Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
File: Z1Zd_fZrIS4XodmKf14rCzJkza4.mft (raw, json)
Hash identifier: mBb8MZzJwyZ60pe4YPK985ipjhkGja0hqJzJRlyv5m4=
Subject key identifier: E5:A0:46:17:10:10:82:58:62:FB:2E:A1:F6:40:55:AF:A5:88:CA:F4
Authority key identifier: 67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
Certificate issuer: /CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Certificate serial: 019677FB5995756531A98C9EF1660940727C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 16:01:23 +0000
Manifest this update: Sun 27 Apr 2025 16:01:23 +0000
Manifest next update: Mon 28 Apr 2025 16:01:23 +0000
Files and hashes: 1: Z1Zd_fZrIS4XodmKf14rCzJkza4.crl (hash: mfz6y89a91jcQTH26J0tab09QzbHx5CE0lo7rDN2N4s=)
2: edLAr30NQ2j1eS2szlFoVf6cZ6k.roa (hash: YX6gw5+qXpVJdrJ3QtQM0C2faqlrGQ4u2zGhs6Hy6CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:59:95:75:65:31:a9:8c:9e:f1:66:09:40:72:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67565dfdf66b212e17a1d98a7f5e2b0b3264cdae
Validity
Not Before: Apr 27 16:01:23 2025 GMT
Not After : Apr 28 16:01:23 2025 GMT
Subject: CN=e5a046171010825862fb2ea1f64055afa588caf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2f:c5:20:00:a1:fb:02:93:51:28:6d:94:4e:
21:7f:db:38:78:eb:59:2e:08:00:7e:51:e3:b5:87:
75:45:a7:a8:db:99:59:24:98:94:cf:f0:87:21:d1:
52:1f:6a:7f:cd:47:b1:3e:37:b8:6d:dc:49:f5:39:
5b:be:13:3d:f2:15:62:67:fb:7d:e1:86:d4:4b:ad:
a6:8f:cd:e3:b3:6e:9d:68:a8:6a:fe:32:6e:6f:21:
f3:1f:e7:06:14:ca:e9:3f:a9:6c:e6:b4:e8:7d:ac:
bb:98:13:d3:c9:b9:a3:4f:f7:1d:3e:67:4e:e2:c1:
16:2a:a9:aa:0a:76:6d:5e:e7:ef:0b:78:7a:f1:f1:
40:f9:3a:0d:ad:91:18:8f:2e:62:94:2f:95:28:36:
ab:01:77:b5:e9:a9:5f:b8:0d:bd:8c:9d:b7:69:7b:
51:5b:e0:d6:ca:43:d5:16:40:77:e6:85:67:a5:d4:
65:08:cb:7a:17:c6:21:e9:4b:83:a6:6d:59:9d:72:
57:46:dc:d9:50:e2:39:1a:44:a4:69:bd:dd:bd:bb:
69:42:52:d4:d5:a4:7a:17:54:e1:89:21:13:a5:4a:
08:8a:37:1f:56:e9:19:1d:29:cf:5e:b7:fb:47:3f:
19:49:d6:37:19:ba:6b:0f:84:63:fc:0e:3b:da:c7:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:46:17:10:10:82:58:62:FB:2E:A1:F6:40:55:AF:A5:88:CA:F4
X509v3 Authority Key Identifier:
keyid:67:56:5D:FD:F6:6B:21:2E:17:A1:D9:8A:7F:5E:2B:0B:32:64:CD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1Zd_fZrIS4XodmKf14rCzJkza4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ab626-de1a-4dcf-a10e-8cc38718d219/1/Z1Zd_fZrIS4XodmKf14rCzJkza4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:26:a7:ef:57:ef:1a:b6:a5:bd:1c:fe:d7:ed:19:50:71:c5:
00:94:8e:04:32:2e:21:b5:64:bf:8d:70:23:38:7c:22:78:cb:
3c:7a:ad:d7:38:94:6e:d8:cc:03:fe:45:63:fc:30:2b:d5:f3:
68:84:57:be:f3:32:41:0e:67:1b:e3:00:74:d8:cb:ac:65:60:
8f:6d:f4:1c:d6:2d:86:89:64:db:1e:c4:01:b1:97:75:e7:ac:
98:80:c4:4e:93:12:89:3b:d1:ca:26:71:ee:58:21:8b:a1:fb:
0f:17:0c:e8:f5:c1:27:d4:c1:f7:5a:b2:09:32:a4:02:3c:0d:
b7:da:4f:59:6f:f5:05:d9:17:a1:d2:fc:1d:67:7d:12:75:b5:
b8:5c:ba:fd:c8:0f:5e:b9:dc:12:30:51:3f:48:ef:7a:1b:e1:
c2:da:d3:3b:1e:a3:55:6f:e3:3b:7c:75:33:8d:69:1f:22:7e:
c9:fa:36:dd:ea:50:43:e2:e5:26:90:c3:96:0a:14:b6:02:75:
7f:ef:01:93:4f:ae:ac:b2:ea:2a:6a:25:11:74:b0:ef:e0:21:
5a:d4:33:12:d2:08:b5:fa:47:60:23:4e:98:93:2d:93:d1:56:
20:dc:48:ed:32:da:0c:5e:f6:4a:46:ab:bf:c1:ee:4f:ea:0f:
98:f1:b4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:54 2025 by rpki-client