Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
File: z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft (raw, json)
Hash identifier: dU4ylWoZfPUv09MhqyXoOcUgRTTfqX84Sd9fI+8C6kk=
Subject key identifier: 21:47:48:F0:C8:89:3F:E2:64:C7:98:DD:81:4D:1C:44:C0:39:71:02
Authority key identifier: CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
Certificate issuer: /CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Certificate serial: 0196914CB421F318645B4971BAA8CF2D7CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
Manifest number: 10B1
Signing time: Fri 02 May 2025 14:00:45 +0000
Manifest this update: Fri 02 May 2025 14:00:45 +0000
Manifest next update: Sat 03 May 2025 14:00:45 +0000
Files and hashes: 1: 4LDf3BAWYj8mO4n0cpZaSTYNCgQ.roa (hash: 2PsEN5j0ePjCMadYZW/XY72E9eg7u91QL60wRji2nxY=)
2: z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl (hash: Je8q64VQ7SM/xBIELZFGdwnBGilr9Fhm1MGXtwu5LSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:4c:b4:21:f3:18:64:5b:49:71:ba:a8:cf:2d:7c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9625541abe6b5ae926671daa98ac6d8094ec7b
Validity
Not Before: May 2 14:00:45 2025 GMT
Not After : May 3 14:00:45 2025 GMT
Subject: CN=214748f0c8893fe264c798dd814d1c44c0397102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:d3:f1:f1:50:86:36:57:94:f7:7c:73:c9:
01:aa:56:9c:57:d7:cc:70:75:08:ab:c6:f9:38:b6:
1c:77:a4:09:b6:66:cb:a2:b0:47:96:45:a9:51:47:
91:c2:11:26:d8:d9:4b:4b:0e:aa:93:5c:a0:7b:fb:
56:d5:b9:d4:68:f7:d0:1a:d5:87:0c:3b:6c:f2:ac:
1b:2b:c3:98:9e:42:77:b7:78:81:ef:9b:67:15:d8:
3d:92:ff:d5:ef:b1:21:29:35:d1:4c:df:4c:8d:70:
a2:4f:df:ff:27:91:95:c8:5d:6a:75:ae:f0:58:7c:
f6:04:97:f0:a5:cf:b6:43:e4:1d:2d:6f:f0:bb:84:
94:d6:99:e7:f9:37:69:08:d6:85:24:20:84:9a:62:
9a:49:25:f7:5b:d8:98:48:41:68:d6:26:af:1e:61:
55:de:eb:aa:a3:d0:4a:c2:74:10:54:66:72:6a:f3:
79:82:ad:3d:fb:73:34:c4:50:a3:45:d6:ee:93:af:
55:9d:29:79:73:9b:f2:22:ec:7c:49:5f:4b:d3:9f:
18:bb:f4:6f:6a:6b:61:bc:ac:74:ef:2e:d7:07:ae:
ee:35:5f:5b:10:c8:ca:63:fc:1c:1a:bd:d6:bc:2e:
bc:37:0e:93:a0:1e:db:d8:66:1d:81:da:e8:a4:5a:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:47:48:F0:C8:89:3F:E2:64:C7:98:DD:81:4D:1C:44:C0:39:71:02
X509v3 Authority Key Identifier:
keyid:CF:96:25:54:1A:BE:6B:5A:E9:26:67:1D:AA:98:AC:6D:80:94:EC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5YlVBq-a1rpJmcdqpisbYCU7Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/132ed3-434d-4d49-95ca-59a587bdea3f/1/z5YlVBq-a1rpJmcdqpisbYCU7Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9c:60:fb:fc:6e:54:be:ba:3f:80:31:aa:66:8a:a4:c4:36:
fb:b1:bd:3b:be:f5:d3:29:f5:db:0b:35:5c:a8:62:bd:13:3c:
27:7a:49:39:1a:a1:ba:36:ee:ca:ea:bc:00:b7:e8:9a:57:41:
03:a1:cf:2f:6e:9c:f3:8f:2d:0c:10:57:83:3f:3f:d7:15:15:
7d:c0:92:1d:9e:1e:44:49:0a:c7:cc:d5:04:8c:7e:12:8b:e2:
f2:32:74:66:b1:17:0a:39:a9:69:21:1b:98:42:b5:2e:c0:47:
60:6d:85:f4:e9:a1:d9:25:9d:4b:e8:6d:96:98:be:38:b0:5a:
e3:9c:9d:68:f2:ce:be:9c:0a:70:b2:dd:87:03:77:7f:0a:8d:
16:2e:c0:fd:70:82:39:25:92:e1:99:88:7d:0c:56:5f:98:f0:
9d:c9:6f:28:9c:05:9b:4c:c9:ce:ae:cc:2d:e0:0a:12:82:1a:
bf:90:3b:e8:52:15:26:fa:f7:eb:8a:b1:7b:83:85:89:7d:42:
4c:61:ad:9f:4b:28:00:61:f3:06:b7:69:8d:10:f9:55:c9:92:
09:ab:72:a4:3c:18:b9:b4:1b:24:5c:16:80:1a:cb:3a:e7:b6:
2a:19:d2:6a:8c:f6:15:66:23:20:e9:85:7e:ee:5c:ef:3c:51:
bd:a0:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:00:53 2025 by rpki-client