Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: 761K4y3ybN4npaMHGiCcXYJM2Qr+vH5o5qTasXYihV0=
Subject key identifier: 8B:25:4F:60:A9:7F:CF:0C:4A:28:12:9D:E1:53:BB:0D:B7:1A:8C:AA
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019657944DE2AB870C0BEB4C875CD9899D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 09:00:59 +0000
Manifest this update: Mon 21 Apr 2025 09:00:59 +0000
Manifest next update: Tue 22 Apr 2025 09:00:59 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: ytWVuH5xY6jhrpJKJWl/I/+7gLt5H2lgBQHRM3ThjNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:4d:e2:ab:87:0c:0b:eb:4c:87:5c:d9:89:9d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Apr 21 09:00:59 2025 GMT
Not After : Apr 22 09:00:59 2025 GMT
Subject: CN=8b254f60a97fcf0c4a28129de153bb0db71a8caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:6b:37:ab:69:ac:b3:52:eb:06:62:e9:f4:
62:67:90:05:d8:11:7c:0a:60:07:a8:99:22:a7:83:
30:db:a7:a5:28:ba:b7:90:da:bf:fe:03:eb:be:d9:
80:2b:45:08:3d:60:46:24:55:1d:b9:68:91:cf:f1:
00:fa:20:76:c8:60:02:84:b8:3a:9c:7c:83:9e:8b:
b3:cf:98:16:c2:70:77:1b:89:19:8a:b8:5e:0c:38:
5a:7a:ce:c8:ce:04:9c:05:b9:8b:79:d2:ff:7b:34:
73:23:86:05:7b:89:6b:e5:aa:ea:57:c1:e5:e2:54:
e5:07:b4:99:3a:eb:ac:20:9e:3e:40:99:e6:a6:18:
48:a7:93:bd:5f:7d:7c:d1:70:49:dc:d8:6c:fe:dd:
13:00:8b:3e:0f:63:bf:a2:dc:fc:4b:3e:cc:ec:37:
f8:0d:68:57:4c:80:42:6a:36:7b:cf:59:46:98:fc:
7a:e6:49:95:86:1b:23:d1:ec:22:4d:42:ae:d5:a0:
78:86:5e:ff:46:6d:48:cb:c4:8f:21:59:49:07:ca:
87:35:42:5c:1f:f5:70:13:3f:63:56:be:65:a8:21:
15:90:9c:6f:01:db:32:af:fd:9d:3f:49:b2:11:4d:
e8:99:98:37:9e:12:af:81:df:42:63:e5:ed:5f:a8:
92:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:25:4F:60:A9:7F:CF:0C:4A:28:12:9D:E1:53:BB:0D:B7:1A:8C:AA
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:14:03:54:02:54:ab:4c:13:e9:4d:52:c3:9a:6d:35:49:7b:
eb:62:e5:63:ed:f0:b5:d3:1e:bc:e3:b3:2e:af:85:38:35:d9:
1b:90:4b:6b:e9:e1:4e:db:6b:52:01:dc:07:46:b1:da:36:cd:
05:46:22:0b:d4:8a:7e:12:b6:ef:1d:32:0a:94:27:05:ee:17:
ed:b5:93:96:6a:4f:97:07:9f:86:1a:2c:29:6c:c3:ab:85:31:
4a:97:e9:8f:74:13:3d:5d:a2:68:5e:d3:54:e0:e5:cf:13:b4:
7a:a3:56:10:c1:38:89:f6:82:77:22:4e:48:70:2d:11:a8:26:
f0:2f:32:9b:3d:aa:fd:e6:c7:e7:68:b4:d5:3f:fb:4d:ed:1d:
a0:77:17:ca:13:15:e6:f8:29:4e:20:7d:28:57:5b:11:60:f8:
49:6b:02:b9:74:55:14:c2:3d:58:b1:30:6f:48:ab:fa:f7:88:
e8:ab:de:af:42:41:88:3b:34:30:e6:da:bc:9a:92:62:54:3c:
47:c7:1f:eb:18:c9:68:54:85:ff:e3:e9:6a:f0:4e:1a:1b:c8:
c6:b6:86:0a:34:34:41:97:16:79:0b:34:c6:fd:70:1c:ac:27:
0f:e5:fb:a6:d9:68:d0:ea:d0:4f:45:fd:7b:52:91:ad:ee:ec:
8a:2d:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:36 2025 by rpki-client