Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: 6cLEUhh2Fmh6k9a2Ko4Xa57sdu+cHncYl7eFp0hUs4s=
Subject key identifier: BE:E3:48:8C:AF:AE:AE:0C:BD:98:D0:2E:33:F9:74:15:CF:EE:D2:41
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 019655DC918FAA1CA7B52DD243EDEDC18FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 0567
Signing time: Mon 21 Apr 2025 01:00:40 +0000
Manifest this update: Mon 21 Apr 2025 01:00:40 +0000
Manifest next update: Tue 22 Apr 2025 01:00:40 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: Gwgrfll8spLZmoL63l/8A6YsMPwg4cTi8z+xlbTWDKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:91:8f:aa:1c:a7:b5:2d:d2:43:ed:ed:c1:8f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: Apr 21 01:00:40 2025 GMT
Not After : Apr 22 01:00:40 2025 GMT
Subject: CN=bee3488cafaeae0cbd98d02e33f97415cfeed241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:9c:4f:2d:e6:e1:aa:46:c2:0b:79:be:b5:
a1:cb:55:52:4e:61:89:50:fa:5e:45:f1:b8:45:5b:
0c:44:02:35:70:ee:d2:56:1a:11:5a:da:44:fd:ab:
fb:d4:05:79:24:e8:8b:21:4f:98:8d:7a:81:2b:51:
2a:c8:56:b0:26:17:e1:0f:8c:9b:7e:94:fa:e2:f5:
c6:6a:4d:be:27:55:f6:00:e6:74:f4:b1:0e:b2:1c:
87:cb:73:c0:8e:10:2c:63:ec:57:ea:3d:3e:41:ca:
03:05:1d:3c:6a:51:f4:6e:51:b4:81:6a:a8:cf:30:
e7:8e:96:44:1a:11:b3:b1:3c:14:67:7f:a7:26:78:
d8:88:95:10:de:ab:f0:1b:86:fa:e7:f6:52:83:43:
a5:6b:fd:6b:a3:01:c2:5e:15:10:60:ba:06:3a:81:
85:96:45:c5:f5:b2:4c:d2:84:40:2a:52:30:00:20:
1e:14:bc:05:ec:f9:c3:d1:92:fa:c7:e7:5b:c7:a5:
6f:d8:a5:bf:38:ab:37:69:f8:44:a1:40:28:84:c8:
8f:9d:79:20:ca:7a:ac:8d:92:89:08:87:bd:6c:61:
d3:ac:a5:a0:13:c3:0e:44:78:11:6c:65:35:60:aa:
4e:2b:e6:10:1d:96:30:78:1a:6f:14:ca:7c:b9:fa:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E3:48:8C:AF:AE:AE:0C:BD:98:D0:2E:33:F9:74:15:CF:EE:D2:41
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f5:d9:4b:46:80:a7:0b:a4:4b:b2:86:42:7b:78:b7:bd:22:
8c:8d:3e:94:87:7d:a3:36:a3:05:a3:c2:fc:55:9b:8e:d7:5d:
41:3a:7e:99:65:94:95:28:40:c5:9f:c8:79:11:e5:d3:c0:89:
90:d0:88:79:af:96:eb:04:35:22:6c:d2:d2:f5:59:d2:62:3f:
e6:cf:82:2e:80:0d:88:ac:d8:8a:25:2d:4c:3f:78:27:c5:a5:
ca:76:af:db:d6:e6:f2:a6:4c:41:b4:71:9b:6d:03:f9:f4:a2:
1b:45:cf:12:cc:17:41:f3:a2:01:fe:72:bc:89:f4:01:80:87:
88:6c:0d:fa:ec:03:7a:12:91:1d:d1:9a:0a:ba:2b:f9:45:bd:
f4:8a:28:61:cb:50:78:ff:f4:53:73:e7:3a:b0:ff:23:dc:0d:
18:1c:7e:37:bd:aa:cb:74:8e:a4:8d:5f:7b:fc:0d:95:8c:56:
0a:6e:31:7a:7a:c2:0a:4b:4f:9d:b8:b4:1c:9e:60:83:1b:1d:
8e:98:22:93:e0:db:48:29:e7:d9:24:70:f9:e5:66:ed:41:2e:
a4:e7:8f:47:05:05:0f:f2:37:e4:48:6f:39:d0:0c:29:27:b4:
5f:5b:1c:7c:59:59:d8:35:f9:57:52:28:cc:cc:3c:f4:d4:9e:
df:ce:af:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3JGPqhyntS3SQ+3twY+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3NTkyNjdmMDNmNzZkODdmZTQxYjJjYjBiMjk1ZDIzYzc1
NGM1OWEwHhcNMjUwNDIxMDEwMDQwWhcNMjUwNDIyMDEwMDQwWjAzMTEwLwYDVQQD
EyhiZWUzNDg4Y2FmYWVhZTBjYmQ5OGQwMmUzM2Y5NzQxNWNmZWVkMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBWcTy3m4apGwgt5vrWhy1VSTmGJ
UPpeRfG4RVsMRAI1cO7SVhoRWtpE/av71AV5JOiLIU+YjXqBK1EqyFawJhfhD4yb
fpT64vXGak2+J1X2AOZ09LEOshyHy3PAjhAsY+xX6j0+QcoDBR08alH0blG0gWqo
zzDnjpZEGhGzsTwUZ3+nJnjYiJUQ3qvwG4b65/ZSg0Ola/1rowHCXhUQYLoGOoGF
lkXF9bJM0oRAKlIwACAeFLwF7PnD0ZL6x+dbx6Vv2KW/OKs3afhEoUAohMiPnXkg
ynqsjZKJCIe9bGHTrKWgE8MORHgRbGU1YKpOK+YQHZYweBpvFMp8ufr5iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7jSIyvrq4MvZjQLjP5dBXP7tJBMB8GA1UdIwQY
MBaAFGdZJn8D922H/kGyywspXSPHVMWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEt
OWY4YWJlMGU5ZmYwLzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85ZGFjMDUtNmY4My00OThmLTlhMGEtOWY4YWJlMGU5ZmYw
LzEvWjFrbWZ3UDNiWWYtUWJMTEN5bGRJOGRVeFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPXZS0aA
pwukS7KGQnt4t70ijI0+lId9ozajBaPC/FWbjtddQTp+mWWUlShAxZ/IeRHl08CJ
kNCIea+W6wQ1ImzS0vVZ0mI/5s+CLoANiKzYiiUtTD94J8Wlynav29bm8qZMQbRx
m20D+fSiG0XPEswXQfOiAf5yvIn0AYCHiGwN+uwDehKRHdGaCror+UW99IooYctQ
eP/0U3PnOrD/I9wNGBx+N72qy3SOpI1fe/wNlYxWCm4xenrCCktPnbi0HJ5ggxsd
jpgik+DbSCnn2SRw+eVm7UEupOePRwUFD/I35EhvOdAMKSe0X1scfFlZ2DX5V1Io
zMw89NSe386voQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:24 2025 by rpki-client