Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
File: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft (raw, json)
Hash identifier: l5e2FLhgexfciZkelTaJjXQFwJi2O+41+Lv/k7Bu8Xc=
Subject key identifier: AB:3B:58:AA:55:23:7A:6B:58:91:2A:C2:24:E3:4D:C7:31:F7:75:93
Authority key identifier: 67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
Certificate issuer: /CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Certificate serial: 01967679E454A093582569050D47CD4FD961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
Manifest number: 0C03
Signing time: Sun 27 Apr 2025 09:00:21 +0000
Manifest this update: Sun 27 Apr 2025 09:00:21 +0000
Manifest next update: Mon 28 Apr 2025 09:00:21 +0000
Files and hashes: 1: QSFoTY-rZFAhWSMN9-_p_o-BDiU.roa (hash: 3LADFmQvbHE7KoUBEivUP2jD8vxc2/ZNRnufgFEmEsE=)
2: Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl (hash: S5l5mxgDfXbSws7YUwlAfh/W/2PC1d9T1+piTEPOmZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:e4:54:a0:93:58:25:69:05:0d:47:cd:4f:d9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d045c13c03dcb373d2a7d85d1e01b6e0ac7e1c
Validity
Not Before: Apr 27 09:00:21 2025 GMT
Not After : Apr 28 09:00:21 2025 GMT
Subject: CN=ab3b58aa55237a6b58912ac224e34dc731f77593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:93:b2:d5:bd:3e:b0:21:cc:f5:56:e7:5f:
f1:b6:78:8f:34:b7:df:1c:de:18:1c:99:3f:30:0f:
75:e2:57:7b:1e:ae:83:0d:43:72:c7:5c:80:d7:1b:
0e:fc:38:cc:bc:54:35:6b:a1:3b:c1:82:76:3b:6a:
89:c7:85:4d:28:0f:a4:1c:8d:ea:d9:cf:d3:98:34:
a3:01:cc:ea:d9:19:a3:fc:e6:c4:99:a0:c6:0a:cf:
86:51:ca:0c:a5:03:9b:e3:18:38:6f:35:23:cd:7e:
2f:33:e5:49:d7:53:ac:e4:c7:a7:2e:eb:42:9c:91:
c4:8a:ba:3f:f9:e6:c4:f6:b1:68:4e:e6:83:55:45:
46:d6:ec:11:2a:4d:64:91:ba:3a:6f:06:97:1b:45:
1d:5f:ff:43:0f:05:23:70:39:0f:7c:6a:76:38:18:
22:6a:be:db:9a:51:16:4a:0f:63:00:b5:ad:3a:11:
c6:fa:55:50:23:d0:ea:a9:a5:83:5f:6e:c5:9e:29:
57:dc:ef:01:ff:28:56:4f:b7:70:18:d1:14:58:df:
2d:57:c1:7f:9f:4f:3a:45:ae:a9:31:4c:32:92:ab:
76:59:b3:bd:a9:51:78:ea:8e:cc:87:35:6e:6d:7c:
db:3a:ff:7e:cb:70:47:87:17:07:28:d0:48:32:31:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:58:AA:55:23:7A:6B:58:91:2A:C2:24:E3:4D:C7:31:F7:75:93
X509v3 Authority Key Identifier:
keyid:67:D0:45:C1:3C:03:DC:B3:73:D2:A7:D8:5D:1E:01:B6:E0:AC:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/2e4f3f-5526-4520-8313-16ff723af335/1/Z9BFwTwD3LNz0qfYXR4BtuCsfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ab:d1:57:94:36:65:ea:21:d9:bc:89:70:48:98:f8:87:0b:
5d:81:26:93:c8:0a:2b:42:eb:cd:de:40:b8:15:79:df:68:cd:
d5:1c:4f:e0:4f:32:8e:4f:c1:3e:52:d7:2e:d1:65:24:d5:54:
d4:9f:8e:70:ef:b3:60:4b:77:f1:18:53:e1:d2:91:5e:b6:51:
d9:ac:ce:64:50:52:d0:98:c1:f5:e7:a4:d0:08:29:e0:07:a9:
95:74:ef:48:6b:7c:5f:68:08:47:b4:74:27:c5:89:cc:61:2e:
7f:d8:9e:7e:40:65:53:58:38:9d:24:e4:7e:c5:ca:94:5b:ac:
76:76:03:3b:d1:37:8b:82:03:88:13:7b:f6:dd:2d:30:6f:2a:
f2:f1:c1:0c:be:d7:45:e3:f3:01:5a:42:f1:3d:24:ca:78:3f:
dc:68:9e:09:3d:db:71:47:e7:e3:4e:98:99:2e:c2:54:df:18:
9e:c5:db:c3:a5:f8:bc:ab:37:a9:3a:3c:c0:90:04:ff:33:e1:
91:e5:74:95:1f:dc:76:99:43:08:0d:b7:93:a6:a4:ac:2d:d3:
9b:c0:3c:e3:04:15:f9:9b:7f:4d:fa:79:09:a2:13:85:c8:2d:
1e:bd:e2:e2:16:32:e6:a0:da:51:ba:d6:9d:9d:4c:48:21:b4:
57:55:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:23:35 2025 by rpki-client