Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
File: z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft (raw, json)
Hash identifier: 20/4KUjMppqRmeWVT4b/CIQeOsmRld/Ypzn9agbZ0j0=
Subject key identifier: 38:31:5A:90:B0:62:D9:33:DA:7B:31:6B:CE:79:31:66:AC:E0:49:E9
Authority key identifier: CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
Certificate issuer: /CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Certificate serial: 0196767A4DA72D2125212786C7E6013D9AF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
Manifest number: 0230
Signing time: Sun 27 Apr 2025 09:00:48 +0000
Manifest this update: Sun 27 Apr 2025 09:00:48 +0000
Manifest next update: Mon 28 Apr 2025 09:00:48 +0000
Files and hashes: 1: ZJDnLY0CmWxPPs398mwoQ2ztTTA.roa (hash: SI081t3me+7ri3fLZ5IxMVnT89R3bnmNj3fOxu9qPec=)
2: yF648HmKSc8efL0XMtipmpiaVnM.roa (hash: UDCEoeXTHrEK5NMAkbLD0UGR3wavVXcw5jHo/SSMwWE=)
3: z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl (hash: 9jLM3dn/QS42+T1NYGwmlnVpor/i+H7Grp1cgx8KbZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:4d:a7:2d:21:25:21:27:86:c7:e6:01:3d:9a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf5bf0f19a994c7f686d55abfc16875d39e5d4e2
Validity
Not Before: Apr 27 09:00:48 2025 GMT
Not After : Apr 28 09:00:48 2025 GMT
Subject: CN=38315a90b062d933da7b316bce793166ace049e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:ea:1f:95:a4:7e:0b:b5:fc:89:1c:76:3e:
95:30:ae:ae:50:4e:11:bf:2c:7b:dd:90:08:be:af:
83:5c:1e:3c:dc:47:ef:c3:d0:a8:35:d1:72:9d:36:
c0:40:85:d3:03:72:05:68:55:98:0c:93:3a:2b:e4:
56:67:ec:51:20:19:58:81:93:6a:23:cc:e9:26:a8:
18:41:b0:4f:45:0c:86:4b:87:ae:2f:a5:1f:20:3f:
6d:45:36:af:a2:03:15:19:36:06:76:f6:b5:e1:7a:
e0:ca:a6:e1:ad:c4:e0:b3:f7:50:69:8a:af:f4:68:
23:d1:d6:f5:2e:b2:44:58:a2:0d:13:20:1d:4d:a3:
04:4c:eb:91:8d:ee:a5:01:3c:10:54:c1:ce:95:aa:
71:f6:e9:85:59:03:be:3c:ef:db:0a:60:61:e9:13:
cd:c4:de:ec:b8:a8:0f:a5:4f:0f:c3:4d:75:3e:09:
7c:85:ba:83:59:e9:ce:10:02:f5:c1:6f:33:03:cd:
2d:ea:c6:f2:86:7e:61:b6:45:02:43:d6:2d:c1:f4:
7d:f3:97:09:dd:65:af:2f:88:93:1e:02:66:fd:71:
47:ae:a0:5f:ed:f6:cb:06:dd:0e:88:c1:5c:ea:a4:
54:61:a9:7a:6c:f7:88:0d:de:c0:3c:b2:7e:fa:88:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:5A:90:B0:62:D9:33:DA:7B:31:6B:CE:79:31:66:AC:E0:49:E9
X509v3 Authority Key Identifier:
keyid:CF:5B:F0:F1:9A:99:4C:7F:68:6D:55:AB:FC:16:87:5D:39:E5:D4:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1vw8ZqZTH9obVWr_BaHXTnl1OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e23847-6f30-4daf-b2a3-340fac3f6baf/1/z1vw8ZqZTH9obVWr_BaHXTnl1OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3e:f2:bc:75:d4:01:75:a2:2b:1d:a8:59:26:97:09:e7:03:
37:02:4f:25:89:0d:cd:90:77:62:0a:09:8e:89:21:41:32:76:
fd:68:6c:ab:88:a9:43:8c:e0:84:91:78:f6:0e:fd:51:c1:ba:
66:1d:ec:14:56:2d:bc:eb:2f:65:c2:39:90:ba:de:cc:49:d4:
a6:bb:3d:7a:84:9f:46:23:ca:36:7b:6f:f4:b4:95:22:2c:83:
d7:7b:ff:e2:c1:21:ad:49:c3:6b:0c:52:9e:44:a8:10:60:8e:
2a:3e:b7:e4:42:6d:3f:88:a4:00:48:43:bf:46:23:42:53:f8:
4e:14:d7:b0:cc:f8:7b:9f:ce:d5:e9:ce:54:9c:f0:36:80:db:
9c:ea:23:d2:ed:75:23:60:af:cd:a4:9e:81:b6:74:21:51:ce:
e1:1e:99:f1:b2:e5:13:9e:8f:5c:7e:79:51:48:2b:f5:0b:f9:
95:e7:36:d3:f3:d5:5c:df:bb:80:27:62:e1:b2:87:54:fb:b3:
47:0a:f4:05:5f:d6:69:84:f0:11:f5:a6:c7:9d:0a:1f:76:5d:
f4:84:24:52:7d:7f:82:47:82:a1:ea:4a:99:9a:ca:bc:52:d8:
5e:dd:aa:1d:c6:dd:38:4e:b3:13:91:4a:e6:b6:2d:b2:7e:b3:
ac:3b:4b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:09 2025 by rpki-client