Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
File: z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft (raw, json)
Hash identifier: v15TA7z1JjK0ytJUudWTeWcK6VmvegFMSm5TQz7CzRs=
Subject key identifier: 0C:CA:22:71:FC:76:4B:ED:6F:20:24:62:7C:F6:E3:C1:3E:82:FE:79
Authority key identifier: CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
Certificate issuer: /CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Certificate serial: 01967ED882360BCDDB66FC416E1C7A83C581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
Manifest number: 0778
Signing time: Tue 29 Apr 2025 00:00:40 +0000
Manifest this update: Tue 29 Apr 2025 00:00:40 +0000
Manifest next update: Wed 30 Apr 2025 00:00:40 +0000
Files and hashes: 1: 5bXMtvifhVDq7H47Fs_jM8oEJTE.roa (hash: XDNweQrnefEUAs1XE6ahMBTdwcWIhUFAj3AVL2+wAn4=)
2: 70CzLPwxRloncyisKHkgg2A7mmU.roa (hash: rFCcI5P5iNazLy7zOb4v8GZdZ3RW8sg4bh+Lo3jxJQw=)
3: z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl (hash: lI+ZeN5dNYtiAGatkqqsr0GFUM+qnZNKLyuSGSRoziw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:82:36:0b:cd:db:66:fc:41:6e:1c:7a:83:c5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc0f99d79793a6f01e9ad627d1f968b0c2d0f3b
Validity
Not Before: Apr 29 00:00:40 2025 GMT
Not After : Apr 30 00:00:40 2025 GMT
Subject: CN=0cca2271fc764bed6f2024627cf6e3c13e82fe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:34:ce:9b:00:2c:f6:a1:9d:ed:42:ec:af:
87:0a:d3:6d:0b:7c:34:3f:2b:61:3b:ca:d6:61:ce:
4e:70:64:ac:cc:cd:0a:77:a9:9a:6d:ec:a8:04:fb:
31:d9:3c:a5:4c:7e:6b:2a:4e:3d:78:07:67:35:4a:
8f:6e:a0:69:24:9b:2e:78:ba:0a:95:6b:06:e1:e5:
a9:de:e9:79:57:09:27:05:b4:5b:b5:d8:16:02:9b:
33:ff:ec:86:3a:db:07:87:93:3f:73:bb:39:86:2d:
2d:b9:66:e2:33:57:0c:b9:35:68:69:ec:35:89:d3:
76:af:39:49:0a:80:c6:93:c4:e1:f2:4d:0c:46:69:
fb:81:46:2a:c9:a2:9f:fa:73:17:55:e8:35:67:3c:
3b:cc:d7:b2:f4:9b:b2:a9:db:cb:f9:62:97:47:fa:
de:7c:20:2f:c2:e5:25:ac:6f:26:9a:c7:05:c3:f8:
b3:ef:b3:af:16:a9:b5:5a:49:c5:66:ea:4c:fd:61:
a8:c7:3f:3b:4d:1b:51:8b:36:29:07:b5:c9:87:76:
d4:ad:3f:d3:f6:76:9a:c7:bb:84:93:d2:bd:4b:ca:
da:d4:73:c6:7d:50:09:fa:1d:2f:03:cc:9b:b5:0d:
96:77:3a:d4:8f:94:a4:2b:ca:30:cd:7f:51:3e:9f:
80:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CA:22:71:FC:76:4B:ED:6F:20:24:62:7C:F6:E3:C1:3E:82:FE:79
X509v3 Authority Key Identifier:
keyid:CF:C0:F9:9D:79:79:3A:6F:01:E9:AD:62:7D:1F:96:8B:0C:2D:0F:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8D5nXl5Om8B6a1ifR-WiwwtDzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c5dd3e-937b-434f-bbb8-80cc86e51822/1/z8D5nXl5Om8B6a1ifR-WiwwtDzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:58:50:68:1f:32:c1:e4:9b:2b:0a:c5:be:a6:12:59:a6:6a:
11:b3:c7:12:f1:76:4b:59:0e:59:fd:c2:7e:b0:39:80:15:37:
6f:91:7e:da:8a:f4:b6:67:50:68:ac:b8:8a:a6:9f:61:17:72:
70:60:37:df:cd:db:81:3a:90:87:06:9d:5c:7d:35:08:fb:4b:
88:19:b3:fe:a3:fc:05:f3:fe:30:3e:00:28:fa:82:1f:e4:74:
d5:37:d1:f3:fa:87:22:58:15:fc:f0:e5:73:d2:95:79:5c:5f:
8b:83:5c:8d:13:77:e2:5b:de:ec:d6:95:2b:26:a7:e1:6f:ca:
e5:47:f9:4b:d4:9c:ef:5c:10:e9:a9:3d:f2:f4:ee:da:6d:bd:
e3:c2:61:b7:fe:10:3b:ce:95:f4:ef:a7:fc:89:84:12:75:91:
59:ea:e5:cf:f0:45:ae:19:fa:2e:9b:60:89:de:ac:2f:42:ea:
81:3b:64:84:12:ef:92:d1:d0:eb:0a:77:65:44:8b:7f:c8:82:
f8:99:6f:23:a6:bf:a6:27:63:80:94:97:6c:bc:a7:f6:7a:ce:
a2:ab:67:15:f5:00:3e:40:bf:c7:4b:b7:b5:eb:d1:95:ab:b1:
c3:80:f4:6b:1b:04:9a:56:72:fe:43:ac:34:54:c8:ce:0c:f0:
9f:73:77:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:29:30 2025 by rpki-client