Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
File: Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft (raw, json)
Hash identifier: flqfwrd3oA1f6Ziw2dtmboAzXRwY2+l1ExK7UAkXBi8=
Subject key identifier: 77:A3:91:8D:0A:4D:88:27:3C:1A:8F:92:B5:07:3D:9C:28:04:9F:3F
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 0196C3B9272BB4D94C9CC1199B4B8BC7116E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 09:00:13 +0000
Manifest this update: Mon 12 May 2025 09:00:13 +0000
Manifest next update: Tue 13 May 2025 09:00:13 +0000
Files and hashes: 1: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (hash: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=)
2: Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl (hash: EwmmzWPH1zeh9CE/iQDAa4KxQE0tPxZ7hKu4iv1eQWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:27:2b:b4:d9:4c:9c:c1:19:9b:4b:8b:c7:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: May 12 09:00:13 2025 GMT
Not After : May 13 09:00:13 2025 GMT
Subject: CN=77a3918d0a4d88273c1a8f92b5073d9c28049f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:a8:69:51:58:37:34:9f:32:b4:1a:5b:a9:
c0:43:2d:b4:d7:af:56:2d:e6:6a:ca:7a:40:7a:da:
67:04:22:83:40:01:1c:ab:79:c6:84:92:c9:3e:89:
62:2d:8d:8e:62:83:3b:70:ab:09:2e:06:dc:5a:9f:
6d:bd:76:6a:1d:7b:16:3c:81:67:0a:6e:34:40:73:
87:29:49:34:03:f4:5a:83:95:6d:8d:76:8a:b8:8a:
92:a4:09:0e:25:db:1a:13:20:ac:00:c5:aa:94:88:
f9:c9:5a:98:a4:a0:11:d2:02:d8:ff:dc:4f:a4:be:
89:1b:7a:78:72:46:f4:42:ef:8e:d1:cf:6e:b0:32:
37:28:b3:f2:2f:15:1b:24:e4:d0:ad:e3:9e:42:b2:
11:bf:73:94:d5:bc:85:81:b7:88:4c:4a:de:70:dc:
db:eb:86:34:79:69:16:ae:79:56:42:8e:70:34:2d:
6c:4c:46:49:25:b4:fd:1f:cb:39:3b:bf:85:9f:50:
75:fb:44:1c:c5:a8:e5:08:90:b9:23:67:42:76:e5:
91:97:a7:99:c2:8d:0d:b5:ce:0b:27:79:69:76:23:
1d:01:42:ac:b7:cb:c8:6c:0e:72:cc:3c:1a:43:e1:
d3:c2:6f:fd:e8:f8:a4:26:d3:43:b8:f3:06:dd:d8:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A3:91:8D:0A:4D:88:27:3C:1A:8F:92:B5:07:3D:9C:28:04:9F:3F
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a0:f7:ff:c9:c5:2b:7a:a4:9c:c3:dd:de:ca:8b:78:20:dc:
50:ca:22:30:4d:76:5a:6e:f5:49:67:87:b6:3f:79:6f:ea:29:
82:f8:e9:89:83:9e:7a:e5:42:59:44:5d:8a:e2:fa:fc:03:87:
d5:cd:23:46:e5:76:e6:cd:e7:f7:dc:30:5d:ba:bc:bb:36:2d:
20:b0:11:9d:08:9b:fa:a3:f1:cc:0e:16:5b:28:9a:77:55:21:
d0:54:31:68:79:84:d0:d8:23:81:d6:58:e2:26:ed:6b:d3:cf:
bd:de:f1:4b:e1:db:17:fd:7d:3d:97:1d:c9:c8:0a:16:99:14:
a6:b6:e9:16:51:9d:e1:d2:26:c8:a6:f2:5d:cb:60:71:1d:e8:
9d:2c:20:28:33:36:c2:a7:88:33:ab:f3:4f:bd:9e:c2:a6:96:
79:12:83:0e:66:3e:0b:45:2a:c2:ed:81:b2:37:3e:4d:d9:2e:
b7:97:19:03:3f:a1:51:82:6b:46:bc:6f:bf:72:70:8b:91:4c:
69:75:ac:e3:58:75:7d:1a:05:e6:e0:48:35:26:20:8e:7c:d3:
aa:4b:fa:fe:76:24:1c:4b:46:e7:78:f6:d4:96:2f:15:5b:b7:
d8:a8:c9:01:e4:32:7f:94:34:20:8b:7a:a3:8c:9c:18:48:7f:
8b:0e:3a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:12:36 2025 by rpki-client