Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: JhGbulo2hQMzRipubml6m5da7KTjkm68UeyuZHOWqD8=
Subject key identifier: 79:0D:B9:0F:69:6D:CB:BB:F2:6B:43:4D:EC:5F:B1:11:27:7F:E3:DD
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 019614D8B296BFA7B946CEFEEBE2A05680D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 099E
Signing time: Tue 08 Apr 2025 10:01:07 +0000
Manifest this update: Tue 08 Apr 2025 10:01:07 +0000
Manifest next update: Wed 09 Apr 2025 10:01:07 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: 6iQc4d0B81uFlJzOW/vRZBoaFvJmSMurUv4e23ZbmCI=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:d8:b2:96:bf:a7:b9:46:ce:fe:eb:e2:a0:56:80:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Apr 8 10:01:07 2025 GMT
Not After : Apr 9 10:01:07 2025 GMT
Subject: CN=790db90f696dcbbbf26b434dec5fb111277fe3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:cf:62:40:f0:d9:ee:b6:79:37:fc:c7:08:
3a:2b:1f:b8:7f:88:3a:e4:79:aa:ad:9e:cc:fa:0a:
6e:b8:3a:0f:ad:a4:b4:23:c8:de:25:46:26:6b:de:
e4:ca:ff:d7:db:09:a8:ce:5f:1d:41:70:9b:cb:74:
79:87:b4:a3:f0:a0:04:99:5f:78:f4:9c:57:8c:f6:
af:25:a4:2c:42:2b:f5:a7:da:78:6a:6e:e5:13:cb:
91:08:8a:f8:06:96:20:81:5e:b2:e0:31:6d:99:d0:
bd:c4:c8:a7:66:2e:f1:68:26:9f:68:7c:e6:0e:ce:
ae:93:af:48:b5:a8:49:a2:98:1f:83:94:b8:02:8e:
56:6d:84:87:4b:19:67:22:0c:01:4d:de:f3:d6:21:
a4:30:ec:e0:b0:fb:ad:17:8c:d5:16:28:74:e3:2d:
26:c7:12:f6:93:08:65:c9:dc:59:95:f9:01:3e:63:
95:74:3f:13:9a:92:bb:4c:4a:4d:97:d7:15:c8:6e:
1e:62:f7:53:1f:61:8f:3e:5f:bc:d8:6d:a4:ba:b5:
86:ed:fb:5f:72:7d:4d:1b:27:01:b2:4d:82:fc:10:
bf:34:b4:8b:66:ba:97:4a:ec:52:88:a1:44:aa:7d:
cd:99:d9:9d:08:87:c0:72:72:de:54:5e:35:49:b3:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0D:B9:0F:69:6D:CB:BB:F2:6B:43:4D:EC:5F:B1:11:27:7F:E3:DD
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:38:0d:99:87:a1:be:4b:3b:cf:a5:2c:4a:8e:e3:de:e7:7e:
b3:30:6e:23:78:ad:c5:aa:ce:6a:1d:83:3d:fb:49:79:37:e2:
a3:07:58:27:9f:54:35:2e:57:3b:57:ea:6d:2a:0d:4c:e9:15:
5f:4f:df:c6:30:d9:c7:01:34:89:36:c4:69:96:d3:ad:f3:7a:
7f:c5:30:6d:4a:21:0e:40:9c:d4:29:54:0d:87:2a:42:2c:a2:
36:06:59:be:2a:99:8c:f1:34:2a:28:75:ea:43:cd:51:75:21:
bf:2b:3b:47:bb:b3:93:d4:a1:ae:46:46:3b:6b:a1:f6:5e:6b:
d4:a6:63:64:37:56:ca:29:1d:2e:c0:ec:57:5d:52:de:f5:e6:
5d:4f:06:bd:3e:ab:d1:26:19:13:60:d4:47:38:01:fe:c5:1b:
c8:78:3f:6f:a8:37:6f:c7:cc:e4:3e:67:65:79:bd:68:d0:77:
cd:94:7a:b4:a0:9d:ef:b5:be:70:f2:aa:9f:cb:50:de:dc:55:
71:03:85:81:df:9e:1f:5d:03:11:1d:e1:cc:19:2a:d4:18:f1:
6e:89:45:2c:b0:40:10:80:e4:29:a0:9f:db:70:2f:a4:e8:6b:
0f:6c:4f:7a:1b:23:76:14:47:62:78:10:f8:13:a9:83:88:64:
46:9e:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:38:46 2025 by rpki-client