Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier: 5A2ljUIfripnRmUQWBKPJYf8RX+TWYkUTlvBSPNtFNA=
Subject key identifier: F3:48:E9:65:6C:2E:19:7E:9C:9E:75:12:38:9D:9D:9F:3F:F1:93:10
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial: 01963C5413F075875D0E3C10458F4A4618D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number: 1168
Signing time: Wed 16 Apr 2025 02:01:05 +0000
Manifest this update: Wed 16 Apr 2025 02:01:05 +0000
Manifest next update: Thu 17 Apr 2025 02:01:05 +0000
Files and hashes: 1: R2hIzPH7WznpzB3A9VGA94-nqD4.roa (hash: kT7LJSBIR26R77fVHHIPqJYdfVy6esu3U3f7NvLKrOU=)
2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: rWy1nt4NHyVqTObbHNwLB9NDrJK5Q5dVuMQ6BFEQJVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:54:13:f0:75:87:5d:0e:3c:10:45:8f:4a:46:18:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Validity
Not Before: Apr 16 02:01:05 2025 GMT
Not After : Apr 17 02:01:05 2025 GMT
Subject: CN=f348e9656c2e197e9c9e7512389d9d9f3ff19310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:e9:63:86:1c:65:0e:52:52:30:47:ab:1c:
36:14:ec:5c:c2:8f:41:8d:80:48:d5:d9:df:75:bd:
82:27:43:b3:8c:ef:10:82:81:ad:80:1b:49:ad:45:
ca:a8:26:46:d0:c6:16:ef:96:5f:2a:93:f9:c2:0e:
ae:c9:cb:e4:99:9d:3a:14:58:f1:e5:a0:02:d3:4c:
ee:97:fe:6d:3f:a1:0e:08:ac:75:0f:13:3e:1c:9a:
c3:2e:4f:e6:3c:c5:99:86:c9:ed:dc:19:99:c9:cc:
b0:fc:38:fc:df:cc:bc:e0:fc:55:6a:98:bb:9c:7a:
27:d7:05:29:16:73:98:45:f5:19:bc:6c:a3:55:0b:
8a:e3:eb:c0:68:a5:cd:a9:1f:91:f4:cd:b0:66:26:
3c:c7:34:e3:28:41:92:e4:cf:2a:d2:d3:c1:1d:1d:
9c:3d:f7:04:f4:3e:ce:14:c0:01:27:47:9c:32:b6:
c9:20:8e:eb:6e:0c:bf:8b:f0:ea:f3:d0:21:ee:d1:
d3:bf:b8:53:e7:44:72:98:68:68:4a:b0:80:10:59:
44:74:02:2f:27:e5:26:a2:6e:d0:a4:14:76:74:c8:
08:d3:f3:b8:70:7d:0b:ba:13:b2:ee:34:fc:9f:89:
d0:52:1c:94:f9:e5:4b:2f:0f:20:c5:01:18:4d:30:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:48:E9:65:6C:2E:19:7E:9C:9E:75:12:38:9D:9D:9F:3F:F1:93:10
X509v3 Authority Key Identifier:
keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f6:a0:19:64:33:60:d0:b8:37:35:46:d8:dd:7f:ff:ee:f6:
53:b5:41:8e:e7:0a:00:ca:c6:c6:00:04:a8:c8:7b:09:c5:a1:
4b:c1:e8:c4:30:d5:ca:77:da:85:3a:a3:e2:57:ef:b4:2a:e3:
eb:2d:6f:dc:63:42:48:e9:5e:57:3a:2d:c7:c6:00:8c:64:fc:
bc:03:b6:95:19:76:e3:9a:19:e9:1e:93:af:e8:80:d5:2c:3b:
44:75:70:cb:f0:02:f3:13:00:8c:0b:6a:ee:d7:83:d9:04:56:
41:e1:9f:6d:2b:54:fc:bd:90:d5:80:04:a8:a7:88:b5:8d:2e:
c9:18:a3:61:6f:c0:00:f1:53:e2:ed:1b:fa:91:37:92:b6:cf:
12:97:c9:04:5a:05:8b:ac:07:36:8a:7c:58:7b:b5:26:2e:20:
f7:b2:35:55:14:e5:65:e8:ab:b7:3e:87:65:f1:8c:3f:54:f0:
83:87:d3:ea:97:5b:5a:f5:a1:f7:e5:89:ce:43:a0:87:1e:e1:
da:46:1e:f9:c3:13:20:25:58:12:57:39:6f:2b:62:2a:b8:44:
37:93:82:c8:0c:7f:61:c9:87:65:d8:70:e7:3f:ce:7d:6c:0c:
e2:7b:41:8a:5b:07:ea:fd:d3:f7:e2:1c:3b:99:0d:8d:8e:e4:
56:65:77:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8VBPwdYddDjwQRY9KRhjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3Y2MzYTUyM2JlYTIyNGE3NGJjOTZhNGFmNDE2NGMyNDc4
NmI4MmUwHhcNMjUwNDE2MDIwMTA1WhcNMjUwNDE3MDIwMTA1WjAzMTEwLwYDVQQD
EyhmMzQ4ZTk2NTZjMmUxOTdlOWM5ZTc1MTIzODlkOWQ5ZjNmZjE5MzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvLpY4YcZQ5SUjBHqxw2FOxcwo9B
jYBI1dnfdb2CJ0OzjO8QgoGtgBtJrUXKqCZG0MYW75ZfKpP5wg6uycvkmZ06FFjx
5aAC00zul/5tP6EOCKx1DxM+HJrDLk/mPMWZhsnt3BmZycyw/Dj838y84PxVapi7
nHon1wUpFnOYRfUZvGyjVQuK4+vAaKXNqR+R9M2wZiY8xzTjKEGS5M8q0tPBHR2c
PfcE9D7OFMABJ0ecMrbJII7rbgy/i/Dq89Ah7tHTv7hT50RymGhoSrCAEFlEdAIv
J+Umom7QpBR2dMgI0/O4cH0LuhOy7jT8n4nQUhyU+eVLLw8gxQEYTTBLfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNI6WVsLhl+nJ51EjidnZ8/8ZMQMB8GA1UdIwQY
MBaAFGfMOlI76iJKdLyWpK9BZMJHhrguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEt
N2NmYjE5ZjZlMTMzLzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iYzkxNzQtYTNkMS00MDU4LWFhMGEtN2NmYjE5ZjZlMTMz
LzEvWjh3NlVqdnFJa3Awdkpha3IwRmt3a2VHdUM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/agGWQz
YNC4NzVG2N1//+72U7VBjucKAMrGxgAEqMh7CcWhS8HoxDDVynfahTqj4lfvtCrj
6y1v3GNCSOleVzotx8YAjGT8vAO2lRl245oZ6R6Tr+iA1Sw7RHVwy/AC8xMAjAtq
7teD2QRWQeGfbStU/L2Q1YAEqKeItY0uyRijYW/AAPFT4u0b+pE3krbPEpfJBFoF
i6wHNop8WHu1Ji4g97I1VRTlZeirtz6HZfGMP1Twg4fT6pdbWvWh9+WJzkOghx7h
2kYe+cMTICVYElc5bytiKrhEN5OCyAx/YcmHZdhw5z/OfWwM4ntBilsH6v3T9+Ic
O5kNjY7kVmV3sw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:00:30 2025 by rpki-client