Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json)
Hash identifier: SNQNHWZsQCWmtOBG0Po1Lrxg807AvKSBjME7AC+qQhk=
Subject key identifier: B1:AD:41:7D:E1:D6:53:11:D8:B8:81:87:91:CA:F3:3E:A1:80:FB:A5
Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3
Certificate serial: 01964D7E9063B1C170CEDCB103BC64910154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
Manifest number: 90
Signing time: Sat 19 Apr 2025 10:01:02 +0000
Manifest this update: Sat 19 Apr 2025 10:01:02 +0000
Manifest next update: Sun 20 Apr 2025 10:01:02 +0000
Files and hashes: 1: RB7y6640f4SnVimQzu6JWvm3C6k.roa (hash: uwidWxkKZEKWtlEveUv5MeKzL8ydf3kx4CybcObpyPA=)
2: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: Sh3ZTNi8CKkI/6cp8FBPMHrSPLCphEjhboHLnUrCR9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:90:63:b1:c1:70:ce:dc:b1:03:bc:64:91:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3
Validity
Not Before: Apr 19 10:01:02 2025 GMT
Not After : Apr 20 10:01:02 2025 GMT
Subject: CN=b1ad417de1d65311d8b8818791caf33ea180fba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:41:44:62:7d:a3:c5:1b:82:fb:71:bc:4a:56:
5c:a6:05:28:f6:e8:ab:2d:a1:a8:f0:5b:f7:cd:ca:
85:f6:4a:54:09:aa:b1:95:03:92:e2:20:24:e8:ae:
9a:83:4b:bb:83:f7:b8:53:1d:50:fe:51:81:f3:89:
0a:0d:14:d9:e3:34:cd:2f:b6:41:b0:3a:4b:7d:b8:
1f:b0:6b:39:50:ee:ab:15:ee:95:84:7f:01:17:71:
ec:e6:68:99:8a:16:a9:0b:76:bd:34:59:1a:e5:1a:
85:95:48:31:9e:ce:73:0e:b6:bf:6b:12:57:c4:9a:
30:4a:de:b1:ce:7d:83:5e:0e:3b:e5:3f:34:e6:c7:
94:c7:76:71:95:dd:6a:94:bc:4f:0e:45:4d:0a:81:
d3:3d:6d:85:8f:51:13:b2:4c:92:c1:8f:5c:2a:39:
d3:0a:80:b8:75:56:6e:4e:ce:4c:e4:ce:58:c7:b8:
93:ea:e7:ef:6d:5d:85:f7:8b:dc:62:df:9e:40:94:
e3:1f:ac:6a:17:d7:cf:ad:1b:68:63:52:6d:54:3d:
47:94:37:c1:e3:ad:4c:4f:f2:c5:31:42:87:6d:b4:
54:78:ac:c8:e6:c9:a9:0d:60:73:7f:5c:42:70:85:
84:0b:7c:03:59:8f:a9:da:65:82:ad:92:41:3c:36:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:41:7D:E1:D6:53:11:D8:B8:81:87:91:CA:F3:3E:A1:80:FB:A5
X509v3 Authority Key Identifier:
keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9f:26:e9:e3:da:71:bb:a7:6e:51:0c:92:bc:fb:3c:f7:7d:
60:f6:75:8a:44:0c:30:af:75:22:cd:fa:06:78:b4:d3:a7:a4:
ad:ac:32:ab:ba:31:01:89:bc:01:a2:a6:16:41:43:dc:7b:16:
aa:b5:ab:4d:11:9b:7d:f1:d6:5f:df:bb:3f:39:71:5b:2a:6f:
74:ac:5a:f2:f6:3b:de:fc:b9:2b:94:05:32:61:56:c9:7f:d3:
3e:37:76:86:d7:8a:43:6f:8a:fa:bd:5e:9d:6a:9a:53:f1:37:
1c:a2:27:81:62:d5:66:65:08:02:d7:91:b7:aa:9b:cb:e6:a2:
4e:4e:97:92:c1:35:1c:97:f4:36:6a:90:ae:f3:6b:f9:33:ba:
9f:59:6a:6d:09:23:ae:79:c9:8f:1c:55:cf:17:25:78:2a:3d:
28:04:9f:09:08:5e:32:93:92:de:66:00:d4:d7:63:04:58:cf:
0f:20:6e:5d:9c:71:8b:15:5a:c0:b5:a9:11:31:3d:63:3a:cd:
77:ff:27:a9:0e:19:ef:f7:65:2a:55:32:4c:cf:c3:13:e6:ab:
82:0a:d8:ca:12:fe:ca:50:29:99:9e:99:f5:95:6c:ed:d0:a2:
4a:69:76:61:2c:90:c1:6e:1a:91:05:f7:54:71:0f:da:f7:c2:
3c:59:e6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:32:57 2025 by rpki-client