Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier: rKjhAF1AmtsAdy4P+PSDbiN2s+9NPxWMkFVLixF0b7Q=
Subject key identifier: C7:3E:09:85:72:1F:6A:03:C2:77:E3:18:4A:10:36:79:9C:0E:32:9A
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019673421A3B10577D49A879F5C05239DE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number: 0D74
Signing time: Sat 26 Apr 2025 18:00:33 +0000
Manifest this update: Sat 26 Apr 2025 18:00:33 +0000
Manifest next update: Sun 27 Apr 2025 18:00:33 +0000
Files and hashes: 1: _BNYdzVBVSUeXINGJrysLOoOwfM.roa (hash: hYn60LUqBKRakCcFPhMXiHrGnB1pZCgNDpIpAl6eI3k=)
2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: K6xNEujsOLOWuaOMfqj7qN9A6dw9wPvMgAusWEAqW2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:1a:3b:10:57:7d:49:a8:79:f5:c0:52:39:de:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Apr 26 18:00:33 2025 GMT
Not After : Apr 27 18:00:33 2025 GMT
Subject: CN=c73e0985721f6a03c277e3184a1036799c0e329a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:a7:04:86:5a:58:51:4e:d5:fc:36:dc:26:
05:1e:7d:d4:e5:ef:19:67:c1:f3:dd:03:f1:83:6b:
b1:c6:d3:60:ae:16:c8:69:9c:d5:4f:c1:28:33:7d:
c0:77:a2:63:fb:8e:70:cb:80:de:c6:de:64:ab:ca:
f9:9a:b2:8f:55:3e:08:f4:29:c0:3b:8a:8b:cf:2d:
ea:85:9d:0c:67:23:22:2b:57:9d:c9:20:c0:73:06:
94:f1:cb:68:a8:42:9a:61:e7:6d:d1:70:3a:fb:06:
02:31:97:40:67:da:e0:4f:40:bd:21:b6:66:7e:a5:
9a:0e:72:14:5e:f3:92:12:ca:02:af:44:5b:3d:d0:
66:8a:94:9e:39:35:f1:4e:23:01:dc:84:1e:91:18:
27:97:1e:91:9a:37:8f:2a:01:9a:9d:f5:12:f5:2a:
2b:12:09:9e:dd:21:7a:05:d7:e3:f5:6b:0a:30:d7:
3a:9a:58:0c:05:0c:ce:dd:61:1d:db:a1:79:95:ea:
b4:19:12:6e:79:e2:90:13:00:98:7a:1a:6f:a9:2a:
5c:4c:e0:95:6e:23:ba:14:56:7e:75:0e:a1:ba:1c:
05:cd:cd:58:04:05:c6:33:89:ac:b3:9c:6c:66:fd:
2c:00:bf:d1:96:93:0d:9b:27:38:51:44:dd:e7:fd:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3E:09:85:72:1F:6A:03:C2:77:E3:18:4A:10:36:79:9C:0E:32:9A
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:66:8a:7c:d8:fb:9b:1d:6d:aa:a2:e6:71:f1:c6:2f:78:ed:
f5:93:ec:e8:a2:c9:59:2f:a0:c2:c5:37:c3:14:5d:e4:cd:88:
51:03:b2:f2:b7:6f:7c:78:51:09:9c:2a:0b:61:60:07:b9:96:
7e:25:cc:79:e9:10:00:29:79:91:cd:5b:b4:4c:67:d7:d3:0f:
c6:0e:12:ec:dd:10:5a:15:15:a2:82:5c:c5:91:03:04:48:9e:
c4:58:f1:45:bf:3c:9c:c7:27:70:c9:c2:5f:39:1b:57:dc:31:
e0:2f:f4:88:59:78:8c:5f:ab:4b:e9:0f:36:5d:67:6b:8c:b1:
57:b2:0e:ff:22:57:94:87:f8:2d:d3:8b:a9:67:3f:5e:8e:63:
e6:71:8f:03:61:e5:89:a6:26:e6:cf:66:b6:ef:18:17:7f:07:
63:fa:ed:b9:48:c6:03:bb:15:77:de:25:90:ff:77:50:18:01:
1e:6d:2b:87:6e:06:e0:df:f6:af:f8:ea:33:c1:68:7f:b7:53:
40:23:ce:d5:50:f0:13:56:5f:fa:c5:48:71:3c:42:5f:72:1b:
71:dc:db:cb:a1:61:ba:2c:4a:4d:6d:8b:2e:8e:33:15:f6:97:
73:0b:3e:ed:16:da:32:28:d2:4d:a7:f7:b5:6c:f1:57:37:e2:
ba:7e:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:54:37 2025 by rpki-client