Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
File: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft (raw, json)
Hash identifier: CpxEp8XppH0H9fexiTExSUsBsTQmlxm1CSiQGNHxk/s=
Subject key identifier: 6A:E9:0A:3C:6B:39:66:50:6F:E4:7D:E3:F4:B6:0E:F6:7D:F2:C3:64
Authority key identifier: 67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
Certificate issuer: /CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Certificate serial: 019686C928456544E846D698CDCFC7FC4A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
Manifest number: 55
Signing time: Wed 30 Apr 2025 13:00:51 +0000
Manifest this update: Wed 30 Apr 2025 13:00:51 +0000
Manifest next update: Thu 01 May 2025 13:00:51 +0000
Files and hashes: 1: 2hDPatYNHQhIPlvymgRA-xmm86U.roa (hash: 8kdVjJKDXzBN5JG+XGLJqwndIaq/0FXixJOUEgyTy9Q=)
2: Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl (hash: zZnm6DeHMdPKOf6/a3rg9syKZTKtmGd11vwvRW5atdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c9:28:45:65:44:e8:46:d6:98:cd:cf:c7:fc:4a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67589d5fe4bb1c5bdb83a353c2737dc604341326
Validity
Not Before: Apr 30 13:00:51 2025 GMT
Not After : May 1 13:00:51 2025 GMT
Subject: CN=6ae90a3c6b3966506fe47de3f4b60ef67df2c364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:95:41:f3:4e:8d:9d:4c:82:18:35:64:d9:
46:4f:35:45:c8:8b:e2:d3:03:b9:47:76:23:15:14:
e1:58:db:be:8e:fa:10:f7:7a:19:90:a4:dd:a4:de:
9a:6b:ab:ec:60:31:02:e5:94:34:33:69:3d:f3:c8:
ac:2f:59:d5:a2:cf:2b:78:b8:52:fc:6c:c2:ad:c2:
5b:80:4c:b0:f9:3e:e1:80:2c:ce:6a:02:ce:a3:14:
50:2b:79:e7:c2:64:13:b3:b6:dc:49:dc:4c:0f:71:
79:60:ac:7d:16:37:ef:1e:62:09:ec:55:06:c3:ed:
a2:f2:f9:2d:f9:3b:91:79:3d:86:0b:de:ae:c0:40:
13:3e:c9:ea:11:3f:6d:aa:74:e5:c5:6b:0c:97:b6:
2f:0a:29:1a:ac:d0:df:a0:c5:81:26:58:12:e8:22:
76:8c:2e:62:12:50:5b:77:ff:c6:45:da:f7:f7:b4:
df:aa:19:b2:76:2c:72:32:83:ec:df:e9:ce:67:7f:
2a:a3:25:08:e3:1b:1c:27:ae:c1:7b:44:b9:60:13:
e4:5e:15:d7:2b:0f:75:b4:10:a0:31:52:00:40:c6:
64:27:8f:53:a8:38:c2:05:02:c7:28:9c:09:07:7a:
b2:ec:5a:be:f4:b2:a8:47:d4:8e:ba:14:2a:2c:02:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E9:0A:3C:6B:39:66:50:6F:E4:7D:E3:F4:B6:0E:F6:7D:F2:C3:64
X509v3 Authority Key Identifier:
keyid:67:58:9D:5F:E4:BB:1C:5B:DB:83:A3:53:C2:73:7D:C6:04:34:13:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/733f9c-b115-49c8-959b-f58cb6480a7e/1/Z1idX-S7HFvbg6NTwnN9xgQ0EyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9c:40:df:4f:57:03:c9:ff:88:13:5b:c2:02:04:86:c1:24:
c6:95:01:ab:77:24:9d:85:cc:d0:81:2b:6d:f9:e0:84:25:8e:
d4:3a:ba:d8:69:4a:39:a3:50:3c:62:84:ad:7e:63:0d:2a:06:
a4:f7:a3:f2:c9:e0:c6:b5:f2:8a:fb:9b:81:70:a0:b2:3a:25:
ab:3e:43:64:75:e5:59:e7:90:00:11:af:61:2b:25:07:b4:3b:
62:8d:63:2d:92:06:c6:a3:d2:ea:f3:48:9a:d4:19:07:d2:1e:
66:dc:c5:b6:f5:7f:89:98:e4:c2:a1:71:fd:b1:b4:f2:47:8d:
96:10:e4:de:6e:8c:c2:4c:41:9a:37:2a:32:75:5d:b3:9d:df:
6a:e8:6b:31:2a:f8:9d:43:9c:e9:fe:42:fc:9a:61:79:17:f8:
f4:60:f1:68:f8:0e:ba:0d:c4:c0:c7:f1:71:d6:48:85:c9:9c:
49:77:f9:88:70:15:25:6e:d6:bd:9e:e8:43:36:7e:87:3d:29:
b0:c0:7f:74:c0:b9:22:a6:67:50:1d:e6:ec:cf:f5:96:f9:99:
ac:36:3d:31:b2:82:50:15:5e:a3:05:bc:b2:e8:f7:35:f2:1a:
1c:af:b7:6c:b4:6b:6b:89:c0:35:ac:7b:23:14:8f:1a:6a:fe:
e3:95:9f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:25 2025 by rpki-client