Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: xC3n/dNKGrE220w3GTJj+9SpPmH2U1GvbLqrFjv+fUk=
Subject key identifier: E7:BE:73:3A:8B:E2:1D:41:30:A4:57:77:C7:9D:59:81:03:EA:B9:50
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 019659147F334CBC10AE179C367D988AA00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: F5
Signing time: Mon 21 Apr 2025 16:00:37 +0000
Manifest this update: Mon 21 Apr 2025 16:00:37 +0000
Manifest next update: Tue 22 Apr 2025 16:00:37 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: XzLKkKbaWn9tQ4gi+5r3n+ghrVfqcczz+Ynxuq1t0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:7f:33:4c:bc:10:ae:17:9c:36:7d:98:8a:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: Apr 21 16:00:37 2025 GMT
Not After : Apr 22 16:00:37 2025 GMT
Subject: CN=e7be733a8be21d4130a45777c79d598103eab950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:10:ff:33:be:6b:4c:2d:ec:e3:e0:86:a4:
38:78:f6:64:d9:60:a0:bc:7b:6e:ac:23:47:12:03:
a5:ce:1a:a6:bd:4c:d8:cd:ec:c1:e8:d2:4e:82:99:
d6:80:ac:fd:ea:94:44:16:41:6f:ca:6f:20:ab:82:
25:1a:b1:3e:9c:81:08:65:53:a5:fc:6d:50:c1:2d:
ab:86:e7:ae:73:ac:b4:01:ab:7d:23:62:19:cb:7f:
31:03:1f:d5:7d:07:30:a5:ab:0e:c1:98:95:1c:02:
b5:5d:d6:ec:ad:fc:55:d2:f2:e0:7b:bf:08:16:95:
dd:3b:6b:24:fe:97:be:89:f7:6b:d5:8d:c9:7c:e9:
8b:85:97:03:0a:f8:71:2d:be:ed:f7:bf:c6:0f:b5:
77:e4:74:48:9a:84:fa:56:c0:80:60:51:df:e5:4e:
a8:e2:59:ce:1c:9f:98:25:ed:2b:74:a5:67:f7:f0:
19:01:a4:c5:4b:b1:42:9d:2d:89:40:31:22:9f:c6:
10:a4:c7:a3:2e:b3:00:0a:c6:70:ad:48:9d:a2:7a:
08:a7:1e:3d:8d:3d:9e:78:bf:7b:c1:39:2f:8c:04:
90:51:11:1e:04:9e:b9:0f:38:81:5b:79:07:57:1d:
15:bc:e8:e3:53:b2:10:21:ce:ea:0e:a1:63:91:9b:
59:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BE:73:3A:8B:E2:1D:41:30:A4:57:77:C7:9D:59:81:03:EA:B9:50
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4c:84:f6:e0:73:b2:5c:65:a4:3b:7c:59:a1:e0:9a:09:ef:
cf:ef:c4:37:3e:3b:d7:c0:17:8b:70:e9:97:32:5b:0e:ac:17:
b4:ea:ab:30:d7:f9:f3:19:75:4c:8f:99:e0:f0:66:49:22:38:
35:2e:15:ec:bf:4a:85:24:c1:6a:7b:5b:bf:d4:b5:06:ab:7d:
cb:9b:01:6a:d4:e7:86:94:7c:48:b7:c3:67:49:76:f6:0f:b3:
68:e9:d3:48:21:db:21:79:01:96:b2:d2:ca:27:5d:71:7e:ba:
f5:b8:f7:b2:d8:3f:8b:1d:ff:70:c9:74:42:ef:73:3f:3f:83:
d8:51:80:54:a5:ba:38:db:d4:9d:f9:e9:6c:f4:13:28:9c:6d:
13:ed:b9:86:0e:76:54:74:11:c8:6d:18:d5:8b:8a:eb:bb:01:
68:f1:d5:6f:f6:c7:ea:f2:85:19:9a:bb:88:3e:7e:c4:e7:a9:
8f:7a:6f:0b:13:c6:cb:6e:d5:cc:e4:76:eb:af:a2:57:d0:1a:
74:c3:94:b0:dc:0c:ed:d1:c4:79:e9:bc:86:c4:3a:be:d6:c6:
10:ae:d4:c6:d7:cc:04:80:85:bf:b9:0f:af:14:ef:fc:47:53:
8f:e3:5f:55:f5:72:5d:11:72:fa:ff:d6:9a:ca:9d:35:12:ec:
e5:23:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:31 2025 by rpki-client