Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: rorUPuIhfqYWtpP9sfFPJ4l4jmStGWStazyscEbT24g=
Subject key identifier: AD:A0:33:B6:E3:90:F9:E7:D9:A2:DC:13:CA:42:33:10:B4:E7:CF:ED
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 01965537D9562B558CF4114985EA2BEDB189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 124F
Signing time: Sun 20 Apr 2025 22:00:45 +0000
Manifest this update: Sun 20 Apr 2025 22:00:45 +0000
Manifest next update: Mon 21 Apr 2025 22:00:45 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: dIwxIlaLA/JOfGZ7twvGvoO81NUkmh7aR8curm8aPyQ=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:d9:56:2b:55:8c:f4:11:49:85:ea:2b:ed:b1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Apr 20 22:00:45 2025 GMT
Not After : Apr 21 22:00:45 2025 GMT
Subject: CN=ada033b6e390f9e7d9a2dc13ca423310b4e7cfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:b1:eb:6e:d9:72:39:81:cc:0a:c1:53:fd:
b6:d8:13:31:52:8e:9c:08:0b:32:7c:79:4c:bf:9f:
02:73:f0:87:97:07:db:de:58:31:89:60:0d:c1:b0:
9b:bf:7f:cd:93:e7:c1:fd:66:00:88:89:81:46:82:
5d:89:b8:d4:c2:a5:df:2c:93:26:db:76:b2:ce:a0:
ec:00:bf:b1:e4:e8:74:53:04:58:da:45:72:13:c3:
77:64:7e:82:44:f7:a6:1e:33:5a:4e:77:28:18:cb:
e1:b0:5c:77:6f:ab:c5:00:a2:fb:40:4e:8c:72:0a:
f9:14:64:f9:e6:3e:06:b2:b1:32:a3:ce:27:04:1c:
22:b8:42:a8:4c:2b:f0:ad:9d:29:a1:15:35:3f:d6:
9d:2c:7a:7b:0b:b5:94:27:5f:2a:b0:4f:6a:9d:74:
2e:70:1a:1f:2b:38:79:9e:82:f2:d6:da:7f:a2:85:
4b:63:97:de:ab:c8:a5:67:4a:e6:d0:f1:05:68:d0:
a4:e2:7f:dc:c6:f7:68:9f:57:40:eb:e0:3d:c6:0f:
ac:cf:f5:5e:2c:ec:6f:ee:67:2c:ed:9a:fd:a2:82:
58:ae:18:77:77:3f:da:c9:02:6b:cf:27:1f:d3:ae:
1f:f6:2f:68:85:10:1a:4c:7f:f6:e2:70:17:e4:7d:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A0:33:B6:E3:90:F9:E7:D9:A2:DC:13:CA:42:33:10:B4:E7:CF:ED
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:73:32:71:95:c5:87:58:45:72:64:2c:88:ed:60:72:74:
dd:66:f5:7d:26:2b:3f:80:12:21:c3:f5:f3:f9:44:e6:38:94:
b6:ea:13:2c:e9:21:e1:ef:af:74:cf:3b:7b:e3:88:83:5d:41:
0b:78:67:78:e7:d7:90:8a:ec:41:c5:43:83:ad:97:5e:02:39:
c7:dd:be:83:ea:b7:5e:4d:63:d9:02:ce:13:e9:75:7e:f2:30:
be:07:70:a2:2d:f2:76:94:b3:61:4e:0d:53:a8:bc:8e:53:7f:
24:da:90:04:d7:53:1f:db:de:22:d6:76:69:6c:0e:80:ab:b8:
3b:33:9e:15:61:04:10:9a:32:ec:e3:59:1d:c4:56:3b:9b:e0:
ec:43:e1:d3:cc:25:be:78:56:3a:1d:a6:b3:5f:e3:01:65:40:
d1:33:4a:b5:91:36:52:88:d5:b1:8d:aa:37:7a:7a:f4:d0:53:
f0:08:0b:71:e5:eb:f3:a7:c5:1c:4a:03:b1:34:47:7d:e4:ef:
70:4e:04:42:6a:49:49:fe:2f:53:6d:13:e1:63:d2:75:e5:35:
89:2b:c6:9e:8d:51:75:4a:82:4c:28:bc:dc:fc:e0:20:bc:02:
96:54:c7:8c:53:e0:e2:27:1c:00:49:01:45:f1:ac:d8:df:ad:
2b:cd:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:15 2025 by rpki-client