Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
File: z1VnEiqIypiJoXmLbJQtzAy8dTs.mft (raw, json)
Hash identifier: Lc2Cs7xYZ7SrSug9srg6TFkF/ze/A7bwwiyNhLbCY7M=
Subject key identifier: 71:0D:62:DA:91:C2:AE:65:93:2C:89:F5:02:79:45:DD:98:6F:AC:A4
Authority key identifier: CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
Certificate issuer: /CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Certificate serial: 01967F7CEB574035CBDF2E010FDFF9B542C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
Manifest number: 155B
Signing time: Tue 29 Apr 2025 03:00:15 +0000
Manifest this update: Tue 29 Apr 2025 03:00:15 +0000
Manifest next update: Wed 30 Apr 2025 03:00:15 +0000
Files and hashes: 1: YBpkKYl7hf_TRzIQKlqwjzGdNXQ.roa (hash: h+D2pJlFj/niq8kSK086wec9+0ZFE38ysN0VslreY9A=)
2: ZCpcz07bfoxqZmLpOfiQ2xZolXY.roa (hash: 6dY5wDKmlwtQaOeXt2ULBB4pGFCZsK4sBgWWnMb/pjg=)
3: z1VnEiqIypiJoXmLbJQtzAy8dTs.crl (hash: 8dCXhn62C9DXMZDPu5PiFoNlpOOAAFnqB+8nLBCVW+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7c:eb:57:40:35:cb:df:2e:01:0f:df:f9:b5:42:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5567122a88ca9889a1798b6c942dcc0cbc753b
Validity
Not Before: Apr 29 03:00:15 2025 GMT
Not After : Apr 30 03:00:15 2025 GMT
Subject: CN=710d62da91c2ae65932c89f5027945dd986faca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:11:bf:91:7d:72:91:ac:91:5e:7f:e0:51:
08:7d:0d:d4:57:a1:95:9a:d7:8a:7d:29:2d:93:09:
a8:41:c7:34:7e:59:d5:4a:e4:13:3a:18:51:99:8c:
e6:3e:56:92:a4:52:71:2e:5b:fb:08:d0:ec:22:79:
a2:9c:a5:f1:de:5f:b3:e7:d0:f7:db:5b:fd:3b:86:
50:38:3e:c1:e6:f8:04:ed:18:ca:e0:f4:0f:ac:3e:
cd:00:f0:7a:1d:2b:77:c3:d1:dd:00:06:65:e0:55:
68:df:66:d5:5c:52:9b:d3:60:95:67:55:98:20:3c:
dc:17:d8:4a:17:f9:fd:80:75:c0:35:68:18:63:b8:
2f:49:51:c7:98:0b:65:75:88:20:aa:db:46:77:84:
89:0c:a7:53:2a:e6:99:63:6a:86:7c:d2:1b:0d:61:
7d:e7:32:0c:dc:57:da:41:c1:05:da:ea:a4:bc:a7:
90:be:b0:53:6d:5f:e9:c5:97:e2:4d:88:4d:51:91:
16:06:a8:a2:92:78:f5:68:04:08:78:29:d2:48:8b:
85:21:70:2a:f9:00:01:4c:fd:02:51:eb:8e:e8:19:
81:01:cf:4d:30:da:f4:91:7f:a3:f5:55:ba:04:3a:
5a:8b:88:ac:ff:79:5f:64:d6:6b:7d:e4:43:1d:a1:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0D:62:DA:91:C2:AE:65:93:2C:89:F5:02:79:45:DD:98:6F:AC:A4
X509v3 Authority Key Identifier:
keyid:CF:55:67:12:2A:88:CA:98:89:A1:79:8B:6C:94:2D:CC:0C:BC:75:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1VnEiqIypiJoXmLbJQtzAy8dTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0a97f1-7bf5-4368-8260-8d715ac217e2/1/z1VnEiqIypiJoXmLbJQtzAy8dTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:12:0c:a2:99:2c:f3:a8:55:d9:24:cd:08:70:fc:8e:c1:06:
2d:0b:4c:b6:c4:93:1e:f1:67:cf:90:ae:8b:33:d0:88:6c:98:
ab:2c:5b:76:23:da:e0:41:e7:36:97:1c:3d:2e:da:e9:bd:97:
f0:34:eb:1f:a5:66:0d:1d:de:e5:be:62:7a:5e:bc:e5:bd:c9:
2b:12:14:2d:e2:9a:22:06:97:ad:de:6e:a5:8c:31:e9:b3:6c:
a5:1e:d6:89:52:cf:dd:e7:b5:60:50:86:37:28:11:fe:df:3d:
b4:a9:3f:1c:6a:af:45:6a:08:1a:8b:a0:65:e4:a1:2e:54:d4:
68:90:1a:c3:51:1e:c6:4d:4d:ee:ac:2f:ca:84:54:ce:ea:8b:
b7:9b:67:ce:33:6e:43:46:4c:49:5b:5e:ec:7f:1f:4d:64:d8:
72:df:32:b1:3b:19:31:ff:6d:75:4f:39:f5:65:23:2d:91:f7:
87:9e:e2:a8:90:fd:cd:99:30:c1:42:44:cf:71:80:2c:a3:bb:
d4:3b:b8:00:37:f6:a1:5a:16:eb:40:f0:2e:05:c0:7f:15:b8:
a3:9e:04:1a:46:60:36:a7:90:f1:a7:96:35:54:c6:2d:dd:77:
c6:8b:ae:72:61:4c:c6:cd:72:35:7e:51:37:89:98:76:30:cf:
12:12:d6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:15:45 2025 by rpki-client