Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json)
Hash identifier: SEVXsLVTbpqYCkT2twwu+ac88MzdTaiEpIp4zoxkeVc=
Subject key identifier: B6:61:8C:FA:A8:5A:82:B7:B4:63:E9:CA:39:E9:24:12:FF:6D:AD:69
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 019676E839F1DBC4377ECFFB10E44D087210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 11:00:52 +0000
Manifest this update: Sun 27 Apr 2025 11:00:52 +0000
Manifest next update: Mon 28 Apr 2025 11:00:52 +0000
Files and hashes: 1: DoDdOAUlW0tUPkZU1ktuElEn3oE.roa (hash: KlbVm+I0oV0L2Y/KM4GiRobC6enmDYLnzhNJQOXiNU0=)
2: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: H+DItWGZIjNIfZz74InbHjDYfUwperCgidT/td3NhV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:39:f1:db:c4:37:7e:cf:fb:10:e4:4d:08:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Apr 27 11:00:52 2025 GMT
Not After : Apr 28 11:00:52 2025 GMT
Subject: CN=b6618cfaa85a82b7b463e9ca39e92412ff6dad69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:a3:5f:af:70:8a:28:a0:64:6c:02:7b:e4:
36:31:44:75:de:73:a4:51:72:ab:f5:5b:2c:f5:83:
ca:68:6d:20:2d:66:97:84:bb:fb:52:f8:98:66:20:
f8:a8:1e:86:3c:03:90:dd:af:f7:80:ca:98:11:67:
37:cc:ee:d9:b5:1f:bf:cb:26:43:80:6c:f0:4a:88:
ce:fe:fb:e9:9d:89:80:dd:1c:ff:e6:a3:2f:05:b6:
8d:8a:0c:77:82:f7:45:9a:b5:ed:fb:27:32:ce:35:
b4:44:29:ba:5a:15:44:f6:72:b6:96:50:99:05:9b:
b7:13:26:31:b8:08:4e:8b:a1:d1:e8:d0:a0:4a:89:
7f:00:a0:59:ef:c1:52:da:9d:16:b2:59:3e:1b:8d:
28:e8:10:fd:92:d5:e6:09:2a:9c:e1:23:47:9c:23:
fc:3a:8e:7c:3e:eb:f9:e5:e1:90:53:bf:ab:b5:f6:
74:fe:53:1c:8e:89:c7:6c:4e:4d:55:55:8f:2b:1f:
63:d6:9a:52:37:62:77:ae:83:62:50:c3:47:2f:71:
0b:b3:0b:a4:9c:74:32:76:e6:22:80:88:29:ed:56:
c4:e2:ea:e7:7b:ff:1c:d0:60:b3:00:83:78:04:a1:
2e:2e:1b:a7:7e:1b:c4:a4:cb:f8:e1:09:83:7c:f4:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:61:8C:FA:A8:5A:82:B7:B4:63:E9:CA:39:E9:24:12:FF:6D:AD:69
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7e:94:24:89:83:91:92:d9:e6:14:5e:00:98:26:36:7a:77:
db:9e:30:bf:5a:e9:a1:70:d6:76:1b:37:87:ee:bb:cf:ad:a4:
d0:05:3c:c4:58:4f:2d:ab:f8:61:00:93:38:35:03:05:f1:26:
31:d9:58:75:8f:d0:7b:0e:13:7f:6b:05:b5:e7:0e:6e:8b:1d:
21:5d:b3:51:62:be:41:7b:53:59:30:d4:02:65:ba:6b:a1:dd:
b2:23:b8:4b:bd:21:75:19:98:2e:1f:54:ff:b1:1f:37:1e:49:
36:49:2c:36:9e:43:89:17:08:97:1a:24:24:48:ea:5a:4c:09:
4b:7a:ee:7c:5d:da:d4:16:b7:e9:4d:fe:ce:6b:51:61:61:38:
86:4a:af:8f:e2:ee:0d:f5:fc:20:6e:c8:cc:ce:a5:44:20:dd:
aa:69:18:85:3e:68:dc:2d:03:84:71:2c:ab:e9:5b:25:ed:71:
b2:a4:48:18:c5:a6:42:9d:df:80:1b:83:e3:db:f0:fc:7d:94:
21:35:27:d8:c5:4f:b2:1c:f7:22:62:9f:3a:d9:f6:2a:3f:64:
a7:85:78:fa:bd:7d:96:d9:b8:ab:04:78:d0:8d:c7:8a:0a:1f:
db:ad:14:14:c5:20:63:84:a1:8d:50:47:9b:50:34:4f:e8:71:
c5:c7:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:52:03 2025 by rpki-client