Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: Y8O3/QlVWKN6tjLdTWF4goO89gEiuziTDeazoh+d/9M=
Subject key identifier: BB:F9:FD:FF:28:97:55:CD:DC:EB:3C:D4:4D:05:79:D4:78:AE:42:3A
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 0196564A5659AB526F8020917F5D34E4EFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0481
Signing time: Mon 21 Apr 2025 03:00:34 +0000
Manifest this update: Mon 21 Apr 2025 03:00:34 +0000
Manifest next update: Tue 22 Apr 2025 03:00:34 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: L3R3sCaV9+4WrlYZ68sBeLqfiv/BdOmfaNR0LZ12+Bo=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:56:59:ab:52:6f:80:20:91:7f:5d:34:e4:ef:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Apr 21 03:00:34 2025 GMT
Not After : Apr 22 03:00:34 2025 GMT
Subject: CN=bbf9fdff289755cddceb3cd44d0579d478ae423a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:54:12:1f:61:90:bc:f6:38:66:5b:23:00:
89:e6:64:a7:cc:2d:9b:b3:fa:82:41:45:81:db:a2:
78:bd:10:3b:f3:21:af:76:c1:4a:6d:02:1c:fc:c5:
44:5e:bb:d3:81:94:99:94:f0:7f:c6:37:9a:bd:99:
67:15:95:4a:f9:65:1f:70:bf:1e:af:83:1c:84:fa:
7b:18:70:d2:4a:e1:2d:ea:79:86:78:e4:d5:20:fd:
e5:96:b1:91:9a:c7:89:4c:dd:c2:8f:a8:7c:c9:83:
cb:ba:bc:49:05:a6:7c:c2:4b:25:5f:f0:2f:df:e7:
9d:fe:9e:20:fb:c4:b3:d0:eb:70:3a:fc:c9:4e:47:
d8:7d:78:d4:b5:6f:a5:f6:e2:62:23:c5:78:f3:aa:
6d:cb:4c:a1:bb:57:51:5f:44:93:3a:e7:5e:cd:7b:
f2:b3:3d:a4:83:a1:31:6f:e3:f5:b4:59:b3:4d:93:
0d:72:19:64:a6:52:1f:03:65:8e:59:11:f6:ca:08:
c7:f1:df:8f:92:e1:96:00:c4:d0:a3:07:cf:f7:54:
1c:93:24:98:09:c7:8d:4c:c0:26:79:6f:08:92:6b:
f3:d5:d5:8a:d2:d7:9b:bc:29:8a:a6:e7:f4:58:52:
a4:3c:e8:c6:1d:81:75:3d:4b:9c:29:b8:0f:71:27:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:FD:FF:28:97:55:CD:DC:EB:3C:D4:4D:05:79:D4:78:AE:42:3A
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d8:92:52:ca:32:1d:dd:aa:67:f1:73:f8:55:fe:9e:23:51:
e9:fc:9a:f9:80:77:83:d5:3f:16:cc:a1:40:11:90:ca:bf:3e:
2a:c8:62:1d:b4:03:54:66:d9:4b:18:51:2a:7e:c2:49:6c:49:
b1:13:de:6d:a5:2d:df:56:1c:a3:3e:89:f0:80:00:a4:ec:5e:
9a:2b:b3:c8:7c:30:78:1c:79:4e:22:22:ae:79:cf:16:c0:98:
4b:6b:bd:e1:9c:48:8a:fd:c3:74:20:b7:0a:e8:36:c5:c0:2e:
20:fd:71:32:da:9b:a7:88:30:cb:b8:ea:fb:ff:e7:f3:68:64:
ac:00:98:b2:34:c8:dc:c5:8b:e9:e1:f3:ad:f7:2c:0a:55:78:
4c:58:ec:f8:91:63:1e:44:42:64:33:1f:4a:bc:a4:8b:49:d3:
da:5e:0c:02:ae:a8:5d:29:83:ab:36:77:e4:8e:15:98:9a:06:
bd:5b:73:35:65:11:92:35:8b:b0:73:e7:80:3f:9d:7c:42:06:
63:ee:24:08:9e:8e:02:23:ab:45:b8:11:7b:b4:e7:9f:de:2e:
38:1b:c1:91:fa:7e:c6:3d:51:a1:a8:27:54:18:86:ae:f2:b3:
a6:83:ec:37:d5:92:0d:89:ee:30:17:a5:43:a4:a6:19:36:e2:
74:46:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:17 2025 by rpki-client