Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: yXl8HnRRsYOZVL4CHoiHcCvqji8tiXmI53zAu9TLyrE=
Subject key identifier: 44:F3:12:32:D0:C7:15:71:93:BF:DB:CE:5B:D9:2E:19:93:F7:A2:94
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 01969E9A9FEDD43C5C2E612F825BD25E1432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0BE6
Signing time: Mon 05 May 2025 04:00:55 +0000
Manifest this update: Mon 05 May 2025 04:00:55 +0000
Manifest next update: Tue 06 May 2025 04:00:55 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: V40bFCZyGUIVVkZrOO+WGxkKm+DWGaDS+4oVUgL4Cfo=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:9f:ed:d4:3c:5c:2e:61:2f:82:5b:d2:5e:14:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: May 5 04:00:55 2025 GMT
Not After : May 6 04:00:55 2025 GMT
Subject: CN=44f31232d0c7157193bfdbce5bd92e1993f7a294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:39:99:36:c5:86:7d:5c:6e:2c:d5:08:9f:
a8:63:1e:63:ea:3c:2b:51:82:bb:30:25:36:59:2f:
38:01:1a:c3:99:b4:ee:ed:5c:c4:27:2d:6a:01:84:
d8:f2:49:94:51:40:59:5c:a1:43:9f:3c:f1:3e:e7:
21:a1:23:fb:5d:9a:c7:de:b1:e2:83:13:be:a3:34:
11:77:12:c7:7b:ab:5e:ae:58:e0:41:90:b7:80:49:
99:0e:20:d0:dd:d2:4d:e1:73:80:54:1b:0b:15:b0:
8f:78:5a:27:f0:27:8d:43:b5:ad:ab:e5:d2:c6:57:
06:58:f3:4e:73:35:8e:3e:8e:32:df:76:39:2d:1a:
a5:ac:73:d3:13:47:f8:60:43:24:bd:a3:0d:f3:00:
f2:66:bd:ce:ff:5d:b5:45:82:74:0e:15:54:27:db:
d9:5f:74:b4:c0:ad:ef:05:3f:d1:b0:b8:51:64:a2:
b3:6e:a2:3c:da:10:6e:ac:e3:23:c3:85:1e:75:aa:
7f:78:d4:85:36:ef:63:ee:4f:28:ac:e9:9f:35:5b:
7a:65:3e:11:6f:b0:c2:3e:71:b1:9d:b8:93:17:b5:
a8:2a:4e:4b:9f:5c:87:ef:66:b6:09:c0:de:ba:49:
af:14:8e:bb:f1:5a:e4:7c:29:9d:0f:e5:13:a3:74:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:12:32:D0:C7:15:71:93:BF:DB:CE:5B:D9:2E:19:93:F7:A2:94
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:58:f3:f8:ad:f7:d8:40:a8:82:d4:38:e8:65:cd:23:8b:15:
62:4e:ee:5e:c1:5e:ee:76:e9:d8:9d:08:e6:c4:d1:14:61:ef:
da:25:8d:f0:1b:28:fc:26:3d:ad:73:e8:ed:73:67:9a:4c:25:
dc:ab:9d:07:55:ef:c0:96:06:e2:41:b3:c9:7e:a3:a1:31:41:
5d:2f:9a:dc:af:cf:d9:d5:15:d5:98:14:8a:5b:94:4a:bc:77:
1a:5d:b3:e2:20:8b:01:99:8c:34:8d:6f:8d:5c:13:0f:01:85:
af:54:43:a6:81:46:71:a1:20:63:ab:77:84:d8:ae:de:9f:87:
0e:75:08:9d:c1:66:52:da:db:32:a9:01:93:4c:a8:77:4a:97:
c1:8b:ba:a8:3f:fe:c2:ca:b3:03:d7:6e:14:b8:07:69:75:28:
85:35:21:d4:a5:ec:00:dd:99:dc:77:de:29:f3:fc:e3:5b:2d:
55:4e:8c:26:d3:32:10:08:96:40:2d:31:eb:40:04:ab:1c:bc:
a0:14:69:06:ef:1a:77:e2:fe:d1:ce:ab:77:ee:37:9f:4a:05:
c6:41:a0:b8:bf:b8:ed:e2:5c:39:84:bd:16:ce:5b:87:62:6b:
19:5f:9b:91:b5:11:22:17:b9:c5:b2:e3:c1:92:75:57:e2:22:
02:a0:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:54:23 2025 by rpki-client