Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft (raw, json)
Hash identifier: PPPbYsVUpU0cdXGlAG5usincpmZ+QVm/VPGBvC7bDdg=
Subject key identifier: 29:47:7E:17:BC:48:DA:A8:75:05:8A:99:2D:A8:FC:8E:D6:41:DB:1C
Authority key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Certificate issuer: /CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Certificate serial: 01967DC667E368F4C41AC218E4016F9B8638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
Manifest number: 9B
Signing time: Mon 28 Apr 2025 19:01:16 +0000
Manifest this update: Mon 28 Apr 2025 19:01:16 +0000
Manifest next update: Tue 29 Apr 2025 19:01:16 +0000
Files and hashes: 1: 1-YCQCphk32b8tDaXBmol_BTFhAA.roa (hash: vDe37BPFiFzh2DmP54Y2HTtv1UAWo0nqbWO5t7R6/68=)
2: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl (hash: W6YpGeP2kFbZdCuyMC4yJ2lObvwDDkaoW6GnP4TZgtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:67:e3:68:f4:c4:1a:c2:18:e4:01:6f:9b:86:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Validity
Not Before: Apr 28 19:01:16 2025 GMT
Not After : Apr 29 19:01:16 2025 GMT
Subject: CN=29477e17bc48daa875058a992da8fc8ed641db1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:63:d1:8f:9c:47:07:47:a8:6f:8e:f2:d6:
30:3d:01:37:72:c7:39:1d:56:a9:57:de:51:79:16:
46:81:e3:83:57:da:06:1e:1c:77:ac:8b:87:eb:51:
54:32:b6:be:d6:0c:8e:c7:15:09:21:da:e4:e2:0b:
86:3b:b0:b1:67:d0:fb:c7:29:b3:c9:66:d3:58:45:
d5:0e:25:ba:58:bc:9b:87:1f:af:06:97:cb:a6:61:
5b:59:d4:90:4d:5c:ef:f1:51:2b:5d:4c:1c:88:d1:
6e:75:b5:76:c7:0d:fc:95:cc:1d:8e:8e:4c:e7:aa:
27:17:b6:2a:d4:ac:f5:25:38:02:a8:d1:26:16:76:
2b:a4:cb:bf:ef:56:38:92:c5:1e:ae:c9:b7:0f:aa:
2a:6c:35:69:cb:31:6f:6b:19:29:45:de:c6:a5:ee:
74:97:fe:62:54:e4:70:88:31:f8:cc:5d:20:63:fb:
43:1d:a7:5a:a5:06:f7:f2:34:d2:c9:75:33:db:55:
bb:e4:0c:39:e2:07:a4:2d:07:57:07:f1:5b:db:f1:
9c:0c:5c:02:49:49:d1:fb:ab:f2:77:77:18:c5:6a:
23:3b:ca:fc:d5:9b:02:fd:f7:e2:0c:26:b5:56:d6:
d9:ea:72:63:65:dd:fe:f5:71:5a:af:c2:6d:14:c7:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:47:7E:17:BC:48:DA:A8:75:05:8A:99:2D:A8:FC:8E:D6:41:DB:1C
X509v3 Authority Key Identifier:
keyid:CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:af:81:91:1e:83:e1:c7:b8:1a:a5:b0:11:c7:f3:98:fa:46:
b1:fc:5b:a4:aa:da:24:66:aa:cd:cf:cc:13:ce:f7:5e:68:46:
de:d0:de:98:69:d0:8e:f6:a1:07:6e:e7:2b:1d:96:6c:f8:c2:
39:78:1e:56:9e:94:d2:5a:ce:80:46:22:cb:dd:16:c3:9c:23:
9e:bd:06:9b:7d:0f:5d:1b:36:70:e6:20:9d:90:f9:55:67:47:
dd:0d:8f:85:f1:9e:84:3d:40:ba:96:89:09:42:1d:20:ec:6e:
95:41:c5:a8:ca:ee:b4:aa:75:6f:a6:65:35:af:90:aa:cb:55:
4d:22:d8:08:dd:26:e5:74:8e:68:0d:69:2f:2b:19:86:2b:76:
3a:50:e6:2e:2f:ec:37:12:fc:b7:20:94:f8:7a:bf:41:00:05:
b1:19:87:a3:c4:94:ff:2d:fc:b1:86:69:10:eb:07:37:8a:7a:
61:24:20:a2:3f:d6:b6:3b:ad:53:4b:47:f4:bd:5b:30:78:fa:
7d:3d:1c:d5:79:1e:4d:3f:81:98:22:cc:f5:56:8b:50:02:ac:
f5:08:10:3a:20:7a:3d:6a:95:67:3e:86:76:ee:b4:4d:3e:51:
29:d8:98:a0:e0:ce:7d:ab:9f:19:86:ac:50:b3:09:ce:40:de:
16:c2:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:59:39 2025 by rpki-client