Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
File: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft (raw, json)
Hash identifier: zIu0l2IFHED+sV/sTCjH6udV+VkYVIu5B+OqU1AzCsM=
Subject key identifier: D5:F7:59:63:9B:C3:B1:A5:67:AA:A1:45:C8:6F:B6:AD:B4:93:35:4F
Authority key identifier: 67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
Certificate issuer: /CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Certificate serial: 0196767A13721633BAFAFCF76A136E204466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
Manifest number: 03E5
Signing time: Sun 27 Apr 2025 09:00:33 +0000
Manifest this update: Sun 27 Apr 2025 09:00:33 +0000
Manifest next update: Mon 28 Apr 2025 09:00:33 +0000
Files and hashes: 1: 4L2ftFdKTKASWvnNHU7j3JO420k.roa (hash: 9wX3/hgGG8p+SICpTdmMYHRqU0aY/b1v3xs+2pZbrJI=)
2: Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl (hash: sTRNCpAxx+OwEtcqcmjuOwHSdbFCmppqEGRRaJ1I3Nw=)
3: krCEM0FVbnHk4CEuGTFxU6dyL44.roa (hash: 8qA+Jv+esY5FZRfyraH8rrB4yu19N9dE5QCLxV3wJsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:13:72:16:33:ba:fa:fc:f7:6a:13:6e:20:44:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c39d38f468d9c12d8ff50d5b9f9265a1e5a8d0
Validity
Not Before: Apr 27 09:00:33 2025 GMT
Not After : Apr 28 09:00:33 2025 GMT
Subject: CN=d5f759639bc3b1a567aaa145c86fb6adb493354f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:b0:20:2c:c8:2f:79:dc:1d:c0:70:07:24:
15:a9:89:c7:6d:55:2f:22:5f:6e:8a:b8:24:3d:de:
df:17:f8:aa:b1:3f:12:3c:dc:09:ed:e3:d0:22:44:
d0:d6:1d:ad:46:39:23:68:0e:81:18:2e:42:b4:05:
3d:22:1f:d9:50:d6:ce:8b:78:4e:4f:7a:a8:71:74:
32:8e:22:49:55:7c:0a:29:c9:cc:54:37:c1:bc:76:
d3:33:5e:b8:cd:34:a6:77:44:5a:a9:51:32:43:bf:
ce:fa:6a:67:5f:d6:46:82:f2:b5:20:e2:d4:de:91:
40:2a:a1:0a:3c:cd:8a:d8:27:6a:da:68:96:6e:ee:
0b:04:cd:75:ce:a9:25:f3:82:2a:2f:10:85:ef:aa:
41:f5:54:0f:94:9a:8e:9c:78:3e:78:83:e7:4e:87:
1c:8e:e0:91:29:fd:cb:6d:73:ac:fc:e4:9f:36:c5:
a8:6e:a1:91:51:9c:98:0b:8d:2c:54:15:18:a8:42:
54:dc:db:32:1d:cd:e6:57:cf:29:e1:8b:74:5e:70:
88:b3:ba:f8:06:58:1f:29:7d:e0:7d:92:2c:7f:3a:
7e:63:50:06:93:93:d5:39:5a:47:45:39:bd:d0:6b:
bb:82:84:68:fd:60:10:92:1f:e0:36:7a:77:df:fd:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:59:63:9B:C3:B1:A5:67:AA:A1:45:C8:6F:B6:AD:B4:93:35:4F
X509v3 Authority Key Identifier:
keyid:67:C3:9D:38:F4:68:D9:C1:2D:8F:F5:0D:5B:9F:92:65:A1:E5:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5f5acc-3646-443d-9f7e-27e9beb3294b/1/Z8OdOPRo2cEtj_UNW5-SZaHlqNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b8:ae:0d:a7:63:b8:59:d8:a1:1e:40:89:30:30:7c:d2:db:
4b:a0:b7:1f:3b:2c:58:07:85:bd:be:fa:0c:6d:b5:b6:41:ec:
cc:eb:ad:70:5f:54:3c:2f:5a:3a:60:5a:41:c8:86:63:0f:a3:
e0:73:d4:90:83:18:d1:df:70:cb:99:a7:5a:3a:2b:3e:d8:83:
e8:b0:60:90:59:39:68:75:fb:48:5c:25:de:bb:1d:b0:da:04:
2a:f0:21:16:9f:8c:be:be:1f:88:b1:19:16:48:54:ea:ec:8a:
31:72:4e:08:bf:56:11:e6:4f:62:95:da:c8:4b:6e:65:f2:6a:
1a:cd:e3:ac:c7:c5:e8:55:19:94:d1:ac:49:d5:1d:3e:5c:32:
db:df:d6:52:f8:bc:6b:56:97:12:f8:8a:cf:ec:27:0d:25:3a:
c0:40:48:ab:67:cd:b4:df:f8:d8:b2:89:93:8c:95:98:e2:f7:
b2:83:67:1a:44:da:3f:0b:6f:b4:11:a7:00:2a:78:bb:25:99:
52:98:6c:c2:97:50:8e:dc:26:03:19:34:23:fd:83:84:d6:32:
86:41:09:c8:4d:c9:09:87:a9:cf:ce:68:e4:9f:1e:c9:85:f4:
99:8c:07:95:c5:d3:7f:d7:5d:56:a5:52:00:72:4f:f2:f2:ff:
93:44:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:59 2025 by rpki-client