Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
File: z_jVsaHSJUEodoK9xpNv8sUlq7w.mft (raw, json)
Hash identifier: Ph0kDGvRdQ9LGvIfFt+vYneewUo4kkxBsaCY/+cpr9s=
Subject key identifier: 1D:5E:7C:7F:33:67:94:44:90:E5:3E:92:6D:3D:B0:A6:09:11:59:B6
Authority key identifier: CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
Certificate issuer: /CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Certificate serial: 019684DA5C0BED56CDE65F8D7B77D625603E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
Manifest number: 0AAF
Signing time: Wed 30 Apr 2025 04:00:24 +0000
Manifest this update: Wed 30 Apr 2025 04:00:24 +0000
Manifest next update: Thu 01 May 2025 04:00:24 +0000
Files and hashes: 1: z_jVsaHSJUEodoK9xpNv8sUlq7w.crl (hash: 7odnICGMKh0O3Zf4F9pEd+TrkRhOAiaVY+/QOkXdSms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:5c:0b:ed:56:cd:e6:5f:8d:7b:77:d6:25:60:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff8d5b1a1d22541287682bdc6936ff2c525abbc
Validity
Not Before: Apr 30 04:00:24 2025 GMT
Not After : May 1 04:00:24 2025 GMT
Subject: CN=1d5e7c7f3367944490e53e926d3db0a6091159b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:7c:80:f9:5f:0b:ad:04:6f:7a:45:28:bb:
92:de:b0:07:18:04:f1:25:87:5c:f6:b9:be:a5:58:
06:69:d5:d0:89:47:45:69:0a:b9:27:64:de:e1:91:
d1:bd:2f:2a:94:07:31:8f:8e:c8:b1:d3:97:0e:fa:
40:2b:bb:4e:6d:0b:df:60:3d:d6:de:53:ee:bf:2f:
31:b3:38:57:ff:61:e0:18:f2:8c:4d:cb:7a:2b:5d:
e0:d6:44:6a:ec:ac:7c:5f:93:aa:d2:fe:55:9d:89:
74:4f:f4:72:12:39:e7:55:9c:1c:4f:60:56:9d:92:
74:a8:ad:93:44:a2:22:46:b5:70:60:37:34:34:b6:
3b:36:24:90:38:ad:c9:5d:99:bd:0a:f4:b6:75:82:
29:a3:99:57:46:af:15:a4:67:3f:23:5b:c7:66:ce:
5c:8e:33:1c:ca:96:40:27:3d:89:3c:1c:14:77:96:
b3:8f:02:46:1d:3b:d5:80:21:4e:c2:2d:24:5e:5c:
b5:a0:b2:96:d4:39:2c:ad:a4:3e:12:a0:0b:7c:14:
8d:fb:03:3c:4f:d7:aa:a1:80:bf:30:e5:e5:64:3c:
0f:92:ff:ed:2f:a5:bc:df:56:06:2d:ce:02:dc:eb:
f4:5c:97:ad:b4:e2:07:99:a8:83:ee:4a:32:41:4f:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:5E:7C:7F:33:67:94:44:90:E5:3E:92:6D:3D:B0:A6:09:11:59:B6
X509v3 Authority Key Identifier:
keyid:CF:F8:D5:B1:A1:D2:25:41:28:76:82:BD:C6:93:6F:F2:C5:25:AB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_jVsaHSJUEodoK9xpNv8sUlq7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0ca310-3dfe-413d-8f4f-5afe1ce92c4c/1/z_jVsaHSJUEodoK9xpNv8sUlq7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:85:09:44:84:95:fd:53:17:37:2e:a6:c0:88:a4:65:86:88:
df:61:fd:6d:38:03:8f:2d:67:30:b3:96:f8:2d:56:e6:dd:1c:
c2:21:01:36:38:f2:9b:1a:52:22:54:8d:b1:89:7d:11:05:15:
8c:b2:5d:f1:b2:2d:59:fa:57:0c:55:9b:6c:6c:f3:29:f5:df:
74:07:94:da:79:0e:d4:18:85:14:a2:a4:32:be:39:c5:b7:0c:
6d:d3:3f:62:32:06:1b:56:6b:a5:01:97:0c:ad:05:72:18:ba:
ee:1a:9e:d3:57:15:4e:ae:a6:67:09:97:b9:db:0a:7b:89:f3:
48:71:1a:90:4b:3d:71:e6:c3:f3:6b:28:8a:80:70:9c:63:41:
2c:d0:3c:c1:e4:65:d8:2e:41:0e:a6:b5:85:52:57:37:11:55:
a3:fa:1a:1f:e4:95:9d:d7:18:b1:37:06:cb:b3:71:5e:da:a2:
fd:35:25:d7:a0:82:6e:7e:ff:fb:68:5e:a4:46:41:4e:5c:92:
81:2a:24:18:62:40:85:1c:e4:f3:fe:c3:da:b2:39:f5:cf:9e:
10:e3:de:62:d0:9a:dd:09:e6:60:e7:8b:d7:eb:f1:f3:7c:bb:
56:17:32:69:a3:23:22:2b:ee:29:41:ae:af:ea:0a:57:8c:e7:
0c:25:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:14:25 2025 by rpki-client