Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
File: Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft (raw, json)
Hash identifier: J01Wp6ZUCKcDwvGB/+aJ+YorprSpIi/FRynmHyLCpR4=
Subject key identifier: D8:86:E6:1F:9F:7A:B2:EA:D0:3A:9B:9C:6F:EA:8A:61:5F:97:DB:E4
Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Certificate serial: 019682B50B6E5D1AD2437B1AB4E42F0FF785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
Manifest number: 14A8
Signing time: Tue 29 Apr 2025 18:00:25 +0000
Manifest this update: Tue 29 Apr 2025 18:00:25 +0000
Manifest next update: Wed 30 Apr 2025 18:00:25 +0000
Files and hashes: 1: Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl (hash: DfApUDMHwmOwAm+Ny9y+ESczS/E1RX0R/AHoSxbLVGQ=)
2: vICAXNaVi9WpUOInUKGa4x8kVzo.roa (hash: wwadTuvBpX7uW9J+Oei6uXdC+2oxhi7N3s69AlGUoYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:0b:6e:5d:1a:d2:43:7b:1a:b4:e4:2f:0f:f7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f
Validity
Not Before: Apr 29 18:00:25 2025 GMT
Not After : Apr 30 18:00:25 2025 GMT
Subject: CN=d886e61f9f7ab2ead03a9b9c6fea8a615f97dbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:7f:47:32:51:f9:55:b2:87:e8:55:db:af:
89:0b:29:79:c3:85:ea:12:35:7e:df:90:8b:7e:7a:
61:aa:80:92:78:b6:b4:4c:9e:dd:b5:a9:e8:8e:94:
6d:17:cb:71:92:96:99:fc:7c:ae:66:56:c7:c6:63:
fd:94:78:73:0d:c6:5b:0d:ca:d2:02:8e:f0:10:9d:
5b:4f:8b:b3:12:b7:97:8c:5c:55:34:8e:af:fe:1e:
ac:c5:bd:86:f1:43:75:b1:f9:74:1f:d5:87:db:d8:
d9:f3:cf:38:b4:b4:48:45:73:3a:59:6c:b8:33:78:
bf:38:15:a0:ec:f2:e2:0b:a6:6d:ed:87:49:39:88:
05:35:e7:6c:63:03:11:5f:3d:28:9a:96:d8:0f:b1:
84:bb:97:63:54:0c:97:05:89:d1:95:8b:29:b0:46:
8e:44:2b:50:2b:de:36:9c:59:97:ee:be:ed:a2:17:
62:6b:76:48:c0:13:dd:de:64:23:68:22:f9:a8:94:
91:c8:74:55:a4:c0:4e:8e:94:dd:34:f4:7d:8f:16:
68:43:f8:40:dc:42:36:fc:38:77:9a:90:15:ea:45:
8a:c1:d2:a4:75:0d:fe:2e:1e:25:36:4e:d6:d6:6f:
be:b0:28:47:df:0a:0c:f6:84:a8:15:be:19:d8:de:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:86:E6:1F:9F:7A:B2:EA:D0:3A:9B:9C:6F:EA:8A:61:5F:97:DB:E4
X509v3 Authority Key Identifier:
keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:3a:91:1d:70:e8:9e:e3:66:66:32:76:fc:54:78:0c:74:
04:aa:8c:63:4f:f8:48:b1:7b:75:3e:6b:fd:b7:a2:93:17:cb:
40:f9:2e:84:4a:6d:00:d8:5f:a6:b8:3a:f3:36:ae:bf:37:12:
40:80:35:a8:c8:cf:6e:1e:8f:0f:00:93:d9:44:f4:d1:82:89:
88:ac:02:a1:c4:52:98:ae:a0:8f:5d:d7:b1:cb:11:92:74:85:
05:07:0d:f6:43:22:a1:ec:1b:81:b0:6f:a7:78:11:de:75:6b:
9f:f2:a2:5e:b1:24:fb:0f:4c:55:b5:6e:03:ce:d5:48:cc:34:
10:2c:ad:0d:79:f6:a3:fb:f9:10:fc:d3:39:b7:9e:81:04:7c:
29:2a:f3:ec:d0:85:ef:d8:2a:ce:48:d3:65:d3:85:1f:38:ef:
e3:ef:ff:87:4e:e0:8e:ec:90:61:c6:e4:ea:54:29:13:51:9b:
04:1a:15:69:5e:1a:d2:9e:3a:9b:81:2e:a7:8f:59:c1:d0:0b:
e1:61:84:22:00:d1:e4:c7:11:e0:1c:86:81:d7:c6:78:f2:b7:
b3:be:57:40:75:d1:0b:97:40:98:78:e0:0a:d7:f3:d1:79:56:
c2:65:03:1b:d6:39:8b:e4:41:52:d6:05:76:1f:f8:a5:4e:ff:
e2:7a:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:45:56 2025 by rpki-client