Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json)
Hash identifier: w90x/U3Dqzy64fQjl7R5qfbGDrsUkHUwfTR5Ewq6O2I=
Subject key identifier: A2:11:DD:EF:F7:BB:55:82:F9:15:4E:A4:7F:0D:A0:96:D4:FA:70:5D
Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Certificate serial: 01969D8789F1AC7FC2805F8596824A37CC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 23:00:27 +0000
Manifest this update: Sun 04 May 2025 23:00:27 +0000
Manifest next update: Mon 05 May 2025 23:00:27 +0000
Files and hashes: 1: LT0qB-gBAbq5frFGXTq1GqnXCfI.roa (hash: K2tXP/3iE8TclQjWefb7tiAmYpuF8VMrt60W/dO45lU=)
2: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: CxrQWIQs+c6xS9PAiAyeGPY5emeUC0pyVOeiDJQqq/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:89:f1:ac:7f:c2:80:5f:85:96:82:4a:37:cc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a
Validity
Not Before: May 4 23:00:27 2025 GMT
Not After : May 5 23:00:27 2025 GMT
Subject: CN=a211ddeff7bb5582f9154ea47f0da096d4fa705d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:0f:0f:c5:b8:5f:7b:f8:a7:e3:7d:82:cb:
3e:be:90:68:4a:2d:51:1a:62:ac:19:b3:9f:1d:cf:
6f:8c:d7:95:e5:05:bc:56:7f:9b:4f:7d:dc:8e:ce:
4a:7d:b9:5e:80:7b:f2:0c:28:c8:19:be:7a:64:eb:
23:e4:cc:38:32:80:2b:c2:6c:3a:a6:c4:7b:05:5c:
7c:45:88:6c:dc:f6:13:79:6d:46:7f:e6:20:71:4b:
b3:d9:dd:35:57:eb:a6:d5:a9:39:d1:9d:f2:d6:c2:
cd:9c:26:64:61:d3:a4:ff:10:8a:e0:c4:28:d7:44:
81:20:bb:8f:7f:82:14:b1:b5:51:8d:27:de:35:11:
54:31:82:4a:0a:03:e4:ba:59:98:35:0d:6c:04:c1:
58:0f:7d:42:6b:82:61:a5:c6:b1:29:00:0e:1f:ac:
33:77:25:c1:02:ea:2f:06:ca:e3:63:90:2b:ee:31:
c5:23:8a:3a:ab:a7:50:cf:1e:5d:3c:ee:8f:e4:c6:
7d:53:ac:44:03:08:54:fb:eb:de:8a:e0:aa:8a:45:
c6:b4:35:98:b2:6b:1f:d7:ff:74:88:8e:25:68:b5:
87:7b:58:98:07:be:43:ac:d9:1d:75:66:0d:07:58:
f9:6c:f5:1e:ca:d4:ce:d7:83:da:c9:f8:06:1d:16:
ca:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:DD:EF:F7:BB:55:82:F9:15:4E:A4:7F:0D:A0:96:D4:FA:70:5D
X509v3 Authority Key Identifier:
keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:ec:e9:3c:55:82:03:a4:8d:b8:78:41:44:0f:f5:8f:6e:
26:8f:00:9c:7c:ab:96:a1:48:0f:47:84:06:32:44:ea:72:3d:
5f:7d:9f:2c:09:f4:f3:ae:7d:29:85:61:bd:37:ca:05:d2:7a:
a8:a3:6c:ee:70:17:64:4b:24:df:d3:11:f5:5b:28:b0:0d:4e:
7d:ee:99:84:ac:31:ea:b9:f1:cc:31:84:8e:7c:d9:44:58:b0:
cc:c2:7a:94:22:65:49:ba:96:58:69:aa:87:5e:47:88:f4:70:
3f:4e:1e:de:2c:2d:a5:25:25:9c:31:20:ad:27:c5:bc:e2:97:
61:c3:0c:c8:39:ff:63:3f:d5:d9:b6:25:2e:d1:89:55:82:ef:
f0:61:62:8c:dd:90:cd:c0:9b:ac:45:20:25:0e:c2:02:49:f2:
80:14:c8:d5:00:1a:23:2e:98:23:e9:53:3c:ab:48:2c:1c:e4:
73:4f:90:98:4b:12:af:66:a0:b2:87:8a:a3:da:54:1c:3a:6a:
77:38:28:fa:17:ec:de:fd:6f:1f:4c:67:9a:04:fc:64:4c:e6:
15:18:9e:60:1e:2a:27:ca:26:cd:3f:ea:cc:1c:f7:10:a8:e9:
c0:3e:9f:9d:b6:87:ba:9a:1b:db:06:9c:e5:ea:bf:ec:1a:99:
1c:05:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:15:25 2025 by rpki-client