Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
File: Z8Os-SmiIzjys4AYDMhS20d5qtA.mft (raw, json)
Hash identifier: 9jHMFaa/0pMCN4Dj/v3TM1Pi85CjWrwZMW4NsMhMAU4=
Subject key identifier: 51:DF:1C:DC:F1:E0:5E:70:C1:6C:49:72:A0:34:22:CF:70:E2:17:07
Authority key identifier: 67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
Certificate issuer: /CN=67c3acf929a22338f2b380180cc852db4779aad0
Certificate serial: 0196A6F8961DC663091B0946253F2E643995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
Manifest number: 101A
Signing time: Tue 06 May 2025 19:00:31 +0000
Manifest this update: Tue 06 May 2025 19:00:31 +0000
Manifest next update: Wed 07 May 2025 19:00:31 +0000
Files and hashes: 1: MPC24ig7GybvQGJQS-GC0wxWNWk.roa (hash: qOm3yyWDXF7wdNeDgGEdzc6Ua0rCER7AIaOxZKXE29E=)
2: Z8Os-SmiIzjys4AYDMhS20d5qtA.crl (hash: slaOLnEXHAbNAvmfz3fvGFh+rkowF9w8hEa50tZha/Y=)
3: hsXOS728ssx8bAD81ls-MhEMYHY.roa (hash: WicCvVpq6yjNVb8B4LAK2/Mh2on49kT2FPzZdWAqLP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:96:1d:c6:63:09:1b:09:46:25:3f:2e:64:39:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c3acf929a22338f2b380180cc852db4779aad0
Validity
Not Before: May 6 19:00:31 2025 GMT
Not After : May 7 19:00:31 2025 GMT
Subject: CN=51df1cdcf1e05e70c16c4972a03422cf70e21707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:bc:17:b6:84:44:1b:28:d6:ed:d7:9d:86:
82:ba:67:64:f1:d3:bb:93:2b:06:0c:52:9f:ca:d5:
e9:a3:65:fa:75:27:96:39:ee:39:bb:8d:24:25:65:
6e:c1:3c:20:7c:ca:d4:81:80:48:c0:d1:02:5c:09:
32:e5:06:e4:43:ea:a8:82:58:cf:ce:77:35:b4:c9:
0e:62:b6:e8:9c:aa:c4:41:ff:9d:9b:f9:6a:79:fc:
b7:a0:53:2b:f0:0b:70:46:b4:68:42:ff:a6:19:35:
23:9d:7e:5a:39:af:96:6e:9d:50:e7:18:ff:8c:ac:
36:a7:7c:01:f6:c7:24:ae:aa:6d:15:20:4b:d8:09:
bd:8b:39:a6:12:c2:a3:59:c0:cf:79:03:20:66:8a:
4f:41:1b:c3:ab:25:6a:ea:9b:9c:46:98:e9:2a:b4:
0f:c7:22:9c:0f:d2:95:5b:57:e8:c0:a1:a6:08:02:
5c:77:15:a4:ef:91:95:cb:58:11:97:2c:eb:c3:fb:
a1:24:76:af:ac:3f:7d:b9:8e:33:bf:91:b9:cb:b0:
eb:ba:0b:07:59:40:5b:57:8c:d9:8e:f0:78:91:fe:
a7:f4:4d:48:ee:ec:75:3d:d3:35:7c:7a:d6:99:d8:
a0:32:f1:74:6a:d9:ce:9f:a7:f6:7f:3a:0f:9a:60:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:1C:DC:F1:E0:5E:70:C1:6C:49:72:A0:34:22:CF:70:E2:17:07
X509v3 Authority Key Identifier:
keyid:67:C3:AC:F9:29:A2:23:38:F2:B3:80:18:0C:C8:52:DB:47:79:AA:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8Os-SmiIzjys4AYDMhS20d5qtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ca4815-0e00-49bf-88f5-caca8b80c91c/1/Z8Os-SmiIzjys4AYDMhS20d5qtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:84:33:15:ca:94:03:81:f3:8f:8c:b0:1b:ed:b1:9a:c4:b7:
c5:c8:90:16:2d:b6:44:44:18:94:a6:89:9b:11:f9:e0:fc:85:
d0:cf:2d:04:bd:71:dd:07:78:f0:b1:70:4a:c8:e5:19:2d:6e:
0d:d7:03:40:ac:1e:57:d2:20:3d:f9:a7:77:f1:5a:ac:5d:6f:
05:aa:b1:80:05:22:9e:e1:05:2c:c8:25:12:77:b9:d4:83:89:
3a:3a:5c:05:65:3f:4f:1a:34:39:08:6d:42:2c:61:b7:f6:1c:
c4:5a:a3:92:46:51:88:ab:10:b5:ed:91:e5:0f:f3:60:4f:cf:
74:4e:ea:0d:3b:f0:0d:8b:46:1a:73:1b:cb:91:65:da:9f:0f:
cc:fa:bd:ec:2b:10:06:35:3c:b0:b7:c1:fd:8d:0f:52:8c:a6:
39:42:bf:56:98:41:4d:28:16:f9:87:62:6f:04:12:fb:31:2c:
e2:da:02:f5:97:4f:95:47:55:e4:d6:20:ea:fa:2b:ab:ce:a3:
ac:50:c0:37:65:d8:4f:d8:8a:73:71:f8:61:98:e8:db:2a:24:
c5:eb:d8:15:59:8d:40:9b:ec:45:0e:5d:13:80:b0:1a:e7:fe:
22:96:5d:3f:29:49:84:1f:d1:cf:3d:be:cf:44:de:37:c5:6b:
1f:eb:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:34:21 2025 by rpki-client