Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json)
Hash identifier: dZaxVt8SgOUXgZLuwVWYpuWLxuZKFZvgZmzspN7z7Sw=
Subject key identifier: FD:42:10:E4:57:0E:05:F8:77:D6:89:70:F1:46:9B:71:4F:EE:A3:F1
Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Certificate serial: 0196783140928CD94CC4BFD9EE58D049807C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
Manifest number: 0A5F
Signing time: Sun 27 Apr 2025 17:00:15 +0000
Manifest this update: Sun 27 Apr 2025 17:00:15 +0000
Manifest next update: Mon 28 Apr 2025 17:00:15 +0000
Files and hashes: 1: 0CX7t2odLe1-aKNEQm4nhIdzG64.roa (hash: uGt7n5BK6nTit2QXoLjymR88j/L4jwCXMbpw123vP/Q=)
2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: 2JtjibkHRx5yYgbvNloPQ7ZIU+LG6PaV4lhkUvjy2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:40:92:8c:d9:4c:c4:bf:d9:ee:58:d0:49:80:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209
Validity
Not Before: Apr 27 17:00:15 2025 GMT
Not After : Apr 28 17:00:15 2025 GMT
Subject: CN=fd4210e4570e05f877d68970f1469b714feea3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:55:34:64:19:fa:75:65:8b:f2:c9:b8:7a:
72:ce:cb:2d:0f:24:19:ca:0d:a3:20:2b:16:b6:dc:
cf:1b:22:24:de:c6:9a:6c:6f:5a:69:03:6b:09:fb:
6c:22:c3:02:22:f9:9e:89:32:15:20:71:54:c5:99:
0d:0b:e3:73:69:2e:db:3f:b8:f1:21:03:5c:b2:f6:
73:2b:66:52:77:69:ee:c9:69:a4:8a:cb:ad:bd:87:
3b:13:3e:40:b5:aa:3b:50:3f:96:0b:49:c2:fe:4d:
53:e0:b8:15:7e:08:c2:cd:aa:86:03:e2:6c:4e:e0:
99:3c:7c:9a:ae:fa:65:b3:aa:2f:9f:74:19:78:cd:
2f:ca:5a:4c:67:65:54:63:27:9f:fb:be:64:90:97:
88:f5:6a:87:c7:cc:14:15:2a:c8:47:86:e4:77:3d:
fc:d9:40:2a:e4:a2:18:b2:63:b2:2b:bd:1a:19:ea:
25:05:ab:44:71:f1:38:ba:e9:a7:f2:76:fe:b2:c8:
a4:d2:c0:5a:06:64:67:d6:0f:c8:8e:1b:9f:88:ed:
0c:62:2b:6d:ab:89:75:32:0a:ae:b4:de:cd:7f:ed:
6c:d5:c1:65:97:5c:38:41:a7:28:90:dd:39:5f:3c:
a1:f3:23:24:be:3f:49:45:a9:d6:e4:60:1c:72:f8:
3d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:42:10:E4:57:0E:05:F8:77:D6:89:70:F1:46:9B:71:4F:EE:A3:F1
X509v3 Authority Key Identifier:
keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e6:ea:6e:94:87:30:a8:d7:65:83:66:37:56:75:88:a5:49:
96:3e:3a:b7:1e:e7:9b:91:28:1c:e3:94:49:56:ff:11:01:28:
19:3c:73:ef:a3:4e:62:ec:74:86:ee:95:96:43:b1:30:a6:7d:
11:2a:d2:27:23:f5:3c:29:0b:fd:d9:fb:db:6f:8b:eb:d4:c7:
d3:66:7b:63:6b:f0:65:a6:08:ce:30:bb:1a:70:7d:22:cf:67:
8c:45:23:79:2d:9b:6e:51:8a:87:d7:77:9c:53:e5:4c:47:cc:
ec:47:ae:b6:54:da:5e:2c:d0:a8:0d:df:0c:10:6b:11:6d:83:
f4:20:f7:f8:a7:71:32:7b:8e:af:08:27:30:5a:8a:fd:b5:a6:
56:08:b3:0b:04:0b:94:3e:7a:d7:11:36:37:c7:9b:e3:63:32:
76:2a:5a:17:a1:75:e0:9e:3f:89:f9:5d:b2:b6:04:c6:86:2a:
42:8f:24:71:67:f4:b4:94:c5:65:3f:ef:88:2c:03:a9:93:67:
88:d4:fd:ce:3e:2f:a8:d1:fa:64:fe:8a:33:a2:dd:78:8a:ff:
bb:5f:b3:82:85:74:19:61:35:fc:0c:69:b4:90:67:dc:c7:8f:
ce:94:78:e9:66:2e:a4:8d:88:0d:12:5c:d1:3a:fc:53:c0:89:
34:db:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:59:45 2025 by rpki-client