Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: rHzM2f0khLxT6CBFkFqv8xVNffdpXnFeb4DBujjiQOA=
Subject key identifier: 94:88:AB:D6:F5:41:3A:20:4E:43:BD:09:D6:E7:9B:A4:11:EB:BC:18
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0196726642360621C4DB519091E2C4F7DE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0BF5
Signing time: Sat 26 Apr 2025 14:00:26 +0000
Manifest this update: Sat 26 Apr 2025 14:00:26 +0000
Manifest next update: Sun 27 Apr 2025 14:00:26 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: 7sMbELxEwYRVKF94np8+okvLxi9i0qqLi9q7ZQMHgZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:42:36:06:21:c4:db:51:90:91:e2:c4:f7:de:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: Apr 26 14:00:26 2025 GMT
Not After : Apr 27 14:00:26 2025 GMT
Subject: CN=9488abd6f5413a204e43bd09d6e79ba411ebbc18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:98:53:c1:a2:08:a8:17:3a:8f:64:fd:0d:46:
13:4c:71:dd:f8:be:fe:10:98:c5:7b:cd:9f:62:c6:
9b:92:16:44:27:c0:be:a9:56:2d:6c:df:a4:b6:00:
a2:21:80:c4:55:ea:d6:4d:d8:28:89:42:8e:80:a5:
e7:25:98:98:2a:ca:10:8c:53:62:a6:a5:c2:6c:50:
30:de:8a:66:15:ca:ab:38:6e:f3:de:f6:1d:3b:2f:
a8:87:5f:b8:ff:3b:fc:8d:5f:de:7d:c5:cf:77:4f:
74:34:e7:35:00:11:5e:42:58:4e:9d:86:6a:82:1a:
6b:e0:72:b3:56:e0:6c:b2:fc:bf:76:5d:16:35:db:
7a:22:c2:c2:3c:6f:31:b3:b0:78:ab:5c:b1:c5:71:
f4:dd:4f:af:c9:17:f7:40:6e:af:00:41:68:a7:a7:
72:b1:db:87:e1:7a:a5:b0:6c:a7:df:f9:5b:4e:06:
49:2e:ad:d0:4d:73:50:82:db:08:e2:c6:07:6c:52:
04:1e:3e:8d:5b:ef:97:f8:5f:08:4a:20:65:4d:d3:
d7:a8:01:fa:42:99:a6:f1:1d:41:f1:b1:63:d2:73:
56:7e:64:00:16:3b:14:16:9d:22:8d:3e:22:40:30:
0f:38:a9:1a:46:2e:ef:dd:8f:e0:78:e0:8b:d0:17:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:88:AB:D6:F5:41:3A:20:4E:43:BD:09:D6:E7:9B:A4:11:EB:BC:18
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0f:20:26:ee:fc:bd:98:e0:cd:6c:89:5c:73:23:51:f9:d5:
9f:b0:db:41:71:3d:c4:d0:a8:11:5c:43:5a:be:e1:58:25:5e:
f9:63:58:05:fd:7f:4b:0c:43:a5:44:c3:b3:de:c4:c9:92:a2:
41:42:36:b7:70:3e:5e:d1:ac:bb:36:9a:c3:6e:0d:3f:3e:77:
20:81:d2:1d:22:62:ba:f1:4c:2b:25:32:37:01:fd:95:4e:28:
4b:70:f5:4f:cc:19:ad:3c:dd:a1:eb:9d:48:57:ed:9c:c4:f5:
76:68:03:86:33:86:21:5d:8e:fa:2b:ff:0c:13:8d:22:7f:76:
c3:52:5b:c8:4a:97:72:03:9f:53:e5:73:ca:ca:13:63:8b:e5:
ae:42:38:8b:07:a1:35:13:99:94:5f:65:e5:32:2f:5c:ca:7e:
a2:c5:7f:33:ce:1d:db:f5:40:17:4c:34:29:47:69:9e:8b:5e:
96:4c:9b:47:40:bf:c1:43:2c:1c:00:54:c4:70:ed:a9:5e:db:
f6:2b:c2:93:2c:7b:18:21:99:bd:cd:74:56:cb:fc:04:42:34:
24:c2:c1:2c:58:b0:d9:71:3e:19:99:c5:a8:cb:3c:ca:56:c3:
ab:25:a7:0b:e6:87:6f:4d:6d:0c:23:35:88:ba:c0:f8:cb:08:
06:89:62:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:26:32 2025 by rpki-client