Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: WsKLNsXCf3N693Qcm3Qn79kybyYn7Yd0Mmi4puCGa5I=
Subject key identifier: 6D:9C:D2:13:01:F9:B2:0F:2E:2D:E3:A2:0A:55:49:83:0A:86:37:15
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 0196DA0AABE0192830BF8DDD90CAD3A7DD93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1540
Signing time: Fri 16 May 2025 17:00:54 +0000
Manifest this update: Fri 16 May 2025 17:00:54 +0000
Manifest next update: Sat 17 May 2025 17:00:54 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: PhE6q0W23iHPc2D7IgYiKbZs4HFcHQgi1g/8m9LkfMI=)
2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:0a:ab:e0:19:28:30:bf:8d:dd:90:ca:d3:a7:dd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: May 16 17:00:54 2025 GMT
Not After : May 17 17:00:54 2025 GMT
Subject: CN=6d9cd21301f9b20f2e2de3a20a5549830a863715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:f8:3f:83:38:45:92:55:4a:3a:67:ba:17:
e2:d8:c4:ae:4b:35:3c:75:ee:fa:99:a3:0e:8c:89:
96:4a:bb:10:be:5d:66:cb:d3:cb:4d:c5:bf:1a:f2:
47:97:61:99:66:05:e7:e3:c8:88:7b:97:70:82:fd:
1d:e1:c6:6c:bd:eb:c9:31:6c:56:7c:c7:b0:6b:0a:
1f:57:b9:d6:d9:df:9e:04:92:75:62:43:9e:5a:db:
69:6b:60:f0:bf:66:04:8d:b7:20:bc:9c:8e:bd:41:
b3:9e:9c:ad:c3:a3:40:11:5d:64:95:d4:43:84:f6:
f5:90:ac:ab:ad:88:bb:85:a3:49:ce:17:f8:61:93:
f1:c0:fb:2c:d3:58:7b:be:31:95:26:ee:0f:98:29:
57:3e:c5:f3:f0:b4:7d:2b:19:fe:75:0b:2f:11:b8:
ca:04:a5:82:b3:eb:fb:a7:70:d2:cc:05:44:91:ba:
90:96:36:d8:f1:5a:35:d0:4a:9f:f8:20:13:a9:38:
2e:f9:3f:4f:00:cf:62:ec:fa:08:08:37:ca:94:5b:
dc:f7:90:f9:b6:30:55:8a:94:6f:f0:78:c1:d6:15:
e5:29:fc:74:83:90:59:a8:2b:a3:e0:47:cc:c2:26:
43:36:9a:5b:c7:39:22:7e:d7:b7:cd:93:2e:5c:10:
09:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9C:D2:13:01:F9:B2:0F:2E:2D:E3:A2:0A:55:49:83:0A:86:37:15
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4e:f4:dc:98:ac:2f:8f:d4:d1:32:e9:89:4f:cb:0e:42:d5:
0b:c1:9b:85:3f:a7:fd:5a:9c:f0:7c:b8:93:45:2b:25:5f:57:
93:3d:33:e4:42:50:1d:b4:b5:0e:b3:44:5e:54:9d:c0:83:96:
08:7b:34:f7:cf:08:29:d8:4c:2c:c1:77:50:c7:8f:ad:10:6a:
7f:a4:bd:ef:ba:dc:73:47:cd:97:f3:13:4d:6d:a1:35:2f:c0:
62:58:86:0f:6c:26:4a:a7:25:ef:36:23:c4:75:ea:29:da:77:
9c:92:f4:be:50:82:35:22:11:69:f8:64:b3:6d:67:6c:9c:18:
09:36:a2:ff:ad:53:e8:6d:fc:54:64:a8:e6:3e:04:5f:04:06:
11:ba:3e:05:4b:b8:ff:d3:7b:97:7c:cc:ae:95:ba:08:a0:62:
13:18:86:88:ce:3b:48:48:45:04:9f:12:f5:c3:f9:a2:23:34:
d9:26:d1:80:53:43:00:e4:8f:cc:f7:00:82:9c:f4:7d:f8:fe:
d9:02:96:e3:d5:65:49:e7:56:a8:aa:54:ec:ac:6a:88:7c:8e:
a0:ea:ad:8d:a6:b4:84:f8:55:79:77:e1:8d:72:ee:d2:fd:df:
d4:ba:66:6e:a6:cf:8d:3a:b3:3a:4d:32:87:48:86:4d:28:bc:
26:40:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:16:42 2025 by rpki-client