Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: nopg8ib63IsD5VnLrj2LT3T3bny2MSbwPxa5neQTA/A=
Subject key identifier: 5A:3A:60:DA:4E:D4:C8:E6:62:23:0A:56:45:E1:AC:30:DD:15:36:59
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 01969A18EB594B256D1F7CA428FC6CCB09FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0974
Signing time: Sun 04 May 2025 07:00:46 +0000
Manifest this update: Sun 04 May 2025 07:00:46 +0000
Manifest next update: Mon 05 May 2025 07:00:46 +0000
Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=)
2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: Zqia/6gkF+D17FSDCoN97RJLAqqQVGboIqoz5x2+s/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:18:eb:59:4b:25:6d:1f:7c:a4:28:fc:6c:cb:09:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: May 4 07:00:46 2025 GMT
Not After : May 5 07:00:46 2025 GMT
Subject: CN=5a3a60da4ed4c8e662230a5645e1ac30dd153659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:c4:a8:e0:6e:53:e4:b0:a6:6d:63:24:b4:
fa:31:4a:b2:ce:ec:5f:1b:35:0c:67:c0:6d:37:4c:
69:d1:91:61:b7:91:b5:1d:85:37:38:71:38:b0:0e:
84:bd:b6:3a:e1:80:b3:63:af:55:f8:30:92:1f:40:
52:f3:a8:eb:a6:30:d8:62:c4:d6:8b:71:7c:51:69:
7c:f2:5f:11:3f:84:e5:a2:25:61:97:fb:1b:5c:9a:
3b:54:fa:3f:0f:2f:f4:ad:24:ff:af:c2:c0:00:7d:
bb:fd:3f:9f:6a:9c:9f:f0:f2:77:98:86:2f:eb:19:
f9:aa:6a:03:5a:ad:e4:cb:f6:40:40:b5:f8:54:bc:
1e:be:84:8f:e9:8b:f9:e7:50:92:e5:ba:a2:2d:46:
8f:7e:d4:56:ad:32:25:7e:4e:ce:6c:c4:9b:23:32:
68:6f:74:03:f7:86:46:63:04:92:cd:cf:e4:a8:d1:
fd:81:8d:4a:0b:1a:cc:0e:d4:0e:f7:f9:44:6c:f5:
6e:52:a7:eb:c7:e9:86:59:02:97:fa:c2:87:de:4e:
f3:0f:7a:4e:4a:62:d0:91:6a:9b:9b:b9:17:02:4d:
92:0f:19:60:ce:8b:9e:0a:14:68:57:7f:1d:5a:e9:
7d:c9:1d:44:cd:58:f3:60:c7:1e:5d:34:04:69:2b:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:60:DA:4E:D4:C8:E6:62:23:0A:56:45:E1:AC:30:DD:15:36:59
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ac:f5:28:a9:f6:f5:15:da:1b:d7:bc:88:1d:e2:d6:20:1a:
82:f4:08:f7:09:a5:93:f2:a8:ec:e9:7d:00:7a:4c:5d:c0:02:
83:2d:f6:49:bd:69:91:a5:03:27:95:07:16:aa:1a:04:0d:d5:
80:81:6a:8d:07:6b:8f:eb:35:20:74:5b:93:17:1f:38:d1:a0:
67:a0:15:92:a5:e8:cf:4a:41:3d:22:ee:06:d5:62:5c:d2:2b:
a5:78:be:c5:b5:b9:06:11:d4:74:f3:9e:7c:eb:de:af:91:c9:
72:80:6e:c7:f3:13:f4:76:60:3d:65:c5:c2:2a:c3:01:0f:30:
77:00:07:96:14:58:70:21:6d:ed:1a:22:3f:ad:00:fa:01:89:
56:9d:64:ad:64:99:43:92:e8:18:20:0e:e8:ef:5f:6d:91:17:
65:2f:52:c5:65:7c:ef:95:2d:04:16:ac:55:a3:40:eb:2d:71:
8e:c0:49:6e:78:46:33:73:f8:85:21:95:6b:56:d7:fd:e9:1c:
ff:ed:ef:71:64:e1:0f:bf:0f:25:3f:79:e5:99:ba:a7:1b:99:
12:db:ea:4b:f7:39:19:d5:71:c8:fd:1a:75:73:68:a3:14:52:
a6:10:be:46:31:c1:d7:5d:3c:41:07:42:09:6c:0f:38:66:87:
d5:a3:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:12:49 2025 by rpki-client