Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json)
Hash identifier: 2DuV9wxD0gSxXwFbAYQkxZn/8DixmP0cPx0EuUjLzik=
Subject key identifier: 92:D4:5D:0A:0B:5E:C9:AE:8A:DB:46:A6:68:56:7A:D1:C0:9A:1B:D3
Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669
Certificate serial: 01967FB40FF8E77B29276F9DAF7BE3ED8626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
Manifest number: 05D5
Signing time: Tue 29 Apr 2025 04:00:29 +0000
Manifest this update: Tue 29 Apr 2025 04:00:29 +0000
Manifest next update: Wed 30 Apr 2025 04:00:29 +0000
Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: VdMY+Q+keS/D0KG2QUBXmEkYyAZIx6RzsEJlbstzaak=)
2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:0f:f8:e7:7b:29:27:6f:9d:af:7b:e3:ed:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669
Validity
Not Before: Apr 29 04:00:29 2025 GMT
Not After : Apr 30 04:00:29 2025 GMT
Subject: CN=92d45d0a0b5ec9ae8adb46a668567ad1c09a1bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:af:6a:7c:70:b0:d6:23:2d:5c:66:8a:86:
9b:7e:58:81:bf:b0:76:d6:a2:65:27:f8:38:c2:8a:
6e:6c:7a:26:c1:4f:04:f2:18:1a:8a:a5:1e:ed:1f:
f8:0c:c1:a8:a1:89:ab:86:fb:13:d8:e7:a7:9d:c7:
99:b7:23:55:2f:42:e7:ba:0b:c4:d9:6c:ac:0d:4f:
cd:18:21:41:02:e3:34:1f:fd:99:b9:1a:d0:50:c4:
87:f0:b5:20:5f:23:72:02:d4:60:b0:64:dc:8b:51:
41:c2:05:ad:5c:ef:ad:46:1f:15:85:08:b7:c6:59:
b4:e8:86:82:ae:50:14:fa:75:2b:81:24:e9:d4:df:
1b:cc:0e:81:44:30:bb:56:ef:e4:1e:d8:b3:11:a2:
61:3f:26:97:83:05:d6:9b:87:e8:92:32:d4:8a:1a:
28:e7:9d:ad:61:33:fb:85:a0:dd:77:c2:01:a2:2e:
94:cb:85:68:96:35:c6:f3:33:09:53:53:b0:b2:9f:
8c:e9:74:38:43:d0:2c:3f:d1:d3:f0:aa:bc:d1:59:
1c:b5:b2:ce:b2:bf:de:12:7d:02:1d:66:39:1c:e5:
c9:50:f1:50:30:84:8a:ab:48:1a:fc:91:a5:2c:aa:
11:4f:ac:df:5b:4c:84:5d:67:04:be:d1:19:27:4c:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D4:5D:0A:0B:5E:C9:AE:8A:DB:46:A6:68:56:7A:D1:C0:9A:1B:D3
X509v3 Authority Key Identifier:
keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:cc:30:11:96:ae:31:9b:8e:8a:21:69:57:83:88:68:e4:78:
9b:88:05:bf:74:40:00:5c:91:5a:84:e9:71:73:2d:0f:c5:21:
95:ed:02:04:1a:05:14:2f:b4:6e:2f:c4:8e:01:3c:f8:0c:f7:
6f:4d:3e:85:53:41:e5:3a:65:dd:3c:2d:f5:b7:39:ee:27:8d:
01:07:dd:da:c4:cb:c5:f0:f9:c7:3b:f7:48:65:30:e1:7f:26:
9b:ec:3c:f9:35:94:89:72:85:95:6c:bf:11:87:0d:70:cc:47:
ce:a0:9f:6a:b2:cd:26:f8:da:8a:98:b6:0c:45:4d:be:fc:3e:
71:87:ad:30:32:69:93:19:65:a2:dc:a5:29:f3:72:b6:cb:e6:
c7:c6:8e:74:12:25:7e:41:88:9b:04:54:f5:60:fc:54:5f:4f:
4f:c0:9b:d9:70:5e:28:d7:18:dd:3c:eb:17:f7:40:f7:59:fb:
45:d0:ac:61:de:c2:d5:5a:f3:b4:fb:5e:41:bc:0d:d2:49:54:
de:37:de:3f:93:6a:08:97:aa:18:68:0b:2e:a0:f8:5c:de:34:
1f:b5:98:0d:60:71:3a:ee:92:57:d2:e7:a7:03:d5:1a:04:a0:
d8:2b:2c:4a:15:19:1b:fe:02:16:0e:69:e4:5a:da:97:f5:f8:
90:0d:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:29:53 2025 by rpki-client