Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
File: Z8QeB5653PX62eXUjdzjlpd7eXc.mft (raw, json)
Hash identifier: j3sxj3/O9jQbBgPTlkpznOilN8zFF31y6mGt5iwWV+k=
Subject key identifier: 8D:63:86:FA:70:97:74:30:76:E7:DC:BD:A4:EF:73:1E:AA:AC:3D:62
Authority key identifier: 67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
Certificate issuer: /CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Certificate serial: 01964F6D189BF4A8C541B225554B9F21E599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
Manifest number: 14F7
Signing time: Sat 19 Apr 2025 19:01:11 +0000
Manifest this update: Sat 19 Apr 2025 19:01:11 +0000
Manifest next update: Sun 20 Apr 2025 19:01:11 +0000
Files and hashes: 1: Z8QeB5653PX62eXUjdzjlpd7eXc.crl (hash: dbU3f/J1nDY+do4rz1V+J6vbXU3evyVEZYoSvL1HiyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:18:9b:f4:a8:c5:41:b2:25:55:4b:9f:21:e5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c41e079eb9dcf5fad9e5d48ddce396977b7977
Validity
Not Before: Apr 19 19:01:11 2025 GMT
Not After : Apr 20 19:01:11 2025 GMT
Subject: CN=8d6386fa7097743076e7dcbda4ef731eaaac3d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:40:dd:dc:fa:59:48:c7:14:75:ac:4f:62:8c:
51:b2:6f:30:91:7d:26:40:7b:de:86:60:e3:db:92:
a3:9b:61:60:ea:36:30:8c:e5:7f:ef:a5:76:78:a0:
89:9c:23:f0:1f:31:98:26:b2:de:d7:99:88:b2:56:
e7:5b:7a:5c:4d:6a:a7:53:71:b5:74:c1:f9:f3:18:
93:17:05:ff:da:23:cb:a8:d6:0b:ac:3d:3a:69:1c:
fc:ba:17:3b:85:4f:6a:ac:f0:58:14:0b:47:35:fc:
4e:86:48:5e:f4:97:24:70:d1:5a:a3:0e:36:13:4b:
be:26:f2:3c:d9:cd:3c:fe:1a:92:66:c1:01:7b:3d:
4d:30:d0:2b:59:51:19:67:d9:6e:81:f5:c8:b5:71:
2f:fc:5a:5b:cf:d1:ef:95:c9:98:b4:de:c7:71:85:
90:69:83:93:73:e0:64:f3:c4:6e:39:4c:9b:1a:44:
b3:10:0d:82:56:3b:cd:b7:30:0b:57:c6:ff:ec:27:
e4:cc:cb:de:2f:35:59:00:09:52:b8:f0:a8:6c:f6:
7e:8a:eb:07:fb:96:a1:e5:d8:c4:42:23:f7:85:e9:
ec:6a:9b:4e:e5:09:e1:b3:13:70:15:1c:5f:cb:cb:
a4:d7:59:11:ba:31:3e:db:f3:8e:07:f9:0c:ec:a2:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:63:86:FA:70:97:74:30:76:E7:DC:BD:A4:EF:73:1E:AA:AC:3D:62
X509v3 Authority Key Identifier:
keyid:67:C4:1E:07:9E:B9:DC:F5:FA:D9:E5:D4:8D:DC:E3:96:97:7B:79:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8QeB5653PX62eXUjdzjlpd7eXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0619db-ed8e-443d-94d8-d64314da0bb9/1/Z8QeB5653PX62eXUjdzjlpd7eXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:74:67:91:20:bf:b0:41:3d:5c:90:65:39:bd:e3:50:69:2f:
55:43:cf:50:1e:b2:e7:7b:81:08:64:bc:29:b5:b1:c0:a9:b2:
87:0a:37:b9:6f:63:15:dd:77:57:5d:3e:3d:36:bb:33:38:38:
bc:b7:2b:c2:9f:04:fd:06:d4:67:0e:4d:04:3a:4b:35:8c:ed:
43:52:48:39:ed:bf:f3:e6:f3:1f:3e:6f:e2:7e:c5:05:e8:f4:
d1:a1:e7:96:25:38:9a:e7:d4:bf:5c:8e:d2:56:b6:0a:0c:c4:
2a:02:8e:5a:cd:c6:e5:10:75:5c:f5:ec:24:5e:45:8d:c2:1b:
28:95:52:00:95:a9:23:50:ec:df:6a:4d:8c:f7:32:2b:57:c3:
0d:29:48:46:29:ef:ce:37:72:4d:70:5c:a4:a1:0a:b9:23:c4:
03:70:1f:5b:4b:7b:06:1b:68:c4:e2:ad:14:54:f9:2f:38:81:
3f:ff:14:13:87:c5:14:c5:62:5c:9d:f5:4e:4a:08:10:fd:38:
50:11:1e:37:dd:d7:99:73:b7:7b:61:3d:d4:2f:e6:a0:60:ae:
1b:e6:98:0e:f5:e2:df:ea:0e:c6:d1:2b:18:22:b8:db:33:96:
68:f1:0c:3b:39:07:85:d2:de:04:da:02:7d:85:58:4f:a7:bd:
1b:49:02:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZPbRib9KjFQbIlVUufIeWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzQxZTA3OWViOWRjZjVmYWQ5ZTVkNDhkZGNlMzk2OTc3
Yjc5NzcwHhcNMjUwNDE5MTkwMTExWhcNMjUwNDIwMTkwMTExWjAzMTEwLwYDVQQD
Eyg4ZDYzODZmYTcwOTc3NDMwNzZlN2RjYmRhNGVmNzMxZWFhYWMzZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Dd3PpZSMcUdaxPYoxRsm8wkX0m
QHvehmDj25Kjm2Fg6jYwjOV/76V2eKCJnCPwHzGYJrLe15mIslbnW3pcTWqnU3G1
dMH58xiTFwX/2iPLqNYLrD06aRz8uhc7hU9qrPBYFAtHNfxOhkhe9JckcNFaow42
E0u+JvI82c08/hqSZsEBez1NMNArWVEZZ9lugfXItXEv/Fpbz9HvlcmYtN7HcYWQ
aYOTc+Bk88RuOUybGkSzEA2CVjvNtzALV8b/7CfkzMveLzVZAAlSuPCobPZ+iusH
+5ah5djEQiP3hensaptO5QnhsxNwFRxfy8uk11kRujE+2/OOB/kM7KKmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1jhvpwl3QwdufcvaTvcx6qrD1iMB8GA1UdIwQY
MBaAFGfEHgeeudz1+tnl1I3c45aXe3l3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgt
ZDY0MzE0ZGEwYmI5LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNjE5ZGItZWQ4ZS00NDNkLTk0ZDgtZDY0MzE0ZGEwYmI5
LzEvWjhRZUI1NjUzUFg2MmVYVWpkempscGQ3ZVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3RnkSC/
sEE9XJBlOb3jUGkvVUPPUB6y53uBCGS8KbWxwKmyhwo3uW9jFd13V10+PTa7Mzg4
vLcrwp8E/QbUZw5NBDpLNYztQ1JIOe2/8+bzHz5v4n7FBej00aHnliU4mufUv1yO
0la2CgzEKgKOWs3G5RB1XPXsJF5FjcIbKJVSAJWpI1Ds32pNjPcyK1fDDSlIRinv
zjdyTXBcpKEKuSPEA3AfW0t7BhtoxOKtFFT5LziBP/8UE4fFFMViXJ31TkoIEP04
UBEeN93XmXO3e2E91C/moGCuG+aYDvXi3+oOxtErGCK42zOWaPEMOzkHhdLeBNoC
fYVYT6e9G0kCzQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:19:04 2025 by rpki-client