Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
File: Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft (raw, json)
Hash identifier: vMoWHVH2DIrDogpjXdtVY/5KFmroM2ltjcSk6AMvaYU=
Subject key identifier: A7:B0:5B:93:B8:BD:48:FD:14:D8:CD:4C:AC:20:95:BF:FF:23:BB:BA
Authority key identifier: 67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
Certificate issuer: /CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Certificate serial: 0196C193E9E670E99DAD0BBE91229ED100FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
Manifest number: 11AD
Signing time: Sun 11 May 2025 23:00:18 +0000
Manifest this update: Sun 11 May 2025 23:00:18 +0000
Manifest next update: Mon 12 May 2025 23:00:18 +0000
Files and hashes: 1: R2hIzPH7WznpzB3A9VGA94-nqD4.roa (hash: kT7LJSBIR26R77fVHHIPqJYdfVy6esu3U3f7NvLKrOU=)
2: Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl (hash: h8neWT3Rf2oTHzV9WN/rMRkHGkxuowqb83Pac8rfXxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:93:e9:e6:70:e9:9d:ad:0b:be:91:22:9e:d1:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67cc3a523bea224a74bc96a4af4164c24786b82e
Validity
Not Before: May 11 23:00:18 2025 GMT
Not After : May 12 23:00:18 2025 GMT
Subject: CN=a7b05b93b8bd48fd14d8cd4cac2095bfff23bbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:b6:a0:86:9b:9b:4e:cc:fb:af:79:03:0f:
f2:4b:f7:a4:fd:3d:6c:34:62:73:0e:fb:30:fe:4b:
a4:3f:80:e1:61:22:53:6d:17:5b:7c:07:e7:2e:50:
22:14:a8:64:19:44:fc:cb:8a:88:da:07:1a:b1:88:
9c:5e:3b:20:ad:ba:18:9f:14:3f:7e:fb:9b:0d:85:
3d:fd:ae:db:a1:0a:bc:c7:8e:25:ed:66:e9:d4:3d:
6a:c4:23:c8:e1:6f:71:89:1b:e8:cf:2b:e4:ff:b1:
25:49:85:6b:99:47:84:8a:69:53:88:43:09:7d:a0:
3d:2a:1a:73:ed:5c:4b:46:ba:6b:3d:5e:49:4f:e3:
45:e8:9a:d6:53:6c:f6:7f:6f:95:99:4a:fe:7b:1a:
d2:a7:f9:b7:d0:01:8c:67:b7:ae:1b:2a:f1:19:d8:
b2:8f:93:3b:2e:5f:bd:d7:8a:f5:72:fa:15:39:24:
3b:15:85:e4:09:e0:80:61:94:a4:e7:62:a2:f3:24:
16:cb:86:d0:3e:e8:d1:9d:3c:60:b2:3c:a2:2f:b0:
e0:29:1e:ed:b5:61:41:33:61:b8:78:50:3a:73:20:
e0:95:b5:d1:33:94:82:04:3d:74:1a:55:c7:91:d5:
e4:06:b1:ce:80:d4:38:61:63:68:e2:7a:d8:59:97:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:5B:93:B8:BD:48:FD:14:D8:CD:4C:AC:20:95:BF:FF:23:BB:BA
X509v3 Authority Key Identifier:
keyid:67:CC:3A:52:3B:EA:22:4A:74:BC:96:A4:AF:41:64:C2:47:86:B8:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8w6UjvqIkp0vJakr0FkwkeGuC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bc9174-a3d1-4058-aa0a-7cfb19f6e133/1/Z8w6UjvqIkp0vJakr0FkwkeGuC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:29:f0:07:a3:d5:46:69:11:f2:0b:68:52:d7:c6:d6:41:39:
32:0c:0a:b6:4f:8e:d0:c6:5f:76:d9:68:6f:fb:65:96:9d:e8:
22:1b:69:56:73:05:c8:c1:5a:3d:99:83:3b:9d:59:67:da:f8:
77:b3:21:4e:ba:18:35:76:64:43:54:c2:33:b2:31:55:b9:ec:
69:71:63:b8:d0:b2:61:46:e8:bf:d7:c1:df:6c:d1:6b:44:5a:
37:ff:41:db:bb:5d:dc:00:11:f8:59:61:a6:33:14:71:8c:48:
d9:48:27:bc:29:f5:a0:d4:de:b5:22:c4:fd:18:a8:56:4a:64:
c2:d9:b7:51:be:55:5b:65:62:5a:4a:52:15:27:59:b6:2a:4e:
f2:82:54:d3:de:6c:01:fe:75:9d:d5:e3:35:31:7d:55:aa:c4:
a0:1f:da:15:f6:93:75:1e:ca:a2:50:2e:a2:7e:16:ae:5e:56:
ce:86:01:72:f2:01:bf:97:4e:89:36:44:37:cf:f1:c6:90:cd:
82:16:1c:81:36:ca:bb:21:50:16:b5:34:04:de:45:c2:d5:15:
74:f6:3f:8f:b4:0b:0f:09:12:57:30:48:e7:50:cd:af:f7:1c:
14:0f:74:68:a0:3e:3e:4a:98:8f:a2:44:db:e3:59:7c:e2:c5:
16:bb:0f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:27:30 2025 by rpki-client