Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
File: z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft (raw, json)
Hash identifier: imNxJS4hdFvYHZQXSIDKJUYMW7rFsZr6zpDXEsX9WR0=
Subject key identifier: 9A:B0:D7:10:AC:D2:15:60:99:40:A1:D6:E7:FB:D8:05:DE:4E:E0:89
Authority key identifier: CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
Certificate issuer: /CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Certificate serial: 01968A38471392AD7831538EC75EBAD756AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
Manifest number: 0BB5
Signing time: Thu 01 May 2025 05:01:05 +0000
Manifest this update: Thu 01 May 2025 05:01:05 +0000
Manifest next update: Fri 02 May 2025 05:01:05 +0000
Files and hashes: 1: ENbIvSiky0xTTmpR2FVxu0--bgo.roa (hash: kRIWqam56yg8b60+kfVGTR0gSg2YZCsqJwpEULom/h0=)
2: nNWdjwr0xgGVJaCe_DYGorxBhkQ.roa (hash: SXK0O56Ci3eJ9gJYE9BhG0c41FN4Hi9wlYESeQNJAmY=)
3: z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl (hash: sTAmce2txY8ojM/zVsC6gwyPcZonKbzXUS7T/iM7dgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:38:47:13:92:ad:78:31:53:8e:c7:5e:ba:d7:56:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfdb3d904b34440546b6241d7894d93300bcbd28
Validity
Not Before: May 1 05:01:05 2025 GMT
Not After : May 2 05:01:05 2025 GMT
Subject: CN=9ab0d710acd215609940a1d6e7fbd805de4ee089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:a2:cb:8a:0e:05:33:b1:95:96:13:ac:59:
34:eb:85:23:a0:a5:40:12:6e:1e:0a:5b:b8:52:90:
33:e0:01:8e:9c:64:59:ae:1e:a9:96:77:e0:f3:b9:
5d:d1:f5:2e:ac:ec:1b:e9:be:67:c4:2f:19:b9:5c:
01:0b:03:f9:c3:71:95:a7:e9:62:c6:47:81:87:35:
a7:03:6d:ab:c5:a8:a0:2d:af:46:b9:93:af:0e:ab:
e7:cc:21:9d:49:93:5c:ed:64:8a:1e:a6:48:88:12:
bd:7d:d2:d6:9b:d4:59:3a:b6:d0:fa:4b:79:cf:86:
b5:4b:b7:7f:53:df:f9:9c:de:34:70:28:36:4b:a2:
88:12:fc:4d:1e:2e:86:8e:ab:14:6e:07:31:28:aa:
0c:81:43:73:ad:a2:74:12:f5:71:0c:d5:f2:f2:7a:
fe:05:4d:99:b1:26:c8:4f:0a:d7:ee:7c:48:9f:fa:
89:41:a6:e4:57:4d:54:f7:ce:d1:bc:6b:79:c2:63:
2e:33:96:c2:14:15:25:a4:4b:53:7c:56:f1:6f:36:
21:0a:6c:9a:99:5e:1b:95:95:d9:50:1a:28:9a:5c:
8a:c5:07:9c:92:68:db:07:c7:bf:2f:1b:b4:af:bc:
de:8e:0a:0b:45:e0:b3:92:02:02:e1:88:ea:0d:16:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:D7:10:AC:D2:15:60:99:40:A1:D6:E7:FB:D8:05:DE:4E:E0:89
X509v3 Authority Key Identifier:
keyid:CF:DB:3D:90:4B:34:44:05:46:B6:24:1D:78:94:D9:33:00:BC:BD:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9s9kEs0RAVGtiQdeJTZMwC8vSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/925ab9-21fe-4bbf-ac0e-6e7561535bbd/1/z9s9kEs0RAVGtiQdeJTZMwC8vSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:28:02:a6:af:6a:cd:ff:90:02:40:a9:5b:57:52:3c:e5:64:
84:39:2c:2f:a2:a8:bd:74:0f:aa:04:73:d8:f4:e0:e0:59:2c:
0e:25:31:dc:b9:f0:dc:8b:0f:34:81:d5:bb:64:2a:81:b8:60:
a3:cb:65:e9:a1:58:a4:4e:05:df:d8:48:b3:41:4b:50:87:de:
8f:11:33:9d:c2:5d:11:47:dd:c5:91:de:bb:8f:cb:5e:f5:a0:
2c:bc:cd:52:47:23:d4:d4:bf:97:b2:c0:c0:f6:81:95:12:94:
2a:28:24:ba:63:eb:9a:03:65:51:15:8b:f4:d5:50:da:58:ba:
3b:f4:87:a9:cc:c1:80:81:58:b6:c9:67:cd:59:f9:91:c5:c0:
7a:63:46:36:8e:9f:55:b0:a2:fe:bf:3e:22:db:67:65:96:bc:
15:5a:fa:fb:0f:88:58:b2:b1:69:9f:b2:37:7e:67:b1:55:09:
9a:0e:63:01:be:3d:bc:53:b1:b4:c8:2f:bf:b6:33:c6:b9:ac:
13:74:ae:a3:79:7e:61:92:71:05:cd:34:4d:21:88:a4:0b:85:
ea:83:f5:8e:1a:f6:ff:4b:8d:86:6a:ba:d5:40:89:de:f9:c7:
78:32:cb:90:89:ef:f7:2f:6f:d4:9f:50:e6:a2:03:15:56:ff:
98:04:9b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:54:07 2025 by rpki-client