Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
File: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft (raw, json)
Hash identifier: kjb9MM2TvWYih3Babz4oR2OZ0sNcsg+H6rBdNL46SpU=
Subject key identifier: 61:6A:3B:04:F6:AF:C3:75:18:A0:58:C5:E4:0F:90:12:F7:C2:F3:FA
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 0196575D2C4FFEEC439D4C7E4CD8FB266F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 08:00:45 +0000
Manifest this update: Mon 21 Apr 2025 08:00:45 +0000
Manifest next update: Tue 22 Apr 2025 08:00:45 +0000
Files and hashes: 1: Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl (hash: Kpw2Gg3Z8rpH/4T4zv/Gd0ggRJo+E2mbGWr7FCtl2Ls=)
2: bhq2oKJsXiAPmHmxil5SZXJs2hk.roa (hash: y1Ce6WtfvZHZo4j+/NRj6oK2WGjHyCLTganiUlBZ6fg=)
3: fvEaZhW-GGMhhdbn7EzYzxhTO0Y.roa (hash: PejnUWHJu/zM/xe0xcdnKnBLQ6bQFTtLgmD+7o4mD/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:5d:2c:4f:fe:ec:43:9d:4c:7e:4c:d8:fb:26:6f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Apr 21 08:00:45 2025 GMT
Not After : Apr 22 08:00:45 2025 GMT
Subject: CN=616a3b04f6afc37518a058c5e40f9012f7c2f3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2c:cf:d3:49:9f:2a:43:b4:7f:b0:1a:43:28:
36:42:35:cd:8b:f1:4e:f4:00:dd:e3:79:03:7c:7b:
a7:ca:4f:bb:f0:76:59:a7:99:1e:58:7f:37:3b:d6:
ae:84:3b:cd:67:14:4f:5f:d4:b8:ac:31:df:86:db:
9a:4b:30:3e:56:7a:ae:ce:de:6c:6e:73:a1:91:66:
a4:19:df:46:5a:cf:cf:4f:cd:b6:70:27:41:d9:89:
41:50:45:c2:64:21:02:81:12:2c:ec:eb:ff:71:48:
4d:c9:41:5d:23:64:0a:76:ff:17:91:12:81:85:98:
68:e0:71:a3:d8:31:e1:e1:31:1b:25:24:ce:7a:03:
3a:69:05:61:eb:86:93:1c:1b:1f:bb:f2:43:fb:93:
33:b6:87:92:b2:6b:05:fd:e7:78:88:f0:be:65:37:
b2:02:70:d7:95:08:12:d8:a9:0f:e1:8b:72:0e:53:
02:89:59:12:59:ff:a5:ea:ea:24:3d:3d:d9:41:f2:
94:e0:9e:d4:1c:88:e2:e9:49:43:23:06:90:24:5a:
26:d3:04:20:1a:6b:b7:a1:00:6a:24:5f:25:74:39:
23:ca:e0:12:84:c9:b5:dd:fe:3f:03:64:aa:52:0f:
d0:9c:f1:dc:c2:6e:87:28:ef:cb:59:a5:57:65:54:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:3B:04:F6:AF:C3:75:18:A0:58:C5:E4:0F:90:12:F7:C2:F3:FA
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f1:d6:f9:e8:51:0d:e8:17:5a:ee:1e:36:d3:fa:c1:a2:05:
a0:be:a2:4a:2d:b4:42:1d:1a:c8:2f:96:6b:f9:4e:19:7e:bf:
c0:2b:72:69:5e:f6:c1:49:29:55:7c:a7:2b:3d:37:40:95:c3:
2f:09:0e:82:cd:31:87:ed:9e:96:3c:f0:37:53:2e:71:a7:cf:
58:41:76:37:21:3c:f4:5c:c2:90:b1:bc:a0:93:19:29:5f:fc:
8b:cc:33:2b:dc:d7:70:8c:d4:a8:c6:56:a3:fa:6a:f8:8e:7e:
ba:25:55:44:9c:2e:32:d7:dc:68:86:a0:b2:7b:1e:39:b6:25:
de:a4:f4:39:6b:ca:d2:29:45:59:2f:85:3a:47:c9:29:e0:3e:
c3:bd:57:06:02:37:e2:fe:f2:3a:9e:a5:c0:9a:e1:6b:f9:99:
57:85:9f:5f:91:58:3a:d1:5b:f9:37:20:0a:1b:70:03:9c:e5:
31:8e:f9:65:ed:b1:b8:2e:ff:cb:a4:fb:cf:3f:a9:81:31:bb:
b2:b1:a6:b0:b5:6b:2b:a4:8d:dd:4a:ec:07:9c:f3:b6:9a:4a:
61:47:a2:4b:cc:5a:6d:34:67:0c:71:6e:05:83:ae:0e:25:31:
0c:83:fc:90:fb:2b:76:d2:3f:68:81:1c:b6:7c:94:18:45:0d:
53:eb:e0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:14:43 2025 by rpki-client