Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
File: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft (raw, json)
Hash identifier: XewkFM27h5AqOoDoE0ILZfhEfp4YuUnaPlydZqwgsgI=
Subject key identifier: F0:07:40:8C:42:6C:CC:86:8D:62:E6:53:83:74:3C:63:5F:31:75:77
Authority key identifier: 67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
Certificate issuer: /CN=675fbe4b1f00233ed767990071f04590c90c887d
Certificate serial: 0196BB5B1809AE77382CD6BF993E879DF5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
Manifest number: 0DCB
Signing time: Sat 10 May 2025 18:00:31 +0000
Manifest this update: Sat 10 May 2025 18:00:31 +0000
Manifest next update: Sun 11 May 2025 18:00:31 +0000
Files and hashes: 1: Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl (hash: AZE2q3bJsSjXlEf7qak4j3M5BDR2fI2I2suLqF6ny0o=)
2: _BrWLEBfYPYfGOoM_00MeFoB9s8.roa (hash: ONS0Sr1NVQgM4PQUgLtLkyRNai6z7sLm2R6unFgdvYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:18:09:ae:77:38:2c:d6:bf:99:3e:87:9d:f5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675fbe4b1f00233ed767990071f04590c90c887d
Validity
Not Before: May 10 18:00:31 2025 GMT
Not After : May 11 18:00:31 2025 GMT
Subject: CN=f007408c426ccc868d62e65383743c635f317577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:50:be:c3:1c:bc:45:ec:24:bd:e2:30:d1:
28:f9:85:a7:6b:6d:43:63:93:41:01:f3:e7:7f:4a:
4a:d1:03:68:60:5c:ea:70:e2:0b:4a:3e:56:71:5f:
46:81:63:d2:f3:43:cb:c4:32:72:9d:03:46:ad:2d:
8a:9f:72:74:05:78:62:58:a1:ab:13:e6:16:a5:34:
61:6e:c6:4d:67:0c:df:7f:d8:bd:10:87:5d:8d:3c:
eb:5f:58:cd:ba:9d:74:e5:b6:d9:17:92:84:e5:dd:
e6:e7:b8:b8:a1:51:0b:76:35:08:90:4d:af:7b:b4:
58:a7:0c:b5:8a:84:1c:73:9a:1f:f9:f8:11:4a:ab:
30:f2:59:9b:f8:e4:e7:bb:46:f0:3c:1e:77:c7:cf:
dd:b2:90:8e:d4:a9:da:e4:cd:4f:a6:8a:8d:97:25:
30:eb:3f:9d:1b:1e:3a:4f:68:94:95:2f:59:c6:e1:
ae:91:b3:af:31:af:0a:82:43:6b:4b:bc:47:f4:c4:
f7:f5:88:39:3f:8f:2a:33:62:fd:34:0c:a0:96:fe:
89:a7:11:9c:75:1b:bf:d3:e7:cc:03:af:e6:3b:31:
68:ce:3a:6d:5e:8f:da:13:86:a6:72:fd:9b:2f:f2:
6a:75:61:f5:32:69:9b:3a:f3:f5:f5:f5:09:7f:04:
3c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:07:40:8C:42:6C:CC:86:8D:62:E6:53:83:74:3C:63:5F:31:75:77
X509v3 Authority Key Identifier:
keyid:67:5F:BE:4B:1F:00:23:3E:D7:67:99:00:71:F0:45:90:C9:0C:88:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55c2a0-49df-4d96-988f-4f9d04010710/1/Z1--Sx8AIz7XZ5kAcfBFkMkMiH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:01:fa:8f:bd:14:cd:ae:64:5b:2c:26:2b:1c:cb:72:ac:78:
a4:b4:0a:a1:01:d3:80:29:8f:20:9e:31:0f:8a:8a:ae:e2:5b:
d0:cd:68:62:40:9a:83:33:88:5a:63:59:8e:69:96:9f:0f:52:
44:f2:9f:4a:3c:ed:41:54:32:4f:6f:47:95:1b:5e:60:32:a5:
e4:a2:f3:2b:72:a0:26:8c:49:4b:cb:56:b0:9e:99:52:ab:39:
6e:50:f5:1c:0a:40:93:86:52:69:2e:69:ac:f8:66:0d:5b:f5:
da:48:a3:31:85:5f:d7:45:05:df:55:3f:cc:36:58:8f:d7:96:
2b:ee:7d:d1:57:78:27:c2:f9:b2:31:35:90:88:14:90:2c:cb:
92:d5:4e:41:35:f2:38:b7:14:b3:8d:05:0d:34:f3:d5:66:1d:
01:01:ed:48:64:52:e5:8b:b6:bf:f7:d1:b3:05:95:35:11:a6:
43:1d:4b:c9:da:bb:c6:4f:09:a4:aa:07:00:89:b9:cc:07:94:
80:d5:17:e7:aa:d4:df:9c:9b:a8:c0:0e:d4:8b:48:94:ec:ea:
1e:c6:d3:ac:a5:2e:83:2f:f9:11:ec:be:c8:cb:2b:42:41:7b:
c7:40:5c:18:e9:e5:f0:b7:f0:a7:35:92:b9:79:05:30:13:18:
ec:ec:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:23:45 2025 by rpki-client