Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: mcQIQ0d4gRQjYoaqjiCkN1Mm6KMlTKQZJP5+AfzjT+8=
Subject key identifier: 6A:E4:01:7D:D0:5C:37:0E:0B:1D:5C:D0:AC:24:C8:2D:AA:4E:84:A9
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 019681D94E54F5DBA23A0FF95F27538BADFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 0642
Signing time: Tue 29 Apr 2025 14:00:24 +0000
Manifest this update: Tue 29 Apr 2025 14:00:24 +0000
Manifest next update: Wed 30 Apr 2025 14:00:24 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: r/9vMB/9phwESboAkXd3e/qpQyV9fY2CWojGslRXI/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:4e:54:f5:db:a2:3a:0f:f9:5f:27:53:8b:ad:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Apr 29 14:00:24 2025 GMT
Not After : Apr 30 14:00:24 2025 GMT
Subject: CN=6ae4017dd05c370e0b1d5cd0ac24c82daa4e84a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:ef:9f:62:ac:00:73:68:d5:dc:a0:02:84:
fd:9b:cb:93:45:a9:1d:98:ac:ed:80:40:f7:ba:b0:
a9:07:9b:11:06:f0:5b:2a:4d:04:59:be:d3:17:cc:
ad:2b:b6:29:3b:ce:dd:d4:4e:58:cf:6e:6a:3b:96:
35:f0:7b:ad:d9:fa:55:9e:14:4e:c9:5b:ec:67:4a:
db:ac:fc:f1:e0:2a:63:ed:77:fe:58:9d:3e:e4:5d:
6b:2a:2d:16:91:cd:d1:9e:56:3c:a3:47:18:42:26:
0d:1e:88:c6:f2:4b:85:cb:2f:06:c7:37:e6:f6:21:
f7:f5:be:50:b9:d5:21:82:4f:2c:e0:7a:d7:fb:31:
07:b3:c9:9b:ac:e0:0d:63:53:9a:86:8c:b7:ab:79:
be:88:03:09:b4:40:f7:7b:30:88:23:47:c3:43:44:
7d:13:96:06:71:56:6a:52:79:14:b2:54:3a:f6:90:
58:dc:62:dc:79:61:24:54:33:b4:20:c0:85:7e:13:
fa:af:7e:08:0d:ec:61:97:67:b8:a6:e2:8f:ac:6e:
cc:cf:7a:45:39:65:38:bf:ce:5d:de:12:4a:7e:9c:
c4:bb:fb:2a:e8:d5:59:8d:1a:c6:48:44:2f:53:30:
5c:3a:61:5a:22:b1:42:93:00:2c:f0:aa:2c:d1:66:
44:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:01:7D:D0:5C:37:0E:0B:1D:5C:D0:AC:24:C8:2D:AA:4E:84:A9
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3b:21:9f:7a:df:b7:93:58:36:6c:46:a3:f9:b0:a1:18:2f:
0c:9e:8d:f3:d6:d1:53:b3:3f:f9:2d:00:49:ad:da:7b:e2:33:
41:a7:be:f5:26:39:29:b0:9e:74:90:8d:aa:ab:ce:c5:47:49:
14:f8:53:83:17:1c:47:2e:f6:9e:69:6e:e5:aa:73:b3:4d:84:
cc:4d:1d:25:b6:86:97:c3:17:a0:da:5a:6e:a1:6d:06:0b:af:
63:66:be:d1:91:31:8f:76:9f:72:a5:fb:b6:58:63:96:d2:b5:
fc:d4:9d:f2:ae:95:1c:6f:74:9a:93:a6:00:32:5d:1c:6e:69:
e6:ba:f5:77:53:79:00:ab:dc:c9:04:3b:f8:1d:b0:ed:dd:9f:
be:99:cd:4b:1c:2a:ed:b9:66:c8:54:bb:d7:b3:26:e8:96:68:
e0:1d:fc:9f:18:d5:3d:77:21:be:3a:18:d3:35:d2:75:b4:bc:
02:e8:fe:ce:81:db:d5:27:e6:cd:a7:dd:c5:2b:cb:67:91:48:
b4:f9:05:01:c4:9e:5e:19:d2:75:50:c3:55:ac:67:8c:83:2a:
fb:20:c0:05:71:b7:b0:a1:59:b3:ca:1a:5e:1e:bb:4a:9c:b0:
00:65:97:ed:0a:41:db:76:fd:83:ea:ef:a3:e5:54:a3:36:a5:
77:77:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:13:04 2025 by rpki-client