Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
File: Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft (raw, json)
Hash identifier: 1Q7QDKZ0TUNw5uF5YKrWt9jhLvc78Pp0nTB0n5lpxv4=
Subject key identifier: 11:B8:8C:2E:34:DD:68:55:52:4A:73:99:2B:7A:4C:BE:8A:8F:E4:E4
Authority key identifier: 67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
Certificate issuer: /CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Certificate serial: 01969F3F52171A3723F0C82AFCE943AB2176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
Manifest number: 0C0A
Signing time: Mon 05 May 2025 07:00:49 +0000
Manifest this update: Mon 05 May 2025 07:00:49 +0000
Manifest next update: Tue 06 May 2025 07:00:49 +0000
Files and hashes: 1: Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl (hash: a8m1w4ku8I1v2a7YzEATRfE8ZiVE5bDVeG1XGY99+j4=)
2: azO-aDRzdJeZXPnkpaxb8BBtrU8.roa (hash: z6om+JaM7Y2eklhyA3h/kaXOgcnoTRDFx+JOSlMYz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:52:17:1a:37:23:f0:c8:2a:fc:e9:43:ab:21:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f84e74691c3b7fd2d518e562f9ea87de5d3f50
Validity
Not Before: May 5 07:00:49 2025 GMT
Not After : May 6 07:00:49 2025 GMT
Subject: CN=11b88c2e34dd6855524a73992b7a4cbe8a8fe4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1b:2f:c9:7a:47:d4:8d:eb:28:dd:b4:a9:00:
d8:19:88:2b:b5:68:67:fc:ef:83:ac:37:31:10:5e:
95:54:21:cb:7e:b5:37:45:35:e1:57:ff:6c:2f:89:
13:10:48:6e:64:4f:1a:e3:d8:bd:74:bd:1a:64:40:
53:8c:f6:85:d5:94:06:cf:21:91:47:3d:90:68:c2:
a9:09:a9:23:e7:2f:0c:78:c9:37:af:56:4f:a6:c7:
00:30:f0:a4:5d:38:ae:18:7f:13:1c:50:3c:57:ad:
99:e4:f4:9f:05:fa:14:39:ba:82:6b:be:7f:5a:09:
39:38:b4:12:f4:5f:68:d2:85:ef:54:d1:a2:e0:81:
b6:a5:71:2a:07:1f:01:63:93:2b:d8:1f:9a:52:15:
49:75:95:3c:cd:ee:4c:6a:88:e9:3e:72:01:1c:7e:
42:e0:96:b4:65:d1:b5:f0:54:fa:f7:7a:83:ee:f3:
da:e8:d1:ba:e8:1e:61:31:76:02:20:06:84:7b:29:
e0:6f:74:a0:22:a9:8d:64:40:ec:2c:96:5b:db:40:
b7:d2:df:70:eb:15:4b:3d:ae:ad:cd:df:96:03:ea:
95:3f:e3:48:2c:00:d0:57:99:c1:fe:21:14:5d:b0:
d5:9b:03:a2:12:4c:48:18:ed:f1:37:54:e7:72:19:
7d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B8:8C:2E:34:DD:68:55:52:4A:73:99:2B:7A:4C:BE:8A:8F:E4:E4
X509v3 Authority Key Identifier:
keyid:67:F8:4E:74:69:1C:3B:7F:D2:D5:18:E5:62:F9:EA:87:DE:5D:3F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_hOdGkcO3_S1RjlYvnqh95dP1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e9360c-d73e-430b-b72e-d6cf837b0efa/1/Z_hOdGkcO3_S1RjlYvnqh95dP1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7f:9d:85:89:37:a3:95:ef:98:82:7f:9d:78:00:20:0e:94:
de:2e:c5:bb:9c:50:a0:1a:08:7c:48:ca:d5:5e:68:30:b3:04:
b0:78:2f:f9:34:64:fa:d7:a6:31:de:89:8b:f8:46:66:0e:c6:
07:b1:cf:6c:aa:66:3a:45:7b:b4:5e:3a:6e:13:3e:12:f9:83:
43:ac:fe:b8:90:59:86:95:e0:ed:ec:0a:2e:af:19:c8:89:73:
47:2c:b7:f2:16:89:2f:6d:d3:c9:2a:ed:6f:8e:73:77:94:27:
21:7f:37:71:ad:ee:dd:d0:b9:7c:99:e0:d4:5d:87:53:17:3e:
2d:19:63:d5:ba:be:e5:9d:9b:eb:9e:74:76:70:0b:f7:47:c7:
28:1a:14:44:d8:27:92:f6:ff:d9:a8:4f:6d:1d:9c:f5:d4:05:
ba:38:57:f8:87:1c:b1:8a:37:99:63:67:f3:22:2f:1a:33:c5:
44:da:9c:94:0a:c3:ee:22:73:0d:70:c8:ee:03:c9:37:92:50:
60:61:b1:1d:f2:65:35:03:7a:c2:b6:50:3b:2b:3c:03:48:f0:
6c:21:99:89:49:5e:f7:30:d8:01:01:8e:d9:52:76:c4:16:28:
d8:2d:ef:09:5c:2d:4c:8b:77:b9:1f:a2:e1:dd:ff:29:04:d7:
9a:10:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:57:39 2025 by rpki-client