Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
File: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft (raw, json)
Hash identifier: ccD5JdU/iLTUXwhgaq1c2Traz/vtmZCefv3NN2ScIH8=
Subject key identifier: 52:3F:F3:09:12:6D:44:C7:2F:B1:15:64:4D:82:03:FB:5B:D6:F8:0C
Authority key identifier: 67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
Certificate issuer: /CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Certificate serial: 019681A2B263003EAAB0D00A0C8B39A89CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
Manifest number: 0BA2
Signing time: Tue 29 Apr 2025 13:00:45 +0000
Manifest this update: Tue 29 Apr 2025 13:00:45 +0000
Manifest next update: Wed 30 Apr 2025 13:00:45 +0000
Files and hashes: 1: Oc0qle0fVAxYCYZVrPoLp9Koy14.roa (hash: OoYjo8j96JGZ/KIKji2EFWXUPAYR+0wfSdmWkW1Apho=)
2: Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl (hash: qeprZCvKY8pqequEEcIIBDs+P4oEy+xD749UJlbqa/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:b2:63:00:3e:aa:b0:d0:0a:0c:8b:39:a8:9c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678bd649073646c1f4c3b01cacaa72e209e9daff
Validity
Not Before: Apr 29 13:00:45 2025 GMT
Not After : Apr 30 13:00:45 2025 GMT
Subject: CN=523ff309126d44c72fb115644d8203fb5bd6f80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:41:21:a6:45:99:4a:3b:dc:ac:8b:16:c9:49:
c9:2f:b8:fa:47:f6:b1:12:17:b6:7b:22:02:63:b5:
5b:1c:a0:51:b4:09:81:b7:16:dd:83:89:60:d5:1f:
d7:dc:00:e9:4c:76:12:f9:af:3f:fa:94:f0:56:b9:
73:a1:3f:4d:28:ed:de:ac:c3:ec:09:da:6f:21:d3:
68:9f:78:59:45:2c:7c:c6:94:83:9e:5a:36:a7:20:
c6:a7:1f:64:78:d5:07:90:a3:13:2a:64:1c:c9:30:
66:d4:ff:35:e6:f3:ee:b2:84:f0:82:fe:c9:c9:5f:
42:72:87:95:3b:45:91:d1:12:13:42:da:d9:5f:dc:
09:f5:ef:d0:30:cd:2a:dc:c3:b9:be:88:62:9d:23:
63:a0:2b:f0:5a:70:0e:30:6f:2b:8b:bf:32:4e:09:
f3:7c:d0:0e:f2:e9:1d:e3:20:a5:55:a4:60:28:80:
2c:20:d8:3c:a2:f2:db:76:21:01:80:b2:04:1c:01:
33:c5:90:ba:d4:cd:a9:9b:10:ed:30:ee:bd:7b:ce:
4b:5f:b2:65:1e:d3:91:2c:f7:bc:84:62:86:49:df:
eb:c9:ea:0a:fc:ac:8e:b5:76:68:28:dc:18:92:86:
dd:a4:0c:1c:c7:8a:4b:18:73:aa:9d:d4:27:1f:02:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3F:F3:09:12:6D:44:C7:2F:B1:15:64:4D:82:03:FB:5B:D6:F8:0C
X509v3 Authority Key Identifier:
keyid:67:8B:D6:49:07:36:46:C1:F4:C3:B0:1C:AC:AA:72:E2:09:E9:DA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc3441-3e8f-44ed-913e-ed78cb76661c/1/Z4vWSQc2RsH0w7AcrKpy4gnp2v8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:35:20:9c:16:66:2d:9b:e6:56:9e:18:22:04:66:06:65:07:
e9:56:bb:8c:94:26:ba:1f:c7:76:ab:27:bf:55:f7:89:83:00:
89:38:78:b7:c0:c0:58:aa:af:03:4f:e7:ec:d0:f0:53:92:00:
b0:4f:98:fb:63:84:2b:db:3d:32:fe:06:86:5a:43:56:10:a7:
f4:c6:96:f4:d1:75:3a:f1:9a:fe:d2:f6:9b:94:f8:fe:3b:ef:
2c:59:cc:8d:d8:1e:71:4c:22:64:5d:00:43:dd:56:df:cd:69:
86:06:31:3b:51:ee:15:45:a3:17:ca:09:5d:86:6d:99:06:92:
ee:ca:92:f2:c8:7e:c4:b1:37:a3:93:5b:d1:a7:7f:aa:fb:9a:
31:6c:a7:63:2c:7d:c1:ce:97:db:a5:84:d4:f5:41:a7:f1:eb:
0f:9f:f8:b8:9f:c8:bd:0d:27:60:55:af:3b:1f:d0:e1:71:12:
61:a3:f4:b8:a5:8a:6d:43:48:6c:63:b6:d1:73:cb:e8:9c:08:
4c:62:e6:8e:0e:59:e6:0a:e5:b0:d5:08:7f:c2:b7:68:03:33:
82:8e:be:ac:87:73:a7:5a:29:aa:a5:c0:2e:77:89:07:9c:54:
11:6a:f5:31:0c:51:3b:90:ec:28:7e:86:2a:d0:1c:fd:7c:22:
13:cc:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:20:24 2025 by rpki-client