Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File: Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier: tzcVNz+MEsbNAJPsjPHagRMzpeovDiuhEcejGhhqUmY=
Subject key identifier: FB:CD:80:D6:0F:50:8A:B2:02:94:F0:31:5B:5D:5B:58:32:B5:51:17
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 0196586FAFF8F160072EF5A3A9A31C166C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number: 1504
Signing time: Mon 21 Apr 2025 13:00:36 +0000
Manifest this update: Mon 21 Apr 2025 13:00:36 +0000
Manifest next update: Tue 22 Apr 2025 13:00:36 +0000
Files and hashes: 1: A6mU_fy2dvWAW9y9y6qPym3VUYU.roa (hash: B8MQ+q91TtenzRFP6rUUzrDHFdogGVA1RdvfKnJNkfY=)
2: CEH26SsbgBXa-XRDjPR4dutITU8.roa (hash: 45+vY3NG1v7bfBUPDZYQRwEM4pvEI9SIrsWhw3tfGJE=)
3: GCgFGIXy9ORAgY5JZtgQnYO84po.roa (hash: uiQ3pF8ZQYiS46PnIMk3tsXyihLlgICHZ4OO1bUgWLU=)
4: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: oSWw5nn5vSgTYxb22zSsJjAtPD4rxbLuojmI5M3ScGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:af:f8:f1:60:07:2e:f5:a3:a9:a3:1c:16:6c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Apr 21 13:00:36 2025 GMT
Not After : Apr 22 13:00:36 2025 GMT
Subject: CN=fbcd80d60f508ab20294f0315b5d5b5832b55117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:02:4a:b0:4a:86:1d:2a:b7:76:91:eb:12:
69:92:ee:bf:59:bc:16:73:ac:e2:73:89:b3:f4:4e:
b4:5a:6a:d2:20:3f:78:31:7f:06:81:20:5c:0e:dd:
91:56:03:fb:1e:ac:9b:3a:18:c6:11:61:89:db:c0:
5d:2d:2e:9f:8b:6a:87:e7:83:33:db:50:a9:e1:14:
15:6a:88:ec:20:d0:77:83:60:c5:f9:10:1c:10:54:
21:35:10:6d:00:8b:9f:c6:61:b0:92:14:23:1f:c5:
b8:b1:45:7c:11:d9:32:04:41:d2:60:86:00:0d:be:
a2:69:38:34:da:16:c4:fa:39:d2:21:9f:eb:ea:bf:
39:0b:d9:be:10:b0:35:a8:5d:22:b0:e1:24:ae:53:
5c:e8:22:d3:7a:2f:ab:ae:a0:be:69:06:ed:2d:18:
34:e5:32:34:49:e6:e7:1b:34:23:b1:8d:5c:87:7b:
20:24:38:97:88:c0:bb:f6:07:41:0c:e0:c3:93:e7:
a8:29:d4:d0:14:f0:8d:89:a4:b8:0e:3a:83:b1:e6:
89:c4:24:10:7f:9f:94:83:3b:ec:18:0e:dc:7e:74:
3e:27:2d:16:c7:e0:4a:b2:6d:ac:ba:6a:b1:8f:30:
3b:b3:cc:56:dc:69:f0:84:b6:5e:e2:5b:dc:a8:c5:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CD:80:D6:0F:50:8A:B2:02:94:F0:31:5B:5D:5B:58:32:B5:51:17
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a2:db:49:01:3a:6c:41:37:d2:84:9b:b8:a8:61:63:a8:1d:
7f:bc:88:60:a4:c3:ee:ed:c7:7b:93:13:fd:0e:b8:be:d7:06:
4d:91:64:f2:53:1b:85:d8:1f:77:80:64:b5:43:77:fc:b0:60:
73:62:5b:50:65:e6:eb:b1:7a:ae:ea:9d:0b:0b:9d:82:ed:5a:
6e:d1:f2:e8:cb:a3:05:d8:43:54:7c:2e:08:71:61:84:00:2b:
ac:5a:3d:34:c0:16:e9:6b:22:d2:8f:c1:53:16:54:14:fe:8c:
b5:53:4b:3a:15:20:57:28:7d:db:55:6b:8d:33:5a:49:6d:3a:
60:02:e5:de:8c:0f:fa:52:25:e8:9c:84:f0:cb:17:9b:96:ff:
16:96:8e:de:c5:3d:62:bb:70:d7:2c:83:50:f2:8e:02:60:5a:
19:57:5e:f9:58:c7:39:ec:6f:19:72:e2:b0:2a:90:e2:9f:91:
65:4c:da:32:19:61:d5:ce:a5:d2:b6:65:59:8a:3f:02:de:95:
79:8f:67:d9:ca:0a:22:f9:df:4f:fc:b8:97:c8:7c:5f:0a:15:
d4:e5:ac:3d:7a:0c:c6:20:ec:a0:f5:72:50:86:e8:fe:43:ee:
71:b2:bd:a9:82:ec:26:7b:a8:16:f9:ae:c0:0b:9c:5a:d7:0f:
d8:c3:4b:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYb6/48WAHLvWjqaMcFmyPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YWY5MDE0YjBkZWRkMmMwNDg0MGFlMzg1YjUzMzlmNmM2
NzkwZjUwHhcNMjUwNDIxMTMwMDM2WhcNMjUwNDIyMTMwMDM2WjAzMTEwLwYDVQQD
EyhmYmNkODBkNjBmNTA4YWIyMDI5NGYwMzE1YjVkNWI1ODMyYjU1MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKkCSrBKhh0qt3aR6xJpku6/WbwW
c6zic4mz9E60WmrSID94MX8GgSBcDt2RVgP7HqybOhjGEWGJ28BdLS6fi2qH54Mz
21Cp4RQVaojsINB3g2DF+RAcEFQhNRBtAIufxmGwkhQjH8W4sUV8EdkyBEHSYIYA
Db6iaTg02hbE+jnSIZ/r6r85C9m+ELA1qF0isOEkrlNc6CLTei+rrqC+aQbtLRg0
5TI0SebnGzQjsY1ch3sgJDiXiMC79gdBDODDk+eoKdTQFPCNiaS4DjqDseaJxCQQ
f5+UgzvsGA7cfnQ+Jy0Wx+BKsm2sumqxjzA7s8xW3GnwhLZe4lvcqMVtMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvNgNYPUIqyApTwMVtdW1gytVEXMB8GA1UdIwQY
MBaAFGevkBSw3t0sBIQK44W1M59sZ5D1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAt
NWU3NThlODFlZmY2LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC83YzY2YjAtYzgwOC00NWExLTliNTAtNWU3NThlODFlZmY2
LzEvWjYtUUZMRGUzU3dFaEFyamhiVXpuMnhua1BVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqLbSQE6
bEE30oSbuKhhY6gdf7yIYKTD7u3He5MT/Q64vtcGTZFk8lMbhdgfd4BktUN3/LBg
c2JbUGXm67F6ruqdCwudgu1abtHy6MujBdhDVHwuCHFhhAArrFo9NMAW6Wsi0o/B
UxZUFP6MtVNLOhUgVyh921VrjTNaSW06YALl3owP+lIl6JyE8MsXm5b/FpaO3sU9
Yrtw1yyDUPKOAmBaGVde+VjHOexvGXLisCqQ4p+RZUzaMhlh1c6l0rZlWYo/At6V
eY9n2coKIvnfT/y4l8h8XwoV1OWsPXoMxiDsoPVyUIbo/kPucbK9qYLsJnuoFvmu
wAucWtcP2MNLbg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:20:35 2025 by rpki-client