Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
File: Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft (raw, json)
Hash identifier: w+bl+W2x7D+BRVfXoUDzLCo7l5uDjV8SGk87VW5J+qY=
Subject key identifier: 1D:CF:7B:2A:D0:17:D8:11:6B:2E:6D:38:DC:4C:AE:44:70:DE:11:CC
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 01969071186A78E81396C56E0D9E7F14F325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
Manifest number: 1521
Signing time: Fri 02 May 2025 10:00:53 +0000
Manifest this update: Fri 02 May 2025 10:00:53 +0000
Manifest next update: Sat 03 May 2025 10:00:53 +0000
Files and hashes: 1: A6mU_fy2dvWAW9y9y6qPym3VUYU.roa (hash: B8MQ+q91TtenzRFP6rUUzrDHFdogGVA1RdvfKnJNkfY=)
2: CEH26SsbgBXa-XRDjPR4dutITU8.roa (hash: 45+vY3NG1v7bfBUPDZYQRwEM4pvEI9SIrsWhw3tfGJE=)
3: GCgFGIXy9ORAgY5JZtgQnYO84po.roa (hash: uiQ3pF8ZQYiS46PnIMk3tsXyihLlgICHZ4OO1bUgWLU=)
4: Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl (hash: Yw94eVflcAhip/hkyNNw/mOkWrwGhGYXwQKJHtu8V78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:71:18:6a:78:e8:13:96:c5:6e:0d:9e:7f:14:f3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: May 2 10:00:53 2025 GMT
Not After : May 3 10:00:53 2025 GMT
Subject: CN=1dcf7b2ad017d8116b2e6d38dc4cae4470de11cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5b:cf:40:f8:dd:52:e7:47:21:bd:15:dc:6b:
d2:ad:fe:59:6b:e5:ea:fd:55:93:bb:90:da:f9:0c:
94:d2:31:f1:48:b4:cb:8e:1f:e5:f2:c6:4f:b1:f0:
85:8f:50:9e:5d:36:94:b6:26:88:7f:cf:6f:a3:e4:
61:0b:76:65:f0:5d:82:8a:26:ad:fb:c1:0b:53:c3:
bd:6c:ed:1a:cb:68:ad:62:7f:8b:d7:7d:6b:b2:e9:
5d:04:56:38:86:e9:a0:2d:5c:cd:86:a9:79:64:a2:
ae:ce:14:14:a8:0e:3c:af:66:16:14:49:39:7c:94:
15:88:2e:54:d3:18:12:75:18:d9:6c:7d:7b:7d:30:
2c:26:4c:8f:c9:10:4c:f6:48:29:88:37:d1:02:e3:
11:32:bb:ec:2f:08:56:f7:22:a6:d1:5c:42:7b:d0:
a2:25:95:32:6b:00:44:7d:b1:17:c5:93:a9:73:7d:
54:3c:68:0d:dd:70:4f:f6:ff:ec:8d:d8:1a:99:b0:
bb:02:91:8e:c3:0e:62:b6:10:1d:ee:78:14:4b:97:
87:46:52:d7:78:6a:d3:6c:cb:f7:0f:26:c0:2b:ee:
06:f2:ab:26:9d:26:8b:39:a8:cb:0d:5f:10:e3:cc:
4f:36:aa:09:be:49:c3:1f:db:fb:c4:cf:9d:3a:bb:
5d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CF:7B:2A:D0:17:D8:11:6B:2E:6D:38:DC:4C:AE:44:70:DE:11:CC
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cd:2e:8b:eb:aa:cd:3c:5f:fe:6b:7f:72:67:06:c4:24:c9:
d7:f0:2a:03:c3:b7:60:e5:db:aa:44:28:6f:15:47:e2:d6:cb:
e6:10:0b:80:56:88:97:e5:5b:df:8b:30:9f:dc:88:24:c6:a5:
4b:01:92:c5:52:26:4c:fd:da:2e:fa:64:77:27:87:d6:ef:41:
c7:d6:fe:67:05:7a:56:25:9c:1d:5d:c9:60:16:dc:c1:3b:cb:
e0:37:69:e1:62:b1:e5:ec:49:a7:54:d7:2a:e0:ca:4c:e5:9c:
66:8d:3d:01:7a:35:95:e1:52:8a:fe:b5:8a:db:e2:d0:5e:fe:
e1:0b:fb:f2:ea:b4:50:f0:03:88:e0:e3:75:6f:ab:b6:95:05:
67:32:f3:2e:35:32:53:f0:dd:7b:3d:5b:af:66:b7:63:87:a0:
79:82:ba:e5:68:1e:42:3f:a3:55:d6:5a:29:62:33:9e:5e:55:
fa:51:c0:31:c0:f8:f7:13:66:06:aa:f2:bf:39:f2:bc:b4:da:
83:b9:bf:b6:c6:1f:94:a5:f8:38:c2:4a:68:e2:cf:79:50:88:
59:4e:52:63:df:8e:0e:77:ea:c3:e8:bb:5a:e9:00:29:f4:64:
ac:36:27:75:59:8e:1e:0e:3c:23:c4:2a:3b:03:e3:c1:18:a5:
34:03:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:04:56 2025 by rpki-client