Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json)
Hash identifier: BQFVc81+ov0gEd8E6t8dnC6VL5nABE/LjPQmTZ1gamI=
Subject key identifier: E0:35:34:B4:5C:8C:78:42:B3:83:D9:EC:6E:46:1A:F9:C3:0E:D4:3D
Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Certificate serial: 0196895C39A724A72A8299211548B46C910A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
Manifest number: 07DB
Signing time: Thu 01 May 2025 01:00:44 +0000
Manifest this update: Thu 01 May 2025 01:00:44 +0000
Manifest next update: Fri 02 May 2025 01:00:44 +0000
Files and hashes: 1: 1-TNKHUQBd0JEmyJIvaoUUde-kRY.roa (hash: G2e9u8Y6Td6qmoghBsuFWq6jIrLhCoLM2r2ooj9I44k=)
2: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: 5BgXnz06F2XFLpOVdrWvOjzB4IvlezsA78oHNm2I2/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:39:a7:24:a7:2a:82:99:21:15:48:b4:6c:91:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f
Validity
Not Before: May 1 01:00:44 2025 GMT
Not After : May 2 01:00:44 2025 GMT
Subject: CN=e03534b45c8c7842b383d9ec6e461af9c30ed43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:35:c9:34:50:72:45:79:bb:94:0a:29:db:
66:cf:72:00:8d:51:fb:b0:6d:60:76:8e:49:ef:5c:
dc:dc:36:a3:37:3b:e6:b7:3d:c5:59:c0:fa:8e:9c:
bd:ca:94:88:a4:b9:0b:90:0d:c2:cc:66:8c:6e:bb:
a0:9a:5f:3c:2a:4d:c1:9e:39:da:9a:be:3a:03:01:
12:b4:3e:33:cc:9d:b0:f7:62:19:0f:4d:90:ae:9c:
a1:e9:8c:9a:b1:af:be:cb:a3:d0:92:50:d5:62:8a:
80:ef:a9:6f:f4:90:d0:fc:7f:ab:63:3e:07:3e:99:
ba:54:96:17:a8:ff:a3:e7:29:ea:a6:28:e2:33:12:
a8:3a:e9:d4:5c:e3:8b:d8:a2:c3:44:0d:fb:9c:9e:
71:3e:47:44:00:9b:b5:0a:e7:2b:84:5a:71:90:58:
bb:5e:0a:1a:29:74:3e:be:41:09:0b:c3:ba:61:40:
09:34:28:c9:ce:39:44:48:43:b7:0e:36:69:f7:c1:
74:b6:31:f0:7e:e8:30:47:91:a8:b4:01:ad:34:65:
92:3c:c8:51:d2:b1:45:54:9c:79:75:7e:80:f2:7f:
48:39:fa:08:68:7f:d0:c3:9a:a5:cf:22:46:d7:33:
ca:61:f2:f5:b5:44:ff:ad:f4:36:88:01:43:cc:61:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:35:34:B4:5C:8C:78:42:B3:83:D9:EC:6E:46:1A:F9:C3:0E:D4:3D
X509v3 Authority Key Identifier:
keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d1:af:bf:f3:8d:d5:fe:c6:e2:e1:c2:ca:65:e3:61:57:87:
70:f3:6f:1b:8b:08:5f:f9:02:1d:76:d4:2d:fc:e7:b1:ee:c9:
16:7a:53:ab:20:04:3c:4b:33:b7:50:7f:56:44:7e:a3:f4:ef:
4f:fe:02:5f:4a:ac:36:55:a5:a1:53:06:58:bc:3a:c1:29:e2:
c3:0f:fd:e7:c5:6a:a2:6d:f3:d5:3b:6c:bb:9d:61:0f:ed:68:
b7:50:d4:f6:75:90:8e:7c:ac:94:09:19:03:b3:5b:9c:b5:21:
a1:ae:f8:0b:34:95:71:89:80:bc:ae:52:e8:ac:30:fe:1d:e1:
df:05:ff:4b:84:77:01:f2:e1:98:81:ea:80:37:f7:36:1f:7c:
09:5c:00:04:3c:92:db:44:52:28:a0:55:22:77:c9:cb:40:7e:
39:fb:19:67:11:86:2c:f8:0c:ba:e4:0e:93:ca:bf:70:76:0c:
04:5f:21:0e:2e:ad:44:a3:c2:ff:9b:0c:cf:31:a3:c1:18:93:
d3:6d:39:71:00:62:33:07:85:56:0c:99:b4:23:2d:68:57:8b:
ab:68:59:06:c0:08:30:c1:00:bf:c9:64:65:fd:4b:a2:75:66:
d7:dc:4c:3b:7b:37:a5:84:30:82:31:08:f3:20:e5:da:59:a8:
b8:6f:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:36:49 2025 by rpki-client