Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: C6BOaGkjteACji1HvZHztWJbkugi1r2tV0wQhHAor9g=
Subject key identifier: 98:5B:A3:17:C7:03:F8:D5:73:00:35:27:B0:30:DA:A3:50:79:A6:11
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 0196AE0D5D9EDC54170820DC61AED26B005A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 127D
Signing time: Thu 08 May 2025 04:00:33 +0000
Manifest this update: Thu 08 May 2025 04:00:33 +0000
Manifest next update: Fri 09 May 2025 04:00:33 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: OfPOpMo81J3TkavJxUAzOi9N7lvDocbapyuiIUOpYsE=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:5d:9e:dc:54:17:08:20:dc:61:ae:d2:6b:00:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: May 8 04:00:33 2025 GMT
Not After : May 9 04:00:33 2025 GMT
Subject: CN=985ba317c703f8d573003527b030daa35079a611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:11:f2:26:e5:61:e4:c0:a2:01:05:53:9f:
fc:18:85:22:95:01:2b:af:3a:bc:65:03:bb:83:87:
59:51:cb:1e:f5:23:37:65:ec:8c:27:df:2d:f7:50:
35:64:ea:74:1b:4a:2d:f4:25:2f:8b:87:fd:a7:07:
7e:45:26:f9:e9:9f:4c:03:02:f3:7d:57:b3:47:e7:
52:2a:0f:d9:69:ac:2d:75:04:9a:08:45:99:52:db:
1d:fe:b7:c9:e4:75:f1:60:bd:1b:85:06:12:79:50:
34:68:f7:65:b4:e8:33:22:cc:33:7a:98:45:77:ef:
e2:5b:a2:3a:9d:bb:29:52:9f:35:a3:04:d4:a8:63:
6a:fc:49:84:99:93:73:05:b5:a9:0f:cc:a9:04:29:
7a:70:ab:b4:94:bc:21:64:15:45:cc:76:05:01:51:
ba:ab:8e:89:75:ff:97:1f:eb:76:7c:6a:a0:be:30:
a4:0b:77:84:27:1c:3b:a1:3d:47:f5:59:d8:2e:62:
bc:3d:99:e6:b1:79:59:18:6f:34:b3:6c:6b:4d:cf:
0c:a6:1b:0d:80:3f:30:d1:ab:29:12:5c:c3:75:59:
c8:b6:fe:5a:a3:94:13:31:fa:6f:06:48:7e:2a:ed:
43:09:8d:51:5d:cf:b3:64:8e:40:f2:b4:a0:02:40:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5B:A3:17:C7:03:F8:D5:73:00:35:27:B0:30:DA:A3:50:79:A6:11
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f8:50:71:cc:11:65:ad:42:cc:64:bc:60:6f:78:69:6b:62:
60:ac:1a:e5:3b:2e:1c:0b:8e:e7:06:0c:d8:d1:a6:dc:80:57:
0a:b1:5e:28:3c:6e:83:f1:3d:3c:9f:b4:fc:df:60:b8:74:73:
81:77:cd:56:77:37:e0:91:aa:77:e3:9b:f2:83:11:14:c3:e5:
a7:67:4a:81:e9:db:d5:88:e1:a6:1c:69:a5:04:00:02:43:19:
6d:4e:1f:64:a2:9b:de:24:d4:27:8f:b3:44:91:a0:0b:08:0f:
c3:fa:d1:d6:05:4c:f2:3d:45:f0:ad:2e:94:8b:af:90:2f:d0:
d4:4d:c0:e7:8a:a2:8f:d6:a9:03:61:ba:36:f8:2c:86:36:d4:
6d:de:54:10:d3:f0:d5:03:f0:5a:e1:bf:e0:e4:21:68:b1:be:
87:f3:17:48:fd:98:ea:ac:30:0d:2c:dd:7b:63:56:9e:55:09:
bb:1d:e0:42:ad:cd:43:7f:92:8e:20:af:34:8a:ad:53:b4:3e:
b4:2b:5a:c7:87:f2:c8:95:dd:e0:b3:0e:52:71:9e:ab:47:fa:
31:84:3f:25:1f:db:35:b9:7f:dd:ae:fd:0b:98:86:e9:e3:8e:
4a:57:6b:0c:19:b2:a7:eb:41:f9:13:a4:5f:74:18:9e:f0:22:
3b:d6:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:37:29 2025 by rpki-client