Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
File: zQkyvbYQhcdt1kXB5263ERdUe5M.mft (raw, json)
Hash identifier: voOrcuvm4fnLW9yYpzeaymOUInT1d8wYKVi3STBwcxs=
Subject key identifier: 29:43:5C:B8:6C:57:1A:45:F4:0F:E4:1B:14:B7:BB:03:6E:2B:23:71
Authority key identifier: CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
Certificate issuer: /CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Certificate serial: 0196771E89473931AC97534B21593F630319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
Manifest number: 0D6F
Signing time: Sun 27 Apr 2025 12:00:11 +0000
Manifest this update: Sun 27 Apr 2025 12:00:11 +0000
Manifest next update: Mon 28 Apr 2025 12:00:11 +0000
Files and hashes: 1: 1QvSwwMrqLMtK3WgrE7-BjuJNZU.roa (hash: xHdOOR5x+I+BVkrKwEv1LdA4W3/XGAhIP6d+Tp6sbDA=)
2: zQkyvbYQhcdt1kXB5263ERdUe5M.crl (hash: 1WYAc+xf7smbac/WlGaUPkK/9o6dKzbFJF7b5/7aSGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:89:47:39:31:ac:97:53:4b:21:59:3f:63:03:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0932bdb61085c76dd645c1e76eb71117547b93
Validity
Not Before: Apr 27 12:00:11 2025 GMT
Not After : Apr 28 12:00:11 2025 GMT
Subject: CN=29435cb86c571a45f40fe41b14b7bb036e2b2371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:6d:16:ac:ef:0f:21:96:fd:4f:b0:a1:11:
73:5c:a8:a7:4d:49:6c:3a:df:e8:94:42:bc:36:7b:
7c:2e:81:6c:dc:75:6c:4f:68:31:5c:8a:a1:64:4a:
14:13:9e:68:13:fb:7b:e3:c4:8f:b5:b6:e5:45:84:
9e:38:5c:25:71:e6:c0:f5:cd:c2:c4:67:e5:fe:53:
ad:ab:b0:ac:cc:62:c5:fd:5d:01:7f:94:2e:8e:6d:
57:80:74:6c:20:12:7d:6e:bc:56:f1:77:81:8e:2a:
0f:ea:50:0b:c3:f0:e0:f1:9e:2a:f3:ba:8e:f7:6a:
13:bd:c0:74:fe:aa:0e:5f:bf:59:68:12:f4:76:f2:
19:df:22:dd:05:8d:ed:7f:17:69:ae:df:01:da:d8:
9f:2f:b6:16:33:a1:f2:5f:1f:e5:c8:1b:53:52:37:
a1:82:59:91:67:5c:b7:0b:23:65:bc:65:6a:0d:8c:
0e:bb:f3:16:d6:c8:fd:fd:e4:7a:0d:2e:77:83:38:
6c:fe:2a:1c:8e:33:53:62:14:39:4a:c3:e5:f6:f7:
c5:ff:7a:c9:85:8c:69:6f:1b:8b:77:4d:49:16:30:
31:54:9b:53:17:f6:5d:87:23:e7:d8:d1:07:5e:79:
cf:31:ba:44:7e:1d:b5:e2:25:e7:6c:c7:81:df:81:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:43:5C:B8:6C:57:1A:45:F4:0F:E4:1B:14:B7:BB:03:6E:2B:23:71
X509v3 Authority Key Identifier:
keyid:CD:09:32:BD:B6:10:85:C7:6D:D6:45:C1:E7:6E:B7:11:17:54:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQkyvbYQhcdt1kXB5263ERdUe5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a8b1f-ca72-4eda-a717-482c86db2040/1/zQkyvbYQhcdt1kXB5263ERdUe5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:92:d8:6b:4c:f8:0d:26:66:9d:b1:a8:35:1a:06:be:63:e3:
a4:bf:1c:2d:dc:5c:79:03:28:ca:dd:08:32:af:3d:ed:6d:b2:
8d:74:50:3f:19:bc:9d:72:f8:a9:9d:64:2e:a8:33:06:3c:72:
6f:34:11:fd:8f:3d:1a:f7:ef:85:cc:10:39:6a:36:ea:fe:9e:
7b:3d:b9:7c:99:54:e4:9c:54:ba:f4:54:3e:76:2e:c5:7a:6b:
09:5e:ec:11:16:8b:9a:ee:42:38:f1:f3:91:29:5a:fd:f8:67:
06:58:bd:9b:5f:c6:3e:08:44:64:42:75:34:be:c7:5d:49:fe:
89:c7:ce:06:dc:1d:a7:7d:93:3f:19:1e:4a:3b:1d:2d:74:b8:
55:3d:bb:c6:4b:1c:99:98:77:74:13:7e:f2:10:a2:51:7a:fb:
b6:b2:22:e5:dc:6c:21:9c:30:9a:dc:72:ba:33:96:45:7b:81:
cf:b9:f6:73:d6:ee:39:d4:1c:3f:8a:ca:03:a2:85:8c:2a:6a:
dd:8c:7d:27:75:1d:b6:26:27:8f:fe:09:a7:3a:31:92:5e:ad:
52:26:09:b8:fc:fc:71:ff:78:54:e4:a1:b0:e7:4d:f9:38:fa:
eb:88:cc:40:40:99:0f:36:a9:c7:66:e4:67:aa:10:66:47:6e:
63:c9:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:28 2025 by rpki-client