Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
File: zUNP2FkiOudujXhkipNylejs15o.mft (raw, json)
Hash identifier: qQaFMlKVsolIVxYzg+ocoN6dR0aW/7zxJXVfe8u7qHE=
Subject key identifier: 27:D7:97:A8:DA:60:21:AC:3A:3F:ED:8E:E4:33:B8:EB:92:36:E3:E0
Authority key identifier: CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
Certificate issuer: /CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Certificate serial: 0196760C78E704947EF31F529894812DA51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
Manifest number: 04BC
Signing time: Sun 27 Apr 2025 07:00:50 +0000
Manifest this update: Sun 27 Apr 2025 07:00:50 +0000
Manifest next update: Mon 28 Apr 2025 07:00:50 +0000
Files and hashes: 1: R9FIW-YXitjJpX1Q3jcy6-oEIFI.roa (hash: UPbldeCj6tFYKOIutM8BR+cGGez6vIB0/3ZKKmpjUZo=)
2: zUNP2FkiOudujXhkipNylejs15o.crl (hash: 0WAWaJb3NKBTn9C5694D2iDXDZBnOp+z+PrcFddlFks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:78:e7:04:94:7e:f3:1f:52:98:94:81:2d:a5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd434fd859223ae76e8d78648a937295e8ecd79a
Validity
Not Before: Apr 27 07:00:50 2025 GMT
Not After : Apr 28 07:00:50 2025 GMT
Subject: CN=27d797a8da6021ac3a3fed8ee433b8eb9236e3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:36:b0:fd:4b:8b:14:72:8d:ae:84:90:1f:
42:a5:f1:3a:3a:d5:cf:3e:31:2f:c8:9b:b7:a7:36:
b3:14:d3:9c:2c:da:09:d9:8b:7b:40:a1:5a:89:b5:
d2:f8:1e:8d:08:03:3c:e3:62:91:cc:2b:05:77:71:
0f:8f:32:45:47:d8:69:23:bc:b2:1a:ec:aa:65:f7:
32:b6:2d:80:7e:fe:7b:c4:f9:40:f5:f8:c4:3b:b7:
15:e6:bc:5d:ae:dd:6e:69:d5:f8:35:24:57:c9:92:
7a:57:dc:9c:a3:5f:19:c0:f1:42:71:62:e7:4b:74:
f8:61:18:9a:f0:57:f6:53:d3:aa:ca:90:b0:d3:ac:
64:0b:f6:a9:52:9d:72:01:de:75:b0:d6:63:c3:7e:
44:41:85:d1:77:7a:09:f6:98:c9:28:0f:a0:4e:90:
82:f2:15:37:eb:95:bb:e3:76:8c:92:ef:74:b8:ed:
af:3a:bb:90:7d:ba:5a:58:89:d4:2a:70:55:f1:89:
32:8f:53:6e:ea:b5:b3:81:11:16:3e:e7:24:39:7c:
b7:64:16:27:73:84:2e:20:8b:c4:f6:86:86:2e:f5:
02:0d:1d:97:91:bd:d5:31:fe:70:99:6f:7c:82:fb:
b5:bd:f6:ed:fa:7d:6a:27:eb:5e:71:3c:34:f3:b6:
43:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D7:97:A8:DA:60:21:AC:3A:3F:ED:8E:E4:33:B8:EB:92:36:E3:E0
X509v3 Authority Key Identifier:
keyid:CD:43:4F:D8:59:22:3A:E7:6E:8D:78:64:8A:93:72:95:E8:EC:D7:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUNP2FkiOudujXhkipNylejs15o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3d18dc-73c6-4c6f-8c28-5a57234ddb76/1/zUNP2FkiOudujXhkipNylejs15o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:18:76:4f:8d:39:b5:9d:72:89:58:18:a6:f3:60:e4:bb:fb:
40:ce:a2:30:bb:ac:46:f8:da:8b:e5:d4:af:fa:64:fe:44:1d:
32:7b:9f:01:fa:0d:6d:07:9b:be:7a:1f:d7:63:5e:52:2e:66:
bc:bf:8c:ef:e2:cf:ff:35:ca:e2:75:bc:bd:dc:41:8d:e5:81:
f1:29:e5:5e:c3:dd:84:53:99:e1:4f:78:18:ff:c1:9e:cd:64:
dc:a4:21:7d:c2:3d:67:5b:96:3d:26:72:7e:81:c5:63:82:85:
e2:de:75:9b:d1:ee:2c:b8:01:df:9e:f8:f0:0b:51:11:49:56:
77:ea:a4:3a:b8:27:9d:8c:8d:c9:31:8e:17:c3:cf:1a:22:38:
5a:b7:00:08:f3:72:77:b0:70:ff:4a:ae:56:c1:5f:5a:6e:da:
49:cf:c1:84:e1:a1:00:ca:95:5f:3a:3b:9f:f6:65:7d:97:67:
6c:af:06:a4:38:2f:41:e0:59:8a:1c:e1:c2:c0:f9:6e:a2:3f:
10:e6:ba:72:cb:de:89:f2:24:68:cd:05:7d:77:47:9b:3c:12:
6f:6c:a9:60:d0:01:3f:e6:3c:fa:1b:cb:52:87:19:5b:24:ac:
d9:2d:88:90:3a:a7:b4:d6:f7:c3:6e:ce:5c:cd:41:1b:2e:06:
ca:86:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:39:28 2025 by rpki-client