Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: jo6vbd6Cul2Ha3VqkJaWGsDf12gSlXXjeIempcRCHZU=
Subject key identifier: DE:BE:1A:E8:32:58:8B:6E:C7:B6:44:17:36:0A:B1:F0:41:EA:C5:D5
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 019654C9D869FCC346E2377106E70EDB2565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 130D
Signing time: Sun 20 Apr 2025 20:00:36 +0000
Manifest this update: Sun 20 Apr 2025 20:00:36 +0000
Manifest next update: Mon 21 Apr 2025 20:00:36 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: 3zAkz49c+QeIhD5nTnibIJLrrzgXneTDK/GWmezz7OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:d8:69:fc:c3:46:e2:37:71:06:e7:0e:db:25:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Apr 20 20:00:36 2025 GMT
Not After : Apr 21 20:00:36 2025 GMT
Subject: CN=debe1ae832588b6ec7b64417360ab1f041eac5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ab:7d:41:80:b7:a5:46:fc:1e:e8:e8:5a:f3:
33:a8:31:f5:f1:43:03:05:cc:6e:f8:67:9e:48:3f:
1d:08:0c:6b:00:a0:b4:c0:d8:de:6f:7c:de:0e:bd:
6c:28:f4:ab:15:c9:b2:cf:13:39:30:b9:09:c5:a0:
bf:d3:c5:0b:6c:df:92:72:69:07:c2:4d:1e:23:e0:
17:0a:c6:bd:69:50:69:d0:be:0d:b3:88:d8:bb:94:
4d:55:9c:a9:31:71:8d:bb:4b:b1:eb:73:11:4a:95:
8e:bd:85:3a:c7:ff:f3:8d:c2:1c:09:ac:be:cf:13:
07:8b:28:98:8e:03:04:33:11:48:ed:2d:af:3e:0a:
d9:30:7f:71:c9:c5:51:14:b8:1e:41:a6:7f:30:1a:
1c:ae:2b:81:68:54:f8:93:c2:67:0f:9b:1c:79:82:
fd:b7:67:ab:4a:f7:24:fd:5c:10:f6:62:01:97:91:
4c:65:c8:6e:ed:fd:54:ea:87:7b:23:89:ee:a9:3b:
ea:87:7e:9d:49:13:4b:12:e9:4b:e7:59:66:3e:1a:
86:9e:d1:36:08:3a:6a:10:cd:3a:75:e4:46:3f:86:
54:54:dc:0f:dc:01:57:e4:2e:4a:e9:5b:59:dd:e6:
3e:d0:fc:4e:c3:ad:69:27:f9:ad:39:df:14:7f:91:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:1A:E8:32:58:8B:6E:C7:B6:44:17:36:0A:B1:F0:41:EA:C5:D5
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1d:39:f0:60:74:87:6d:38:f8:07:9f:79:91:85:75:21:3a:
3b:78:fa:0a:60:04:93:e7:8e:b0:e8:68:b6:f2:41:bc:bd:c4:
50:33:ca:3b:d0:98:83:17:69:a9:5e:cb:6e:8b:8a:fc:e2:f0:
10:f4:42:88:b6:92:98:0b:47:22:2d:3a:01:b8:1b:ae:06:56:
13:dd:b4:04:bb:0c:88:e4:71:de:82:34:f7:c1:01:27:34:51:
ed:99:ed:4c:cb:b7:a4:00:65:0d:66:ab:62:e6:bd:f1:25:c2:
2d:24:80:57:e4:0b:87:9c:0c:e5:79:99:de:fc:1a:80:86:7d:
29:12:1d:57:6a:6f:54:e6:98:c7:e4:bc:0c:ce:89:63:8d:a5:
85:6d:31:e0:7b:92:27:58:48:e1:1b:99:01:09:47:df:83:1c:
2d:ea:36:30:74:12:83:28:b2:d5:b9:7e:00:de:36:50:fe:54:
53:83:67:e2:ad:89:a7:7d:f1:84:e1:10:6c:7f:cb:da:ca:d9:
a5:a0:48:cf:64:17:3a:40:11:c1:18:53:69:69:61:c4:d5:df:
61:a8:13:f4:d3:0f:bc:10:af:ce:81:b8:b7:19:94:46:1f:e1:
84:c0:41:92:57:f9:61:ed:87:e3:2b:f9:c0:20:f9:86:59:60:
ee:0a:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:01:24 2025 by rpki-client