Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
File: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft (raw, json)
Hash identifier: MF6gM1uqne6D81zvn//2xblCiTfQJRm3ER1C2+/5azk=
Subject key identifier: 17:A1:B7:D0:AC:20:34:DF:E3:28:92:C6:DA:57:F6:37:E8:E0:1A:69
Authority key identifier: 67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
Certificate issuer: /CN=67670683062cd8b35c1b760218a789b908cb4c8d
Certificate serial: 01965538AB165C5B15113A02E64633F01DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
Manifest number: 1009
Signing time: Sun 20 Apr 2025 22:01:39 +0000
Manifest this update: Sun 20 Apr 2025 22:01:39 +0000
Manifest next update: Mon 21 Apr 2025 22:01:39 +0000
Files and hashes: 1: Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl (hash: p10RGsRgJUQO68BnJv7ZNffB15JTK52J8vNYWUt3E5E=)
2: ZIWXo67jPvL3hLYa3gap-960Rno.roa (hash: 7t2maR+QFwGZQ0cko9J2jlQifVoeQAYE4OqVyag5JNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:ab:16:5c:5b:15:11:3a:02:e6:46:33:f0:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67670683062cd8b35c1b760218a789b908cb4c8d
Validity
Not Before: Apr 20 22:01:39 2025 GMT
Not After : Apr 21 22:01:39 2025 GMT
Subject: CN=17a1b7d0ac2034dfe32892c6da57f637e8e01a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:50:63:b2:d5:e7:bb:77:79:63:b6:08:23:
22:5d:98:2a:67:ec:b1:71:99:c5:0e:bf:5c:70:30:
59:77:f1:a4:47:b0:21:92:a3:ef:33:e1:aa:48:5f:
2f:60:53:2e:10:8e:ec:c7:75:88:d0:63:9d:46:b2:
58:20:00:25:9c:38:e3:a5:92:43:8e:0c:e6:69:95:
21:8a:6e:77:7a:25:d1:82:c8:19:a0:3d:7d:39:8e:
06:48:fc:ed:e8:7d:9d:e6:62:69:f8:33:a3:76:1e:
6f:5e:a8:66:07:91:30:1f:a2:46:87:6c:5c:2d:aa:
15:7c:2a:c9:5e:71:c2:1d:bd:6c:02:bf:7d:f6:2a:
88:5e:4b:1d:1c:0a:8c:2e:5d:0e:e8:b9:15:d7:54:
32:8d:13:16:47:ed:8d:c5:28:7e:16:1a:20:2d:d9:
31:7d:2f:2b:1a:8e:a3:fa:e0:22:52:3e:c5:ee:0c:
3c:1f:e1:f6:bc:a9:f0:46:84:58:ff:2e:a4:53:e9:
4a:db:e5:af:af:dd:7a:f1:5e:ff:73:ef:42:fc:2d:
ce:ac:45:6e:e8:d4:ff:1e:fe:6a:0e:9c:01:9a:cf:
e5:0d:84:3f:e9:ab:67:9c:0f:67:87:ce:55:8b:d0:
53:8c:c7:c7:29:b5:38:78:6d:3c:b7:65:b2:28:16:
9f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A1:B7:D0:AC:20:34:DF:E3:28:92:C6:DA:57:F6:37:E8:E0:1A:69
X509v3 Authority Key Identifier:
keyid:67:67:06:83:06:2C:D8:B3:5C:1B:76:02:18:A7:89:B9:08:CB:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/94f5c8-b41c-485a-b3db-7d8cb53dc086/1/Z2cGgwYs2LNcG3YCGKeJuQjLTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3c:13:c4:ad:d9:c8:d9:a3:12:dd:df:7a:4b:9d:4b:3c:e0:
2c:f3:c9:60:c8:9b:37:b0:4e:89:9a:37:6d:a7:c4:a5:51:f5:
2a:cb:1d:a5:39:c0:e0:3b:1b:0c:17:ef:cf:b7:43:e3:00:5e:
27:4d:b1:2b:41:3f:47:0b:42:3e:8a:fa:42:e5:65:e3:1f:e4:
97:22:90:7f:d6:26:60:5b:c0:22:ca:fa:de:a1:7f:84:5a:e1:
4a:0d:e4:d1:0b:e6:c4:31:f7:cb:aa:49:56:74:47:1a:86:04:
f3:5e:10:ef:ee:05:b9:33:2c:18:3b:a6:ac:e9:08:f2:34:d3:
53:be:6c:36:e0:94:1f:28:db:24:ae:6e:1e:b7:57:6e:b4:9b:
4c:a1:58:da:3d:a7:2c:b2:dc:33:49:14:dd:e1:46:ec:b9:97:
7b:b7:2e:f2:0d:68:98:1a:f7:ce:5c:a3:72:46:51:cf:6f:6c:
66:c9:cd:33:7e:85:da:79:66:e7:8f:7a:4d:f5:3f:af:e6:e0:
10:ee:8e:0b:3d:c4:14:8f:b8:b9:b8:01:ec:e5:71:5b:96:d8:
37:09:56:d1:b8:89:11:61:94:f2:90:e1:76:d1:7b:3f:99:66:
9d:03:49:02:e0:3e:11:fe:11:b7:2d:92:af:fb:2c:e0:83:ae:
2d:a4:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:23 2025 by rpki-client