Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
File: Z781NxWjTdooYF_c97eugG0xFZw.mft (raw, json)
Hash identifier: Ar+cHld4XusSSNA2KaMd260Imn+cPRxrXdvfZrd/BVo=
Subject key identifier: 22:DD:6C:25:3B:FA:EB:C8:C4:AF:C4:B5:F6:ED:40:03:A2:76:C1:C5
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 01958CCE75AA3F53A24148C71A5727DD8816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
Manifest number: 1495
Signing time: Thu 13 Mar 2025 00:01:35 +0000
Manifest this update: Thu 13 Mar 2025 00:01:35 +0000
Manifest next update: Fri 14 Mar 2025 00:01:35 +0000
Files and hashes: 1: Z781NxWjTdooYF_c97eugG0xFZw.crl (hash: R39+nNeO8/HaTsNNuAsI579jsv9tAqJ2uRmD0WUHrV0=)
2: f2XJfv98xMfqrpaFL1qLYMfVin0.roa (hash: mHLRZPkQ/y6jVuiV902GM613VmK1FGvmtwd5Ojyc76Y=)
3: g8Y2TOOKVhHIEabpCmuLfqLOwz0.roa (hash: c/0TsoE4PcOybpB4LfpOknZ1hO7co+C172nPxlIdcnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:75:aa:3f:53:a2:41:48:c7:1a:57:27:dd:88:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Mar 13 00:01:35 2025 GMT
Not After : Mar 14 00:01:35 2025 GMT
Subject: CN=22dd6c253bfaebc8c4afc4b5f6ed4003a276c1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b1:fd:a1:23:bc:f9:c3:51:f6:20:d0:83:0d:
24:89:20:c0:e7:93:1b:38:ec:28:e9:c2:f5:d8:05:
15:a0:19:95:70:20:e3:d8:05:f8:d6:b4:7a:7e:bf:
0c:08:e5:db:4f:f8:a6:6f:17:a3:97:25:fb:8e:1f:
a7:d8:00:3b:1a:18:d0:42:bc:ca:f0:d3:2d:70:1f:
21:b4:ff:1e:67:25:61:18:5f:92:96:b4:c2:2c:4a:
16:4d:eb:75:52:1f:b9:41:13:11:cc:d0:57:8d:d0:
d3:1a:1a:ec:2b:1e:9c:b7:57:a5:7c:dc:82:94:1a:
3b:2d:6d:33:35:67:2d:a1:c8:86:d9:2f:17:c0:8d:
98:22:37:6c:06:90:ab:32:df:c8:80:27:46:c2:29:
a5:46:80:6a:35:ba:8c:df:c8:c0:a7:6d:f9:a9:e7:
2a:c9:c2:16:50:e1:7b:7f:27:f8:71:05:35:89:93:
a7:e4:a5:c3:3f:8d:8a:54:c0:32:b2:ac:78:bb:65:
d8:81:1b:5b:ee:66:df:65:9c:89:a3:46:97:01:ad:
d7:c2:27:eb:a3:3e:74:40:ef:7c:6e:fc:2f:13:fa:
e9:67:e4:4d:a2:8a:f6:c4:ba:32:1a:f9:58:cd:f6:
9e:b1:35:5c:9c:93:b4:8b:51:42:b5:87:73:ee:29:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:6C:25:3B:FA:EB:C8:C4:AF:C4:B5:F6:ED:40:03:A2:76:C1:C5
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d4:fd:fc:cd:cf:3d:85:e6:d1:eb:c3:f4:91:ad:36:2b:c9:
87:73:02:95:c8:b2:3d:45:f1:f9:fc:09:d6:ce:98:fa:ef:cf:
bb:0a:17:a3:69:8e:17:f2:91:fb:a3:44:13:48:a2:61:de:1a:
bd:47:04:02:c5:cd:c9:ab:9a:fd:91:18:08:9c:fd:6c:34:9c:
bf:19:a3:15:a8:2e:84:01:84:31:9b:3e:1a:32:76:f5:6b:5f:
25:78:38:73:b8:1c:ad:d3:3e:51:5e:01:69:45:e0:e1:57:77:
e7:db:7f:6c:0b:e4:36:24:1d:ed:d7:b9:62:2b:0c:96:bc:59:
0d:f7:88:01:1d:35:ce:ea:e8:e9:1c:47:ed:2b:81:cf:2d:aa:
37:c4:36:d9:52:ee:b8:40:63:84:61:c4:2e:64:a0:82:49:ac:
c1:28:0f:72:54:e3:5c:32:f8:ab:59:19:92:a5:2f:0f:75:49:
ad:27:8d:89:9d:9b:48:3d:ba:c2:90:76:b2:0d:f8:57:da:63:
0f:30:5e:da:01:f3:74:0c:b6:c5:dd:75:de:5f:aa:d0:d8:85:
a3:18:bb:8f:95:8b:5d:16:7d:77:e3:80:0f:65:c4:0c:30:ff:
1a:e3:a7:cb:57:20:04:98:93:e5:b8:ff:9b:99:ed:45:55:8d:
a5:33:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:40 2025 by rpki-client