Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json)
Hash identifier: ViUuwLMzfC0pqBa2QVnBFcvteVdWw88Jowx/HTas9Ik=
Subject key identifier: 6C:E3:3A:46:21:A0:8D:36:74:57:5F:D3:15:11:A1:C2:82:3E:F7:6A
Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Certificate serial: 01967AFB8D20857700EA7D304602AC0D1EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
Manifest number: 1254
Signing time: Mon 28 Apr 2025 06:00:27 +0000
Manifest this update: Mon 28 Apr 2025 06:00:27 +0000
Manifest next update: Tue 29 Apr 2025 06:00:27 +0000
Files and hashes: 1: C_tBNxeBdMQFQvAqAIQOAGk3NV0.roa (hash: ytHvNr9cmIrq9gpmtc0zxz6E+7ODTCXhvZEm/AZ4ML0=)
2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: DGiJabKbbFHOvkEMP3Cu4LDUgmoj8UYumAncUGpMbv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:8d:20:85:77:00:ea:7d:30:46:02:ac:0d:1e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25
Validity
Not Before: Apr 28 06:00:27 2025 GMT
Not After : Apr 29 06:00:27 2025 GMT
Subject: CN=6ce33a4621a08d3674575fd31511a1c2823ef76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:28:35:0a:f8:e8:96:52:de:19:a3:84:46:
c6:bb:2b:70:2b:34:04:b1:d3:4c:e8:f7:78:6a:67:
19:fd:b0:8c:6f:5c:54:35:ca:47:90:cd:9f:04:5e:
af:ab:2e:57:e4:23:d6:8f:44:7e:27:92:1a:38:ae:
ac:b2:6d:f0:a4:ce:9c:5a:c5:53:60:e7:8d:f4:df:
37:a0:8a:ad:d3:8f:7b:28:b7:be:44:03:df:61:05:
1b:24:ba:20:bb:51:33:89:ad:3f:99:9a:c4:bc:b2:
62:f8:01:bb:57:23:90:2a:44:36:6f:53:8f:dd:53:
a0:2c:3d:af:31:42:82:23:b1:0c:c8:b5:c0:15:d7:
bb:6b:6d:bd:00:cd:64:6b:43:ca:75:06:b8:15:57:
17:63:32:cb:db:96:0f:10:3a:87:de:7b:82:a6:45:
69:e4:90:bb:57:4c:03:0c:b8:4e:a3:53:20:7c:14:
40:73:33:f2:bf:d4:12:23:f6:2e:81:2e:18:44:44:
34:96:30:a4:9c:db:5f:12:91:9e:78:0e:fe:20:2f:
ee:2f:26:c9:5b:c9:49:e5:16:52:b1:2f:26:30:65:
54:83:70:31:37:63:33:f8:f8:62:60:3c:21:a1:d8:
e9:cf:f3:8b:01:07:64:42:db:c6:f5:f4:64:c5:a0:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:3A:46:21:A0:8D:36:74:57:5F:D3:15:11:A1:C2:82:3E:F7:6A
X509v3 Authority Key Identifier:
keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7e:8e:85:ae:92:bf:52:29:67:4e:8b:26:e5:ff:28:eb:ae:
03:37:62:d5:ad:95:0b:6f:88:24:6b:e1:52:26:a9:6f:68:eb:
83:45:0b:38:f5:99:a4:02:b2:6c:dc:7d:fc:7a:6d:09:93:33:
ce:37:90:e3:f7:03:c4:11:3c:81:c2:28:35:38:fa:0c:3c:e0:
39:e9:e9:28:e0:f4:cc:fa:c1:49:1b:dc:32:2a:0f:9d:e8:5b:
06:49:40:95:e4:f5:5e:95:c0:b9:5e:96:52:a7:6e:e6:0d:f3:
3d:39:97:d5:11:96:54:f9:91:80:88:c4:5b:8d:b6:24:ea:ec:
0f:72:be:8e:4f:63:5c:7c:98:09:15:01:8b:5f:1f:fb:7a:80:
5d:2c:a8:2c:b6:02:07:be:42:46:be:da:b3:55:19:85:c3:db:
14:af:8c:47:61:a8:88:b1:28:71:f6:c3:bb:f9:66:2c:13:70:
f6:17:4c:48:4b:f8:6f:d5:58:4d:80:cd:e5:aa:70:59:4b:bb:
ae:31:91:c1:ba:3e:59:dc:39:b3:0e:07:b6:bc:f0:36:ac:25:
a9:9e:8c:4d:e6:ad:c3:71:17:49:f1:a5:a5:c4:de:e0:53:ed:
4d:ec:46:81:6b:25:c9:3b:77:63:ea:0d:12:29:7d:67:1e:05:
a8:2e:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:29:11 2025 by rpki-client