:62:cb:de:c7:36:ed:97:f9:07:9e:0c:e3:
11:dd:fb:14:21:69:90:98:d0:2f:b4:d8:10:fd:b2:
9f:4b:d8:f3:51:e5:e8:a4:10:4f:01:3b:35:9d:4d:
ee:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:04:4E:F8:F9:43:B6:D1:33:0C:97:E4:FB:0C:CA:66:04:96:17:B5
X509v3 Authority Key Identifier:
keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:73:1d:5d:f6:96:10:0b:86:9c:f4:1d:6e:2d:46:76:1f:7a:
10:f7:36:7b:a5:5c:df:84:92:02:f7:b8:03:1a:8c:d3:5a:86:
97:ac:6b:b6:a8:a7:de:16:da:e3:59:45:35:d8:64:1e:65:c4:
b1:33:5f:6b:63:5e:a4:14:af:61:8d:fb:43:c3:fe:af:63:e0:
c0:cb:6a:46:ee:35:b3:a7:20:f9:64:75:46:b8:47:e4:da:33:
70:fe:54:46:37:50:20:b7:a4:1d:4e:89:b8:19:4e:e3:75:b4:
de:01:72:92:ba:f0:e5:c0:d0:f3:df:78:47:46:10:3c:7b:75:
28:52:eb:aa:db:f8:20:c2:c9:83:a6:1e:df:75:eb:bb:14:30:
9e:e4:b2:55:f9:a9:52:47:fd:af:53:29:ba:32:4f:1f:81:b7:
58:04:79:da:8d:fa:8e:26:96:30:b1:cd:29:9c:1e:da:d6:f1:
8c:ca:ba:63:e5:00:30:6e:53:b9:4f:36:f2:5d:69:c7:69:75:
6d:0e:09:2a:aa:da:76:da:a0:27:8d:c6:88:ff:9e:3f:7e:14:
b3:08:19:9f:bf:52:be:d1:8d:e7:38:3b:b1:02:c2:4c:34:f3:
a1:85:37:09:04:56:9d:a0:05:46:60:9f:40:43:32:f9:3a:d1:
12:1d:50:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:50:21 2025 by rpki-client