Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json)
Hash identifier: Zf1HFA1qJLaJZfir2H+T2zREGRzy3CCGmc+Dp26TzQ8=
Subject key identifier: 7A:80:DF:E2:5F:28:8E:15:64:BE:E6:94:1D:04:DB:72:13:15:F0:3D
Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843
Certificate serial: 0196B7B536B7A8ACE6C51DF3644A789463D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
Manifest number: 0126
Signing time: Sat 10 May 2025 01:00:28 +0000
Manifest this update: Sat 10 May 2025 01:00:28 +0000
Manifest next update: Sun 11 May 2025 01:00:28 +0000
Files and hashes: 1: 1-mkP1gFOG4Ani1tYFin3RKicalI.roa (hash: SM/8aJ9nvDorMOuBwOcRChnCf6xnagcjr9szkOm8W2Y=)
2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: aYGi2iOWVEI0paOaj3JbC57r8cRPNrwhJvMVdG6pzQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:36:b7:a8:ac:e6:c5:1d:f3:64:4a:78:94:63:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843
Validity
Not Before: May 10 01:00:28 2025 GMT
Not After : May 11 01:00:28 2025 GMT
Subject: CN=7a80dfe25f288e1564bee6941d04db721315f03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:33:b3:54:04:7e:27:73:bf:fc:7f:0f:ec:41:
6b:11:78:73:9c:00:0d:22:8d:aa:52:5c:b1:07:7a:
5f:b4:98:4f:6c:65:4a:52:af:88:a3:71:ae:ed:72:
bb:17:1d:c6:e7:2e:90:e6:79:ed:40:04:e8:11:9b:
be:19:10:38:07:db:5a:15:d1:a0:88:8d:b7:02:23:
87:a9:22:7c:65:ec:80:5b:65:07:c6:f2:87:61:30:
6f:67:41:d0:65:e2:f3:7a:d5:dc:51:bb:51:6c:eb:
98:98:be:b0:2a:ee:f8:ef:a5:09:37:ce:bc:17:fc:
92:35:5f:de:3a:4b:64:e9:22:11:e0:35:a1:eb:eb:
bf:66:d0:77:20:c7:47:92:ce:cf:a6:96:a5:51:d5:
31:16:0a:95:6b:fa:07:86:67:79:68:b6:7a:1a:a9:
b6:58:b2:1c:56:f4:ae:7f:c9:be:a3:0f:cc:65:4f:
c7:d7:66:b2:09:9c:97:70:ac:ad:28:9b:d7:ac:e3:
cd:76:b7:3c:44:9d:3a:26:0d:02:a3:b6:7e:98:f3:
ab:21:b2:6d:8c:09:30:88:0e:41:0c:9a:f7:df:65:
a2:8c:8a:96:ae:59:eb:d7:d4:94:a2:87:d7:c5:2b:
83:d1:ab:fb:f5:aa:34:7a:12:3b:c5:db:b0:61:97:
b7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:DF:E2:5F:28:8E:15:64:BE:E6:94:1D:04:DB:72:13:15:F0:3D
X509v3 Authority Key Identifier:
keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9c:b9:ec:93:3d:48:31:0f:80:fc:1f:9f:ff:56:7e:c0:05:
45:aa:83:cd:c9:1d:a2:78:b1:e4:d2:de:62:1d:af:b1:7f:c0:
32:f7:8e:44:82:f5:12:8a:9e:6f:cc:b3:cd:9f:5d:2a:3a:11:
b2:95:7d:57:c1:83:56:ec:4f:68:bf:e0:32:f7:36:c5:a0:6a:
20:9f:ae:83:d8:30:b7:d4:a9:eb:1e:0d:21:b6:69:1c:5a:d2:
d1:52:2b:40:fb:32:48:11:48:7f:e2:16:9a:96:a6:a6:70:19:
03:b9:85:8c:ee:a7:6d:a8:a7:1a:74:a5:9c:b4:9b:1c:95:dc:
f2:2e:59:74:6a:79:bf:7b:01:a0:c2:99:54:93:83:dc:61:28:
78:bd:91:3e:94:c5:f0:f8:fc:89:77:5c:f2:1b:99:8a:4c:d2:
92:74:7a:89:d8:99:cd:4b:34:59:ad:54:0a:05:2e:cb:8b:49:
ad:cf:6f:cc:d1:7d:24:e9:ca:1f:3d:8e:67:a8:36:76:e0:25:
ec:0c:46:33:76:11:66:b3:33:1b:41:45:91:1d:ac:2c:8a:f8:
be:b8:cd:a3:5d:57:b8:bf:30:c2:6f:fa:e3:82:46:4a:92:36:
9f:e6:df:50:b1:69:ef:32:a3:92:7e:c0:5b:78:37:3c:a8:6a:
2a:65:1d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:30:22 2025 by rpki-client