
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
File: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft (raw, json)
Hash identifier: 29l/UsXH7GNTtXNOjdAp7IeSbrzZdYsN7g1kV8PL3Hs=
Subject key identifier: 2B:A8:E7:85:4D:50:BD:67:CD:57:B2:1C:A2:9F:43:10:50:01:CA:AB
Authority key identifier: 47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
Certificate issuer: /CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Certificate serial: 0196839167FAFD3FBD09E507E1F889E03021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
Manifest number: 0838
Signing time: Tue 29 Apr 2025 22:01:06 +0000
Manifest this update: Tue 29 Apr 2025 22:01:06 +0000
Manifest next update: Wed 30 Apr 2025 22:01:06 +0000
Files and hashes: 1: 9Kz1Fv2LSuY0LF68m4kI6oOM2Ic.roa (hash: DpVOkbfjr2aYG9vMgOAPUEe4A9rj3lmXccI6AqDsxmk=)
2: Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl (hash: 2wW/Tapl7P1LQg4eiAV3V+NwOHMCTylEaAkb+AeBUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:67:fa:fd:3f:bd:09:e5:07:e1:f8:89:e0:30:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473ddbc4bb381dbef24d2ff8b4e1f23f2ddf40cc
Validity
Not Before: Apr 29 22:01:06 2025 GMT
Not After : Apr 30 22:01:06 2025 GMT
Subject: CN=2ba8e7854d50bd67cd57b21ca29f43105001caab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:8b:0d:18:cf:a7:d2:91:8b:fe:a0:bd:ca:
f5:c1:d6:07:0c:02:c0:24:82:4e:c0:ea:1f:3c:86:
b4:22:47:77:8e:65:0d:fc:04:a3:c6:cb:2b:a6:e7:
a1:ed:8c:b3:b9:d7:7c:01:53:3e:09:bf:09:e1:8e:
09:6f:88:4b:43:62:e2:61:7a:9b:34:ee:b5:12:92:
cc:c6:cb:51:7e:2a:a4:7e:9c:d8:c7:cf:d2:29:be:
e2:b3:35:b7:df:ec:36:68:6c:0a:1f:90:8b:d9:da:
40:f7:00:e8:c7:0f:b2:52:05:fb:35:01:26:96:56:
d5:d1:a8:25:8d:be:55:65:b6:94:e6:b9:15:29:3b:
d0:57:07:66:f6:f2:c4:e0:7d:f7:72:62:7b:eb:ab:
22:56:15:cf:98:dc:2d:1e:28:b2:cc:d8:42:92:37:
6a:29:ed:21:9a:6e:32:c3:53:24:7d:3e:07:e1:45:
fb:04:12:4e:7b:e7:66:49:5c:9f:b0:30:0d:f8:eb:
cc:4b:c9:36:ed:fd:80:62:be:9c:5c:94:c1:cd:ec:
75:a6:d3:bc:4f:69:35:79:e3:9a:18:37:9d:7b:7f:
8b:73:6b:dc:a4:65:9f:08:ac:ad:8f:4f:6c:07:aa:
09:41:36:fc:47:ef:5d:15:70:c9:06:3f:ec:b3:b2:
62:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A8:E7:85:4D:50:BD:67:CD:57:B2:1C:A2:9F:43:10:50:01:CA:AB
X509v3 Authority Key Identifier:
keyid:47:3D:DB:C4:BB:38:1D:BE:F2:4D:2F:F8:B4:E1:F2:3F:2D:DF:40:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/55bf9f-240f-49bb-b30e-604b201e65f8/1/Rz3bxLs4Hb7yTS_4tOHyPy3fQMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:10:85:02:af:2b:6b:58:3e:3a:13:7f:dd:6e:e6:50:00:78:
52:34:73:a6:3b:00:0c:c9:5b:30:d4:5c:8c:9d:2f:28:ec:f4:
d7:e1:3c:df:ab:7f:b5:7a:cf:1d:71:0d:25:7b:a9:4c:18:b9:
5c:ce:44:ca:8a:b5:25:ce:b9:71:43:99:ae:9c:e1:04:79:31:
bb:86:2c:77:ec:fe:e4:df:fa:e9:43:bb:a0:2f:40:f0:e6:59:
86:60:51:fc:1c:3f:03:1e:53:38:9b:4d:29:78:10:aa:fa:35:
92:72:eb:6d:b6:9f:a2:51:f0:9f:57:3a:64:55:72:ab:44:f2:
70:7a:70:0e:8f:0f:8f:4c:45:7b:f7:f8:d3:96:0a:ad:28:10:
c0:05:06:4f:89:a6:af:1a:af:07:1c:64:0a:31:f2:61:6f:52:
2e:01:4d:f7:c0:cd:5f:18:e2:52:87:18:16:5b:72:fd:66:01:
e0:6f:75:fb:50:ac:48:86:69:1a:62:8d:cd:65:9e:9f:6b:65:
b3:a4:cb:37:9a:e0:bd:43:82:a1:c7:53:ad:2f:ae:21:76:0c:
b4:38:19:34:3f:9a:d6:b9:51:1d:f1:4d:98:9e:bc:da:ce:05:
8d:e0:c1:26:03:88:5c:4a:e8:32:e6:43:b7:de:92:f1:c4:ed:
df:04:f9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:27:26 2025 by rpki-client