Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
File: Z2S57soliueMTVEyGovf75orajw.mft (raw, json)
Hash identifier: ixTgy417qMrl5kA+TH7Du2iF0HTLjbvzK0iDUGR3frw=
Subject key identifier: 87:99:54:B3:4C:50:65:EE:BB:2C:BF:11:A4:80:21:34:0A:23:1D:89
Authority key identifier: 67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
Certificate issuer: /CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Certificate serial: 019674F9EF66E0E9CDF2083D4927E321DAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 02:00:58 +0000
Manifest this update: Sun 27 Apr 2025 02:00:58 +0000
Manifest next update: Mon 28 Apr 2025 02:00:58 +0000
Files and hashes: 1: J8TxeAmZBzINa9syBZ1B4yTXcxY.roa (hash: 2QfjawOPNl3mivz2h5LwmzlkbdOnVy10wna7TIvLBVY=)
2: MwzfvZntetFg-_eX5DgAKUVWZK0.roa (hash: px93WC5fRlO4NzSq6ywwEqfisL0ff50EWTLfIp14D3o=)
3: Z2S57soliueMTVEyGovf75orajw.crl (hash: obi3Sx0nQ65VLONXmB3skOgYPWPMFRqaZlsaFgitIDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:ef:66:e0:e9:cd:f2:08:3d:49:27:e3:21:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6764b9eeca258ae78c4d51321a8bdfef9a2b6a3c
Validity
Not Before: Apr 27 02:00:58 2025 GMT
Not After : Apr 28 02:00:58 2025 GMT
Subject: CN=879954b34c5065eebb2cbf11a48021340a231d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:67:3b:70:c9:d5:fd:d4:e9:ea:82:26:fa:46:
d1:6f:fc:63:fe:fd:69:3b:5d:65:66:0f:ee:32:ff:
95:6a:09:98:9c:d5:6e:1a:47:ef:35:b5:84:3c:75:
44:40:23:d4:d0:a6:9d:d9:9e:79:5e:8c:92:77:c0:
c0:2d:b0:ee:b2:27:4d:ea:ee:4f:ca:c5:10:0f:bb:
26:7f:5b:ff:a3:dc:47:d1:77:69:65:01:fe:66:d9:
47:53:eb:d1:ee:7a:09:0f:3c:16:61:6b:33:7d:d0:
93:f7:e0:17:40:02:98:f9:34:99:65:52:c0:0a:8b:
aa:ce:34:be:f6:f6:9b:97:1b:e4:62:7e:13:69:60:
68:0b:e8:32:d4:a3:62:ca:0d:e1:a1:ee:22:ac:ce:
83:25:5a:6c:54:5c:bb:2d:bd:b1:62:20:f0:e2:20:
82:4c:c9:60:c4:df:69:9e:2d:ae:a4:ac:18:7b:4e:
c4:6d:b6:02:8a:ee:b8:89:bf:01:62:d3:5f:57:37:
eb:31:e7:29:aa:be:be:9d:4d:4d:83:c2:24:45:cb:
48:25:a5:b7:ee:67:3f:63:a0:68:1f:b5:57:33:a6:
cf:20:3b:33:8a:e4:a8:5e:13:2c:cc:73:0c:79:2e:
8c:77:b3:76:93:2e:b7:35:3c:51:b0:12:ec:16:e2:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:99:54:B3:4C:50:65:EE:BB:2C:BF:11:A4:80:21:34:0A:23:1D:89
X509v3 Authority Key Identifier:
keyid:67:64:B9:EE:CA:25:8A:E7:8C:4D:51:32:1A:8B:DF:EF:9A:2B:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z2S57soliueMTVEyGovf75orajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e3335f-4114-4482-8e12-4256a46afeec/1/Z2S57soliueMTVEyGovf75orajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4d:37:b7:32:67:e7:05:f0:e8:d3:f1:fd:f5:cb:a5:f8:90:
70:65:c8:32:ae:a6:00:eb:ad:33:a8:80:c7:6d:e7:5f:f9:b2:
79:57:14:1b:9a:30:e5:3e:0e:b4:4d:8b:c2:b4:fa:49:a1:e0:
48:73:ae:df:58:9b:61:9c:a5:ef:08:37:a7:3c:bd:04:0c:78:
cc:16:44:c3:f4:2a:1b:a0:9f:7f:2f:86:20:30:ea:87:c6:b1:
f5:41:83:82:53:2e:b6:27:57:d7:75:89:48:f1:54:d2:d1:6e:
f5:23:27:9b:62:2f:af:82:70:72:98:7f:05:96:8c:22:c0:21:
32:13:e5:c2:05:67:9d:8b:c7:2b:b6:d5:9f:bc:b3:a9:6a:3a:
f9:6d:ea:b3:5e:2c:ea:43:43:db:cb:4a:6c:6b:e1:58:ea:77:
5f:79:99:f3:dd:fa:55:7a:13:c1:0b:67:d1:c6:99:9b:3d:f5:
af:e1:40:11:85:92:49:8b:b4:82:0a:eb:98:12:0a:91:97:5a:
5c:d4:4c:6a:e7:8f:a0:d2:92:0e:f0:04:14:39:8a:2e:f5:8a:
5b:92:14:35:33:0e:b8:08:dd:a8:e4:c4:05:b1:cf:54:e6:1a:
68:ad:93:d7:b8:97:fa:40:95:d4:c9:f2:0c:bc:a0:4a:0f:30:
c3:8d:10:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:49 2025 by rpki-client