Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier: OPj4UGdms+HVYvd3A2Ix/GjZtHSioc3Hrmavgq/rLBU=
Subject key identifier: DA:D2:82:E8:D8:21:6B:97:8D:12:54:95:BE:26:4F:CB:04:3E:DF:C9
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer: /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial: 019684DAAF4182E632ABCEE7252AEC76930F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number: 0416
Signing time: Wed 30 Apr 2025 04:00:46 +0000
Manifest this update: Wed 30 Apr 2025 04:00:46 +0000
Manifest next update: Thu 01 May 2025 04:00:46 +0000
Files and hashes: 1: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=)
2: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: M1cTwjIETVvRyOq90i+fPgTnW2L9ZMdHbLmXpV2cLuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:af:41:82:e6:32:ab:ce:e7:25:2a:ec:76:93:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Validity
Not Before: Apr 30 04:00:46 2025 GMT
Not After : May 1 04:00:46 2025 GMT
Subject: CN=dad282e8d8216b978d125495be264fcb043edfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:61:56:d0:64:df:67:52:0b:96:e6:c9:91:
36:77:d9:9d:ee:03:8b:81:10:ae:07:3a:85:a3:8d:
43:fb:f6:61:52:1e:12:56:27:62:5d:c6:b7:4b:5a:
dd:d5:80:09:8b:97:c8:4a:54:ac:e3:87:6b:37:c1:
6e:81:09:f3:92:2a:54:5f:d6:b7:93:66:e9:8d:5b:
39:94:e0:60:df:30:7f:d0:88:15:92:b1:5b:6f:08:
b2:ab:71:42:2a:86:c6:52:5a:b3:74:98:8c:6c:c3:
a1:1c:9c:6a:9b:05:99:d6:98:8c:b0:21:8d:9c:66:
4c:fd:97:49:35:6c:d8:b6:24:7d:fa:4b:8e:e1:ad:
34:84:fa:e3:40:b2:42:86:3c:cf:b2:4d:cb:b1:70:
56:1a:4f:03:f4:48:bc:17:02:8f:11:0f:b9:01:be:
20:c4:ac:27:59:85:a6:25:88:cf:b6:f0:1d:2e:8d:
54:f5:f2:7d:dd:2f:9a:cf:2c:ad:f9:7e:86:b8:c7:
6a:50:38:d3:03:bb:6a:fd:cb:55:8a:75:1e:b5:2a:
b7:19:66:3e:1f:9e:35:20:25:e6:bd:99:32:98:ff:
ed:88:9b:1e:fc:64:db:0f:0f:27:01:07:b9:55:e3:
a7:60:e5:a2:f1:8b:35:8c:84:14:7d:0f:f5:b3:8b:
68:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D2:82:E8:D8:21:6B:97:8D:12:54:95:BE:26:4F:CB:04:3E:DF:C9
X509v3 Authority Key Identifier:
keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:87:9c:61:07:b9:29:25:ef:a8:08:7a:2e:7d:18:20:3b:32:
0e:30:79:5e:24:3a:de:5f:5f:78:56:47:d7:c3:8e:72:93:fa:
3e:dc:83:17:89:6c:e5:4a:a4:75:d7:79:ff:f9:83:5c:a2:70:
a6:5e:04:82:e7:a3:76:5a:a2:d3:49:a2:92:68:ef:1e:35:50:
65:ed:f2:23:07:3d:e7:db:0c:46:af:f0:21:1d:4d:5e:c4:a5:
c7:e9:3e:31:18:2c:72:c2:55:9c:e7:56:ea:f9:90:ba:c0:b4:
35:e2:97:18:37:49:ea:18:ec:04:79:17:48:49:a0:e1:4b:82:
13:f3:2f:e2:5a:d1:33:3f:16:c1:a8:03:c7:5c:3e:f5:66:f3:
6d:33:ae:dd:e4:6f:73:3a:54:ff:af:03:69:ae:e4:5d:21:94:
5f:56:7e:49:82:4f:91:85:d5:88:e1:54:66:e8:6d:10:68:3a:
31:51:30:75:e9:9e:8c:2e:e7:2f:c2:1b:8d:67:1c:a4:40:ae:
d5:cf:8b:e9:25:00:2f:b6:15:dc:2d:c1:29:27:0b:38:52:61:
f5:cb:e6:f5:c6:35:a5:af:d1:79:db:d8:cd:d2:17:d1:16:0b:
e3:56:b6:c9:2c:bf:be:2a:fe:2a:14:d5:fe:a0:25:e4:b2:10:
bd:de:d0:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2q9BguYyq87nJSrsdpMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmE3YTQyNmRjNTE5OTYzZDMzZDJkYzZjZWY3ODJmZDVm
MmRjNzcwHhcNMjUwNDMwMDQwMDQ2WhcNMjUwNTAxMDQwMDQ2WjAzMTEwLwYDVQQD
EyhkYWQyODJlOGQ4MjE2Yjk3OGQxMjU0OTViZTI2NGZjYjA0M2VkZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3xhVtBk32dSC5bmyZE2d9md7gOL
gRCuBzqFo41D+/ZhUh4SVidiXca3S1rd1YAJi5fISlSs44drN8FugQnzkipUX9a3
k2bpjVs5lOBg3zB/0IgVkrFbbwiyq3FCKobGUlqzdJiMbMOhHJxqmwWZ1piMsCGN
nGZM/ZdJNWzYtiR9+kuO4a00hPrjQLJChjzPsk3LsXBWGk8D9Ei8FwKPEQ+5Ab4g
xKwnWYWmJYjPtvAdLo1U9fJ93S+azyyt+X6GuMdqUDjTA7tq/ctVinUetSq3GWY+
H541ICXmvZkymP/tiJse/GTbDw8nAQe5VeOnYOWi8Ys1jIQUfQ/1s4tobwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrSgujYIWuXjRJUlb4mT8sEPt/JMB8GA1UdIwQY
MBaAFM9qekJtxRmWPTPS3GzveC/V8tx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2Ut
ZDJkYjczZmYzMWJjLzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2UtZDJkYjczZmYzMWJj
LzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4ecYQe5
KSXvqAh6Ln0YIDsyDjB5XiQ63l9feFZH18OOcpP6PtyDF4ls5Uqkddd5//mDXKJw
pl4Eguejdlqi00mikmjvHjVQZe3yIwc959sMRq/wIR1NXsSlx+k+MRgscsJVnOdW
6vmQusC0NeKXGDdJ6hjsBHkXSEmg4UuCE/Mv4lrRMz8WwagDx1w+9WbzbTOu3eRv
czpU/68Daa7kXSGUX1Z+SYJPkYXViOFUZuhtEGg6MVEwdemejC7nL8IbjWccpECu
1c+L6SUAL7YV3C3BKScLOFJh9cvm9cY1pa/RedvYzdIX0RYL41a2ySy/vir+KhTV
/qAl5LIQvd7Qjw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 07:38:17 2025 by rpki-client