Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
File: Z5IEIPci99fzxLJagOF9cpAXEYA.mft (raw, json)
Hash identifier: fKscP9Rglzddou/fUTcCme88NP19jZn9MIGV9z4gNfs=
Subject key identifier: 4D:F9:A0:99:61:88:C6:B9:13:3C:66:19:40:EB:47:88:15:9B:CA:D7
Authority key identifier: 67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
Certificate issuer: /CN=67920420f722f7d7f3c4b25a80e17d7290171180
Certificate serial: 0196A50A16102F3E8C41D0B44CB986B5D1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
Manifest number: 152D
Signing time: Tue 06 May 2025 10:00:23 +0000
Manifest this update: Tue 06 May 2025 10:00:23 +0000
Manifest next update: Wed 07 May 2025 10:00:23 +0000
Files and hashes: 1: Z5IEIPci99fzxLJagOF9cpAXEYA.crl (hash: YgT9BrXg/cQ540a8mXXMkP3N1jQUhe9nt8mDMxnXAbg=)
2: Z_jY3GWRnD6yHDyYL47ZMC9cQoU.roa (hash: WEDbZfz2xY2QG+1hs64UqV8JMCBq7ofZo+b0N35NykY=)
3: xBNVpyyOOL8xE0VBiFpOltY2l4Q.roa (hash: lrgPvLXOCgVkDldPssS2AHRsC1SEtuYHBOG2NxYMrqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:0a:16:10:2f:3e:8c:41:d0:b4:4c:b9:86:b5:d1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67920420f722f7d7f3c4b25a80e17d7290171180
Validity
Not Before: May 6 10:00:23 2025 GMT
Not After : May 7 10:00:23 2025 GMT
Subject: CN=4df9a0996188c6b9133c661940eb4788159bcad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e4:51:84:a8:9e:f5:f3:05:ac:3d:1f:b8:63:
f5:3d:35:e2:5b:ba:3b:57:0b:2d:80:27:89:21:68:
f6:7a:af:72:c1:67:71:e7:a3:89:65:a6:fe:cf:01:
69:66:5c:d9:49:bb:5f:89:9d:6e:74:de:fb:25:b7:
26:a3:d3:ff:53:bb:b2:2c:59:2c:06:c3:61:9c:f4:
f3:aa:b5:1b:bc:78:94:eb:20:0d:38:da:dc:52:91:
b0:c8:36:57:32:4d:96:d2:89:84:86:1d:af:d3:09:
6c:68:bb:0b:8a:34:35:90:4a:04:be:da:24:8b:32:
ef:ce:0f:c2:c5:b6:a7:2b:b1:c7:a9:73:35:db:a0:
a9:05:16:28:ca:25:78:f7:f4:3d:4d:b7:f7:19:ec:
2c:48:43:f2:e0:62:a1:b6:cf:18:bf:48:32:31:a5:
07:67:6a:53:b0:d7:24:67:e5:80:29:24:aa:26:84:
e7:54:61:fd:5b:fa:4f:1e:75:81:f3:41:9d:da:f6:
99:76:b6:21:b2:34:ec:12:b0:0f:b2:6f:29:c4:52:
2c:10:06:32:f6:07:81:e2:ef:b8:06:8b:fe:c7:1c:
ed:3a:e1:b6:bd:05:02:0f:8a:d2:29:c5:67:57:f5:
a8:e1:6d:0a:13:25:6f:f1:2b:21:d4:77:ae:79:86:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:A0:99:61:88:C6:B9:13:3C:66:19:40:EB:47:88:15:9B:CA:D7
X509v3 Authority Key Identifier:
keyid:67:92:04:20:F7:22:F7:D7:F3:C4:B2:5A:80:E1:7D:72:90:17:11:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5IEIPci99fzxLJagOF9cpAXEYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/27ca16-f46b-4f8e-b92e-5ed089c1afed/1/Z5IEIPci99fzxLJagOF9cpAXEYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8c:01:80:e7:21:a4:65:9b:d6:60:c5:2f:95:75:fc:81:1c:
73:d4:5f:2c:e3:0d:7f:dd:99:0e:44:b6:e1:da:b5:9d:8b:d9:
2b:c2:b4:1a:bc:86:fd:92:5f:6a:9e:77:a3:42:c7:b4:a8:fa:
78:50:6b:40:82:b0:56:81:f8:9f:0f:34:0e:33:07:a4:b4:ab:
dc:24:0a:e5:5d:47:d8:96:f5:8e:da:70:d8:39:34:61:f6:ed:
a5:e2:5d:12:ec:09:f2:66:a8:a9:20:7f:05:93:cc:78:f4:a8:
ea:69:83:6c:e4:7b:66:e9:33:e3:79:56:e7:27:05:ea:04:20:
d6:38:68:eb:25:ea:6a:8f:12:6d:a5:4b:6b:f7:06:2c:c1:5a:
c4:42:6d:0a:f6:2d:13:ae:63:9b:75:e0:df:81:0f:36:f7:47:
b2:1c:2e:1c:00:cb:5c:9b:52:68:20:9c:81:01:2c:c7:16:41:
ad:96:dc:88:c7:26:a5:5a:f2:d8:f3:65:c2:57:3a:67:13:67:
c3:c6:9f:8d:00:e6:37:18:f5:eb:6d:44:90:d0:b2:01:24:9b:
20:47:76:7a:5e:3a:f2:f8:32:e3:b5:d3:f1:32:09:fa:5c:62:
e0:d7:b1:bd:42:1f:6c:03:ea:76:b9:60:7d:0e:a1:97:ec:a8:
1a:4b:c8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:36:52 2025 by rpki-client