Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: 1AcY0k8YgyFBUdKIHQyhJUuRtgMC6UfXKLx3K+THpE8=
Subject key identifier: 9A:9A:79:3F:DA:35:49:A1:85:B0:CC:EF:C2:29:43:CC:2E:F1:4B:3C
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 0196C0B824BB486EBA14E7B65D6B28DD263D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 73
Signing time: Sun 11 May 2025 19:00:15 +0000
Manifest this update: Sun 11 May 2025 19:00:15 +0000
Manifest next update: Mon 12 May 2025 19:00:15 +0000
Files and hashes: 1: 2hDPatYNHQhIPlvymgRA-xmm86U.roa (hash: 8kdVjJKDXzBN5JG+XGLJqwndIaq/0FXixJOUEgyTy9Q=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: Wmz0Kf39aQsfxsHnxczIaVGA2uRPv6l3GZyW0WX/m3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:24:bb:48:6e:ba:14:e7:b6:5d:6b:28:dd:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: May 11 19:00:15 2025 GMT
Not After : May 12 19:00:15 2025 GMT
Subject: CN=9a9a793fda3549a185b0ccefc22943cc2ef14b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:b4:9d:16:e6:e0:bb:77:68:54:0a:d1:4b:
e8:37:11:db:db:de:f5:fb:d6:21:95:85:a5:c0:09:
57:8e:73:ad:84:90:62:c0:77:6d:c1:de:9f:2c:b8:
00:4c:96:80:a1:b9:dc:fd:cd:ac:34:38:77:af:1a:
3f:ed:58:d9:90:1f:c9:cf:27:11:4e:a0:9a:7b:ff:
0b:fd:7e:41:f3:0c:ea:35:45:ba:8c:9d:94:0a:33:
79:6a:dd:3a:ed:42:94:33:16:f1:7a:be:33:f0:9f:
98:a8:b7:dc:82:e6:3f:2a:e6:73:87:28:8d:6a:d3:
d2:d9:e5:2d:e7:5a:82:d2:5a:63:63:77:27:81:b2:
dc:a9:47:cd:9b:4a:06:01:80:a7:f8:df:5a:c8:ea:
00:92:c3:10:a1:0c:cc:56:1d:46:28:dc:1c:7a:b2:
2f:58:3b:9e:a7:26:dd:4e:33:fa:41:90:72:31:4a:
82:79:a4:d2:e2:09:f5:93:26:bc:d5:6b:4f:a6:0f:
00:e9:1d:d0:b4:4c:78:8e:04:ab:b9:3e:1f:b8:59:
3c:9d:31:ba:eb:ae:28:95:09:7a:07:56:92:e5:72:
47:cd:a6:d6:6e:af:e5:7f:e1:51:19:ca:93:26:04:
98:55:80:18:9e:2b:9d:90:a7:a9:98:a6:c1:94:7b:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:79:3F:DA:35:49:A1:85:B0:CC:EF:C2:29:43:CC:2E:F1:4B:3C
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:47:48:b6:a9:ff:36:2e:50:4d:59:88:a9:e6:fa:83:ec:b7:
ca:35:3b:59:ef:b4:31:bf:8a:a0:e7:22:17:99:0e:c9:61:5c:
78:e4:34:22:d7:d4:ee:78:1c:e5:78:62:c1:25:f4:e9:0c:b3:
0a:5b:5f:a2:8b:58:40:93:1e:b2:37:d7:a1:8f:00:1e:19:54:
73:40:53:3b:17:2e:71:ae:a9:91:fd:70:30:92:79:79:8e:9a:
dc:59:d3:f5:72:50:06:db:a7:10:40:fd:ed:4c:31:ea:6f:f1:
43:17:f7:f3:a9:4c:d5:25:cc:59:1f:a6:29:b0:de:e5:32:65:
05:3b:35:0c:fc:b2:6b:7e:52:af:f0:f3:17:fe:bd:94:da:74:
b5:76:03:2b:31:3e:4e:d8:41:b8:a0:ca:7e:8e:6a:82:ec:8b:
89:37:9f:7f:c8:f6:fc:a4:9d:df:5c:07:c3:ba:05:92:e3:69:
38:55:43:6e:d3:7c:47:d4:80:b9:91:d3:24:56:15:2f:8f:a1:
b9:ac:28:a3:db:45:c2:41:ba:10:34:9b:1d:e1:dc:3a:14:23:
98:ad:f5:87:ba:41:1e:5a:5c:93:ad:a2:d3:6e:83:c3:e8:3a:
16:54:38:0a:93:07:84:59:51:25:29:c1:a0:ba:70:fd:11:a4:
ba:48:bf:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:38:20 2025 by rpki-client