Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
File: Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft (raw, json)
Hash identifier: nQsRqD2oHTrQNsZW72bfWqijJdO9R3epZINQb0V4v/0=
Subject key identifier: F7:02:B9:0B:06:1E:68:74:F0:9F:DD:A1:7C:0D:DA:9C:5A:C2:CB:68
Authority key identifier: 67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
Certificate issuer: /CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Certificate serial: 0196C5DF182DACD5C9AAEAF6EA9B70B83A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
Manifest number: 05A1
Signing time: Mon 12 May 2025 19:00:54 +0000
Manifest this update: Mon 12 May 2025 19:00:54 +0000
Manifest next update: Tue 13 May 2025 19:00:54 +0000
Files and hashes: 1: R8NsFHiOMt_I9kRi69VS0cdeD3Q.roa (hash: xksdmSwt2Z6iAfq+Be7Evwsm6EdDBph6gWWX0xJnVLc=)
2: Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl (hash: qp9KjBOi9JMLVmKRJwJQ2azX35Xu+8tOTxLXzXFdzk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:18:2d:ac:d5:c9:aa:ea:f6:ea:9b:70:b8:3a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6759267f03f76d87fe41b2cb0b295d23c754c59a
Validity
Not Before: May 12 19:00:54 2025 GMT
Not After : May 13 19:00:54 2025 GMT
Subject: CN=f702b90b061e6874f09fdda17c0dda9c5ac2cb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:de:36:c0:ae:c7:52:9f:49:02:ef:30:ec:
e3:dc:28:38:e7:54:ea:5d:71:1c:3b:17:6c:c8:e9:
ce:f6:67:98:13:d5:20:27:02:cc:d1:eb:6b:5f:c8:
b0:7b:ae:00:86:28:ec:6e:04:b7:4b:28:38:10:10:
a8:d9:5c:12:2f:85:26:e2:1f:6a:59:27:fe:01:eb:
cd:19:77:93:c7:c1:c1:84:e5:c1:59:83:48:1d:cf:
1f:9c:25:4a:7e:f1:34:b6:c9:a8:3f:69:cd:44:c2:
62:84:77:e6:a3:95:ce:65:d0:92:da:c9:8f:6b:04:
99:8a:ab:79:39:99:e6:65:85:79:9d:05:dd:68:4b:
0d:97:6a:bb:9b:13:ad:5b:f9:3a:10:23:a6:99:8a:
41:2f:4e:c7:d9:a2:d0:ab:0f:aa:5d:5e:a3:f8:24:
7c:d0:1f:67:5a:87:07:10:71:22:85:67:e8:89:e9:
da:a0:12:d6:7d:1c:83:53:5e:fc:c5:42:b1:33:df:
ba:79:ad:bc:80:01:23:f3:78:f0:8a:f7:ab:12:bb:
aa:86:d8:1e:85:ce:27:26:9c:76:17:81:66:fa:26:
45:e8:d8:58:46:8e:6d:32:55:c9:46:88:98:70:c6:
1f:d4:98:71:a0:2d:b8:13:f9:14:32:58:f8:9e:71:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:02:B9:0B:06:1E:68:74:F0:9F:DD:A1:7C:0D:DA:9C:5A:C2:CB:68
X509v3 Authority Key Identifier:
keyid:67:59:26:7F:03:F7:6D:87:FE:41:B2:CB:0B:29:5D:23:C7:54:C5:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1kmfwP3bYf-QbLLCyldI8dUxZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9dac05-6f83-498f-9a0a-9f8abe0e9ff0/1/Z1kmfwP3bYf-QbLLCyldI8dUxZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d9:17:77:fe:6e:48:d9:bd:ab:f8:3f:58:e9:5d:45:f3:07:
10:bf:92:cd:fc:56:da:50:84:48:6a:ae:09:2d:93:e8:32:78:
70:5c:00:f9:06:71:d8:3d:ad:e7:e4:f6:89:6a:29:08:30:cd:
84:bd:ef:fa:37:e4:5a:2a:a2:5c:a5:06:c3:90:33:aa:13:81:
15:d6:85:a7:63:31:14:8a:a8:e3:0f:c8:f1:ec:db:40:ff:89:
d9:9d:9a:bb:e1:c0:38:08:8a:a0:52:1c:65:67:f3:30:da:3b:
aa:98:73:b9:64:ad:aa:0d:87:4c:52:c1:01:49:cc:82:f6:63:
b1:8f:70:59:4a:98:d0:24:aa:4a:63:7b:47:ff:33:d0:b8:0b:
b3:80:e8:90:c2:f2:2a:58:32:f6:24:09:f5:f0:24:c2:d0:fc:
9e:4b:e7:d0:98:8e:eb:32:6b:5e:bb:a0:32:53:32:97:3a:67:
e5:32:c3:bd:77:2e:05:a8:37:01:1b:0b:06:93:8f:d5:6a:f6:
6b:53:19:7e:f6:f7:35:8a:28:e8:a5:04:ef:c1:08:1c:30:17:
54:38:be:10:6a:8a:bd:e0:5c:e8:d8:a1:c5:fd:f4:7a:bc:91:
b3:15:5d:2b:c7:a5:44:c7:99:64:2f:39:21:cd:62:bb:50:38:
b5:92:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:14:59 2025 by rpki-client