Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json)
Hash identifier: t+1O72lxdu4VWMZxwb044WNgabHOBqtCOdb5MSIDEE8=
Subject key identifier: 78:74:A8:0E:78:17:0A:31:88:22:AD:C7:42:A0:66:66:42:A7:63:2E
Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Certificate serial: 0196767A0C5E226567AC7D6315AE03960680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
Manifest number: 0E8C
Signing time: Sun 27 Apr 2025 09:00:32 +0000
Manifest this update: Sun 27 Apr 2025 09:00:32 +0000
Manifest next update: Mon 28 Apr 2025 09:00:32 +0000
Files and hashes: 1: rsGdnGFpgH2iITobH0zZzM2Hibw.roa (hash: pbnlIU03Otl/z/Rf4EwmC3o03jvLSqloWpA+ITG+uik=)
2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: HEiuElhp/8j0IvqzA0AgAwZYmlUvW1g8vRFP3w5IJGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:0c:5e:22:65:67:ac:7d:63:15:ae:03:96:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e
Validity
Not Before: Apr 27 09:00:32 2025 GMT
Not After : Apr 28 09:00:32 2025 GMT
Subject: CN=7874a80e78170a318822adc742a0666642a7632e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:1a:7b:85:2e:9a:5e:4f:29:b9:fb:56:5a:
e2:de:6a:39:f6:0b:54:48:21:4b:ae:7d:59:2d:32:
af:ff:e1:e5:6c:8b:57:98:af:75:15:24:37:5b:2e:
51:1d:52:08:51:13:6f:4a:2e:e2:eb:73:48:ad:f8:
33:8f:4a:d3:15:9e:5d:cf:3c:4f:d4:5d:68:93:bb:
21:af:2c:b3:98:46:14:33:23:65:1b:76:6e:10:68:
7d:ca:0c:a7:01:8a:77:82:97:6e:dd:fa:2c:a4:90:
96:99:70:18:9d:35:82:5a:84:ef:9e:5e:17:60:27:
d5:22:57:e9:04:bd:a8:87:42:d8:89:bb:33:22:65:
19:a1:9f:48:d9:eb:57:f6:ef:06:be:43:55:9f:65:
bc:6a:a0:17:46:f9:c1:97:be:c5:65:9f:83:ed:c7:
90:b1:a1:52:d8:34:af:0a:ba:b0:4c:1f:9b:0f:6c:
0b:ee:bc:ca:5b:0c:ec:ed:29:1f:90:66:08:bc:1e:
a4:61:dd:96:77:e9:21:72:99:28:d6:73:58:83:17:
18:d3:3e:ff:40:d8:88:23:bf:e3:4e:44:66:0f:48:
d2:7b:1b:e9:92:65:3d:28:13:fc:3f:bd:f1:b3:b4:
9c:af:9b:31:78:bf:6e:97:43:50:a6:4e:0c:1a:65:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:74:A8:0E:78:17:0A:31:88:22:AD:C7:42:A0:66:66:42:A7:63:2E
X509v3 Authority Key Identifier:
keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:5e:f4:d0:7b:e7:40:ee:92:71:68:a6:a5:bd:05:ff:68:15:
4c:cf:a4:3c:a2:f3:e1:9e:25:8e:63:f7:24:15:45:34:bb:88:
bf:db:09:0f:3e:01:a9:51:ef:c9:e3:e4:41:f3:6a:4c:99:32:
db:5c:1c:ca:f9:dd:e6:f9:30:d5:b7:5d:c3:b2:78:61:08:5a:
b1:43:5c:ec:13:00:51:a8:89:f6:04:3e:de:67:4a:4a:50:a2:
6c:8c:32:95:f1:c4:6b:44:89:f3:11:38:f7:b2:b3:17:2a:8b:
66:a0:ea:91:87:0c:8e:fe:ee:10:cc:21:2f:c6:c0:a2:78:2f:
91:28:cd:a6:56:53:b3:27:cd:47:ec:64:cb:e4:89:87:8b:0a:
47:e1:96:a1:79:85:59:7c:e5:e3:8a:7c:8f:8b:ec:cd:02:35:
a8:da:cd:92:29:15:30:ec:87:7a:5f:4a:ef:90:5a:eb:2a:f7:
a5:da:e2:05:d0:26:92:ab:27:95:38:a6:66:3a:32:28:48:b3:
9b:ed:d9:ff:a1:b3:a2:c2:89:2b:24:f8:fa:16:72:72:d5:c8:
38:61:98:0e:b8:be:8a:c4:98:98:93:82:51:59:d0:f7:91:49:
21:43:0e:ec:0d:26:69:6e:5b:da:62:c2:2c:9e:0f:11:d6:0d:
4d:47:e9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:58:29 2025 by rpki-client