Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: eJ+DJ6ciUOH1TQnl/O0zyY5kQ1inNQ20GrGAs/5NzmI=
Subject key identifier: 7F:AC:CE:9C:F6:38:BA:2C:46:71:ED:C9:89:D4:AB:32:20:51:86:4A
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 0196760CF45D677DA9C09A04A7CA7FFE359B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0BD1
Signing time: Sun 27 Apr 2025 07:01:22 +0000
Manifest this update: Sun 27 Apr 2025 07:01:22 +0000
Manifest next update: Mon 28 Apr 2025 07:01:22 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: 0QUIGLcjMNBOz/62p5RqwY9PK5b2InvbiPxeDpKzgYE=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:f4:5d:67:7d:a9:c0:9a:04:a7:ca:7f:fe:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Apr 27 07:01:22 2025 GMT
Not After : Apr 28 07:01:22 2025 GMT
Subject: CN=7facce9cf638ba2c4671edc989d4ab322051864a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:a0:51:a0:08:a0:a5:12:60:da:ba:62:e9:
c0:1d:eb:7d:26:cd:d7:66:99:e1:ea:20:c2:d2:19:
2b:82:ce:23:ca:b6:0f:c5:5e:50:e5:d3:4d:65:31:
af:a4:c3:cf:5a:e8:4b:b5:cc:0e:96:3f:39:99:e2:
a6:01:b8:41:b7:1d:29:cd:94:1e:8d:d6:2b:bb:eb:
33:20:39:47:0c:cd:dd:70:b2:29:49:5a:6a:e0:b0:
b8:2d:e5:2d:55:b2:44:59:26:ce:69:f1:1b:fd:65:
4b:f4:b3:2a:fd:8c:09:b5:d3:7d:e1:7a:bd:6a:c5:
ee:04:7e:64:b0:9a:82:36:5a:08:06:6a:95:2b:4b:
44:cf:7b:ac:4a:f4:1c:f3:0f:cb:c2:3a:f5:c9:eb:
c2:22:d2:b0:93:4f:53:f6:b1:2c:75:c7:6a:ca:a2:
0d:a4:85:7f:5a:cb:06:ac:0c:ce:01:96:0e:57:5e:
ed:97:68:0f:1c:7a:fe:40:4d:54:18:af:5a:31:bb:
86:ec:67:af:71:5d:7b:c4:ef:1e:10:88:10:be:81:
ce:49:71:77:1a:86:db:20:ac:0f:1b:58:13:da:4a:
10:84:87:36:b8:b9:03:a0:fc:f2:26:16:48:8e:6a:
f2:93:8d:ee:74:fe:5b:d3:63:3b:0a:a3:2f:5f:dc:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AC:CE:9C:F6:38:BA:2C:46:71:ED:C9:89:D4:AB:32:20:51:86:4A
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0c:7c:dc:59:d1:88:33:64:7b:9e:a4:c8:b9:7b:c2:86:7b:
4c:68:1c:96:50:a5:36:72:41:53:19:47:66:3a:dc:90:f1:aa:
06:e2:52:ad:33:63:fa:1a:3d:e6:97:02:cb:98:e6:bc:44:db:
31:28:99:64:c6:09:b2:f0:3d:79:a0:90:e7:fe:36:bc:64:c4:
1d:c8:9d:d4:61:ef:ff:ee:0b:cb:01:ba:44:dd:6c:78:83:dd:
98:d8:83:19:38:e6:5b:07:14:18:62:1c:6a:c7:d5:a1:ec:95:
c3:88:91:4d:b5:ec:d7:18:c0:2b:21:60:f5:c5:ca:cf:46:93:
2d:e6:e7:f7:79:46:7c:3b:90:a2:18:38:50:50:76:04:65:42:
0d:f7:a2:ae:44:43:22:0d:0e:08:2e:f8:77:32:6e:8e:72:01:
b9:f8:45:34:91:c6:7d:45:63:71:e1:7a:82:ec:4a:61:6e:ea:
b8:31:10:3a:a8:73:15:e7:9e:3b:fe:3b:96:93:05:28:9b:f2:
cd:e9:68:ec:25:6a:a3:91:ff:95:90:78:22:ba:77:51:33:6b:
b9:ee:64:50:99:7e:09:b0:29:9f:0e:7c:ca:95:4f:01:08:e3:
2d:b0:40:a8:24:1d:9a:7a:5d:6e:0a:92:be:e1:70:96:7f:a2:
8a:9d:2d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:01:36 2025 by rpki-client