Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft (raw, json)
Hash identifier: MY4OB8kFzNccNweyNenuk/ApxvTwu0e8jOV7+YAM0Ys=
Subject key identifier: D6:6A:29:C1:F5:F8:C2:BF:CF:55:AB:B4:41:D8:24:1C:56:F8:0C:DF
Authority key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Certificate issuer: /CN=6745314516483fe27c0530ccb9707c376d20e7f0
Certificate serial: 019679E998363ADAAF222B77ECE2AFD97210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
Manifest number: 09F4
Signing time: Mon 28 Apr 2025 01:01:13 +0000
Manifest this update: Mon 28 Apr 2025 01:01:13 +0000
Manifest next update: Tue 29 Apr 2025 01:01:13 +0000
Files and hashes: 1: Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl (hash: 95NTvtjBygfWD9F6MYlGL8/mBTv2GO1Tr1pWyHxbYjc=)
2: omUHhrKSJPjXc3fnFI7A_uy7HUU.roa (hash: xj7VTWYKB+CTrZ+OfVzTG694MjcNSO25Qbd0GhfZgnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:98:36:3a:da:af:22:2b:77:ec:e2:af:d9:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Validity
Not Before: Apr 28 01:01:13 2025 GMT
Not After : Apr 29 01:01:13 2025 GMT
Subject: CN=d66a29c1f5f8c2bfcf55abb441d8241c56f80cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:23:80:90:ba:78:2e:d2:11:6a:2a:be:b6:
34:14:64:48:f6:0e:56:34:4b:d0:a1:fe:81:ed:85:
74:3f:04:9b:a1:62:85:cc:f9:34:aa:86:14:5c:ed:
5b:63:c7:6c:5b:2e:f8:3a:32:e7:80:b3:b4:ce:48:
1e:5b:f1:6c:e5:44:68:38:2f:47:ec:a9:f9:9a:84:
de:7f:de:0a:63:52:7e:38:b2:d0:25:32:e5:b0:3e:
21:79:77:33:8e:71:ae:f9:6b:29:6e:14:dd:f0:58:
36:da:f3:45:9f:50:72:b0:c1:be:b3:83:b4:8f:73:
fe:90:f4:b6:12:62:0a:fd:1b:86:25:f4:ed:af:2b:
0c:27:ec:4a:8e:da:b1:11:86:9f:aa:73:95:9c:30:
95:ba:48:3c:0d:ac:4b:54:d6:7a:b1:82:5f:64:0d:
5a:e2:5e:a5:e0:ee:f1:fe:2c:4e:d6:0e:2f:67:8a:
5e:35:7e:21:93:b3:9c:d7:57:52:f4:cc:40:5d:c3:
89:65:35:cd:48:80:fd:93:45:57:ec:88:30:fe:52:
f3:4e:9f:11:b0:cb:33:80:bc:f4:74:41:5b:9b:e8:
11:34:2f:96:17:9f:2e:69:b3:2c:7e:eb:57:60:07:
7b:7d:fd:8d:6c:e1:cb:ad:b2:ee:2b:b1:9b:63:0c:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6A:29:C1:F5:F8:C2:BF:CF:55:AB:B4:41:D8:24:1C:56:F8:0C:DF
X509v3 Authority Key Identifier:
keyid:67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cd:9f:7a:60:d1:de:6a:d0:8d:ad:99:24:9c:53:60:6a:9f:
0d:65:12:13:22:96:f0:85:07:0b:8f:4b:f2:3c:a0:c8:71:0f:
5a:25:fc:fc:a6:69:78:99:44:cb:10:29:2a:05:a3:e4:7e:38:
62:ce:1c:f4:f4:89:c1:a4:26:71:ca:a2:d5:86:0d:c3:89:b0:
af:37:a4:fc:81:d7:0a:fe:dd:0b:5f:0e:6e:1f:3d:b5:55:ce:
4a:34:32:3f:aa:e0:16:f6:d4:96:1f:94:41:17:7d:5f:3d:70:
1d:66:b3:ad:d9:bb:c6:e2:c3:54:09:14:1a:b5:5f:00:cf:0e:
40:8d:99:f3:9d:4d:82:c3:ad:85:a4:d6:57:43:38:86:08:c9:
19:47:b8:29:ef:04:0b:e5:a4:90:bc:42:59:6e:6a:5d:25:c7:
18:59:e7:ea:cc:37:7a:d0:5a:46:17:81:ae:f0:49:5d:79:57:
51:5e:49:0f:1e:4b:84:b9:c8:af:5d:3d:40:93:3b:ad:e2:4c:
eb:2a:c4:b0:ef:b4:1f:a4:b4:2f:ee:a0:fd:53:e9:e4:e7:3f:
8a:6a:19:d1:da:1c:7c:0d:d3:e0:9e:50:eb:dc:e7:e0:34:4c:
59:35:28:a9:9e:cf:88:50:b4:fa:76:bc:3d:30:23:ca:a3:bd:
3b:72:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:29:27 2025 by rpki-client