Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
File: zJd-nVKvvEd5nTl1_O6KxRygz2o.mft (raw, json)
Hash identifier: zfgotlpQH6701nVPN7wwv0zizPDo9APfM6ELraor3AA=
Subject key identifier: F6:43:23:FF:1F:DE:C5:5A:19:22:22:5D:FE:52:38:71:16:45:6A:7F
Authority key identifier: CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
Certificate issuer: /CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Certificate serial: 0196729DCCB65CD9423E2126D492FC0AC9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
Manifest number: 13E0
Signing time: Sat 26 Apr 2025 15:01:06 +0000
Manifest this update: Sat 26 Apr 2025 15:01:06 +0000
Manifest next update: Sun 27 Apr 2025 15:01:06 +0000
Files and hashes: 1: 39Bz52ELCw7-ugSWUI3vnSlzFNg.roa (hash: rckVCS2UVoKbUdjWWt9CdJoQbIemzvnGfOdJDV2aAiA=)
2: Oew7qradVoyIh7ZYMBtlC4Lr4e4.roa (hash: 6u7uSnyKmvTYrS//fLotXcXAf6aLw/ExzniA6nUG6Kk=)
3: zJd-nVKvvEd5nTl1_O6KxRygz2o.crl (hash: BiHgPvEunfsttkaj/UxnjuiJuFC9kAsSDoOYbJl0RYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:cc:b6:5c:d9:42:3e:21:26:d4:92:fc:0a:c9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc977e9d52afbc47799d3975fcee8ac51ca0cf6a
Validity
Not Before: Apr 26 15:01:06 2025 GMT
Not After : Apr 27 15:01:06 2025 GMT
Subject: CN=f64323ff1fdec55a1922225dfe52387116456a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:b2:ad:18:03:8c:fe:7c:e3:ec:43:d6:de:
79:b4:e6:21:c9:a8:bd:78:ce:44:bb:86:9c:ba:ea:
3f:78:43:99:8b:01:ec:de:1f:21:10:11:19:8d:49:
ad:0d:4c:96:78:74:fa:cf:5b:42:cd:b0:70:7b:d4:
79:32:2f:a5:06:96:f6:ab:89:5a:02:f5:01:e2:ac:
73:45:6b:d0:a8:f9:da:90:49:a6:26:8e:ce:90:1b:
07:7c:e3:5d:40:dc:94:76:79:be:61:f7:70:68:39:
a2:03:80:4a:3f:bd:bc:66:d6:d1:7f:2f:ae:0b:cf:
cf:b0:bd:ac:2c:50:8f:47:5f:dd:56:fb:21:29:be:
b0:9d:30:ec:96:ca:fe:ad:80:8c:2c:28:04:29:bd:
be:26:79:37:c7:f8:32:50:f9:f0:54:9e:aa:6a:00:
a6:4d:1c:9c:9c:2f:62:e5:74:b1:24:1f:10:3c:d6:
da:8b:30:b6:60:45:9e:0c:38:10:5f:6b:10:b2:c8:
e4:ad:fe:5c:ec:65:be:74:42:8a:50:43:7f:2e:13:
b3:31:c8:4d:ce:b5:4d:91:21:d6:bc:97:ae:3a:69:
b3:f9:a8:d8:68:ac:97:ec:03:11:79:e3:08:b9:8d:
44:58:b0:b1:43:8d:d8:d4:03:a6:cb:28:e5:3a:92:
7c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:43:23:FF:1F:DE:C5:5A:19:22:22:5D:FE:52:38:71:16:45:6A:7F
X509v3 Authority Key Identifier:
keyid:CC:97:7E:9D:52:AF:BC:47:79:9D:39:75:FC:EE:8A:C5:1C:A0:CF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJd-nVKvvEd5nTl1_O6KxRygz2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/95a5e6-5583-4cce-86e9-e230462fc57b/1/zJd-nVKvvEd5nTl1_O6KxRygz2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4d:ab:18:17:01:d0:c3:b8:ec:0f:7a:96:3d:6c:e7:43:ac:
5b:5a:fb:10:70:4f:29:82:7e:fa:54:0c:e1:b9:24:d6:d5:12:
8a:db:3c:31:df:26:7a:ef:8f:e9:42:3d:30:70:d0:5d:17:87:
88:50:54:f1:72:5c:af:64:b0:5a:11:64:df:ef:96:ce:b0:1b:
0f:8b:3c:f7:72:8e:64:7d:d8:f2:fd:23:10:fa:ba:36:4b:02:
8e:d9:c4:f8:4e:d6:ef:58:e0:33:ac:f5:9e:dc:c8:36:cd:d3:
5a:97:2a:df:4d:ae:27:2a:20:55:88:aa:c0:02:8c:01:8e:dd:
4f:6c:06:0a:4f:a2:30:26:e2:ff:a7:7b:b5:3f:82:eb:97:cc:
cc:b1:f2:fb:dc:8f:0f:96:c2:21:6f:55:69:81:bc:34:01:ae:
cc:ee:70:dd:d9:6b:a2:23:69:52:61:c4:c6:e4:8d:9b:ad:a3:
ef:94:33:84:fd:d9:79:34:c3:25:b6:f2:34:86:e1:04:66:42:
36:63:c5:47:9e:d9:6f:ae:b8:3e:10:e2:60:2a:0a:06:66:c0:
3a:87:4f:7b:80:3e:f4:fe:40:99:b8:3f:65:7f:3a:8f:65:21:
2c:b5:22:c3:e7:ae:2a:a6:93:cf:80:e5:28:44:d2:5c:f4:d8:
13:65:41:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:05:07 2025 by rpki-client