Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
File: z2wawDKfN1f-h9q2IGq8FXHES7A.mft (raw, json)
Hash identifier: klCMTH225X59EQfvWhcIPOIQ3diw0nUQH3OJhZoG32k=
Subject key identifier: 8F:41:5E:F1:6F:E6:16:95:19:D2:F4:49:8D:1B:1D:0A:CB:99:F2:52
Authority key identifier: CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
Certificate issuer: /CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Certificate serial: 0196925F662ECC67F7ED3ACC881263018DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
Manifest number: 151C
Signing time: Fri 02 May 2025 19:00:47 +0000
Manifest this update: Fri 02 May 2025 19:00:47 +0000
Manifest next update: Sat 03 May 2025 19:00:47 +0000
Files and hashes: 1: z2wawDKfN1f-h9q2IGq8FXHES7A.crl (hash: 9W2qGRx1oiH0mZAdoXqlK7eotOiAm9IcxD1vpZqKjtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:5f:66:2e:cc:67:f7:ed:3a:cc:88:12:63:01:8d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6c1ac0329f3757fe87dab6206abc1571c44bb0
Validity
Not Before: May 2 19:00:47 2025 GMT
Not After : May 3 19:00:47 2025 GMT
Subject: CN=8f415ef16fe6169519d2f4498d1b1d0acb99f252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:30:24:18:84:07:96:4e:70:c9:84:b0:10:
bc:b1:f1:cf:9b:26:52:a1:78:a7:c0:23:f8:9c:e5:
93:ac:d6:44:3c:44:ad:bf:8d:df:1c:58:ef:20:08:
2b:0c:7a:f8:6b:e8:d1:d2:2d:e0:0c:8c:ba:73:d6:
85:f3:18:85:8d:6f:1c:9d:f4:31:8f:6c:d4:37:48:
81:a7:9f:b8:92:59:bb:db:48:1d:36:08:d5:43:47:
3d:dc:aa:f2:01:79:4a:5b:75:8d:93:b2:5d:ab:e7:
60:6f:59:f0:b5:18:3a:c4:bd:5e:56:a4:0e:8b:4d:
1f:9c:1a:4b:83:91:93:25:09:e9:ea:bf:6e:b6:88:
dc:77:58:88:1c:0f:58:48:ab:ca:d2:09:38:80:bb:
78:c9:48:03:dc:2e:46:c5:d2:4a:35:9c:4f:ec:cd:
30:c1:72:c8:13:56:fb:87:da:ea:9f:44:41:75:37:
33:48:8b:4a:1f:34:17:05:79:d7:b3:65:1f:30:23:
77:42:7c:86:bb:f2:f4:fb:a7:e0:b1:55:77:39:f9:
e6:db:cc:3f:c6:9b:30:69:65:10:59:75:f1:48:ec:
cf:d6:0a:cf:a5:05:10:6c:d3:5d:0f:a2:9a:e8:e8:
0c:b6:4d:ff:55:75:44:c5:cd:62:9e:5c:73:02:fc:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:41:5E:F1:6F:E6:16:95:19:D2:F4:49:8D:1B:1D:0A:CB:99:F2:52
X509v3 Authority Key Identifier:
keyid:CF:6C:1A:C0:32:9F:37:57:FE:87:DA:B6:20:6A:BC:15:71:C4:4B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2wawDKfN1f-h9q2IGq8FXHES7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5374a8-c6d9-49a7-8cdd-1fce555d8fef/1/z2wawDKfN1f-h9q2IGq8FXHES7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:65:d0:90:5d:2d:26:8b:09:b0:6a:7a:f3:ae:53:99:b5:68:
fa:3e:62:30:99:5e:0a:0c:4d:62:f0:86:87:c9:aa:66:33:43:
7a:50:32:a5:8c:0f:ff:b6:99:3d:f4:96:fb:7c:08:68:ec:b2:
cd:c4:11:8c:3a:46:dc:7a:06:31:d9:09:9b:a2:67:08:2b:43:
70:ec:17:dd:86:71:ee:ba:eb:79:d4:b5:2b:0f:e3:8d:fe:a7:
3c:b7:81:1a:b1:04:94:e4:7b:9b:55:ee:c7:ad:e8:4b:a8:4c:
a8:0c:31:8e:14:97:6b:ca:a6:b1:24:73:f9:0c:65:82:00:77:
c0:bc:da:75:ae:24:84:bc:1f:4c:6d:68:23:60:93:c1:22:a0:
5d:43:e9:31:cc:6e:8e:15:7e:31:c5:d4:f4:d2:00:8b:83:d0:
71:27:55:b7:65:f6:2d:bc:9d:69:d5:a6:36:87:d6:af:38:2b:
28:cd:c5:b5:f2:79:fc:f8:f7:6c:14:08:dc:49:9f:3e:15:62:
f7:04:e6:a9:12:04:56:2a:b2:6a:66:e5:31:7f:22:4e:4f:4e:
b6:db:22:90:4c:c1:8a:aa:85:ed:34:d9:66:6c:5f:6a:4c:ce:
db:0e:be:9c:16:b9:3f:9a:3d:56:63:89:65:6a:42:4c:d3:b7:
c0:70:43:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:26:06 2025 by rpki-client