Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
File: Z84XnL4T3bFAEphaBnEA75ilVgE.mft (raw, json)
Hash identifier: KV/uNzzEqfLst/l5kAZl6gPopgPiTCYSFywRjo4qXaM=
Subject key identifier: 2B:DA:36:23:BE:0C:F0:58:42:B5:B7:F5:E6:47:0D:69:C6:9C:33:9B
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 01967F0FBA232A245D698F51542891254C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
Manifest number: 09D5
Signing time: Tue 29 Apr 2025 01:00:59 +0000
Manifest this update: Tue 29 Apr 2025 01:00:59 +0000
Manifest next update: Wed 30 Apr 2025 01:00:59 +0000
Files and hashes: 1: JKNWbouQzoruFwki9fjiu02Ceds.roa (hash: HUJbBXvos0tzAFbMulw/ZH+VVZ/kGp1mQGDZrKa1ES8=)
2: JYmQcVf6BfsYcKxJFKZsXd4f2To.roa (hash: tjmsYQgdvBrGDDiyWAJWajhEM88kj9HYgypYyxWTvaY=)
3: Y2B_AYL2gCl2_CyJ1cGobOwmPpo.roa (hash: 9wirUz6B2msilvWvCiwp1E+Ixnrs+bWT4H+o8cEiH+s=)
4: Z84XnL4T3bFAEphaBnEA75ilVgE.crl (hash: RD2YGcEwDs2imTcI3X0/4P0NQ9rmzcgNvkaAEjIHsPA=)
5: jKB4bF7QEatig6EKVxlScEN1XC8.roa (hash: YIo6qCbdc07X+f+Ko5OWjfr4p+cI6VEVEj/ToimWQxE=)
6: mvB2xY00rQ7Oz1GdcTySIIM6sP0.roa (hash: GNJXQDfp8FJLl+m4dx8Ma4QwUS4Qqykcf0B6fU00US8=)
7: mw0de6Xv2RzpyGlyY7DWmNuIerM.roa (hash: Ee21P5NIqEuyWMvaOtz32QEEMsKPLFLuA6raTwNAO68=)
8: oNBMbwaOMIQ3gc1brZ79tHvusAk.roa (hash: ysE/JGbhhCWnTVWZQIC1rfv8V4VscJDcwpcwjlUthoY=)
9: w9t2CiAZmy5yWNZOWqSb1MFkxWE.roa (hash: Ut75AQ5RZ+LcXsHl6cibiMpZD/BBFo2+WgUIizJ+v2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:ba:23:2a:24:5d:69:8f:51:54:28:91:25:4c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Apr 29 01:00:59 2025 GMT
Not After : Apr 30 01:00:59 2025 GMT
Subject: CN=2bda3623be0cf05842b5b7f5e6470d69c69c339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:bc:f5:05:5a:71:4b:73:b6:23:ba:1e:cf:
47:1c:f6:cd:4b:6f:24:9e:c6:bb:2f:2b:d9:87:50:
00:f3:92:61:ed:eb:a1:13:3e:a0:31:03:61:ff:b4:
1d:25:22:6b:51:d7:15:f2:66:d8:24:2e:8e:18:a2:
ae:3d:81:d5:d9:f8:18:67:81:d9:29:7f:38:d6:16:
c1:41:cc:a2:0b:ae:fe:95:73:32:a3:c9:27:68:0e:
08:cd:a3:97:1c:08:56:dc:d2:35:d2:bd:84:ad:b2:
03:b3:91:e8:99:c5:46:9f:35:b0:74:69:c7:8f:6c:
4a:f9:31:c8:ab:f8:cf:62:86:c6:24:16:08:c0:2a:
a6:d3:43:b3:b5:24:3b:8d:4e:69:8b:b5:94:a0:0e:
63:77:5f:c5:8a:68:1a:5c:44:91:7e:69:a8:15:52:
25:a1:51:1c:7e:68:f6:9c:79:d9:7e:56:8c:62:9b:
74:26:e6:d7:a8:22:41:b8:b9:2e:f6:01:87:24:fb:
67:ad:8d:c1:f2:5d:94:39:df:77:43:54:58:00:cd:
69:8e:df:ad:2e:a4:6c:b9:85:30:f9:0f:0a:92:95:
da:29:d7:b0:54:36:93:a2:e4:10:2d:9e:d8:95:ff:
99:db:ef:fa:f6:a6:e7:63:f0:59:bb:e2:33:ad:80:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DA:36:23:BE:0C:F0:58:42:B5:B7:F5:E6:47:0D:69:C6:9C:33:9B
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:22:74:be:df:2c:f3:6a:e1:42:9e:b7:bc:1b:5f:4a:b9:cc:
af:8b:44:03:c4:36:63:cd:a8:b9:7c:e0:41:f1:ed:68:c5:aa:
a4:bc:f9:64:53:35:a9:03:cb:95:aa:ad:1b:45:78:93:33:68:
89:f7:24:e3:a1:c3:7e:8d:30:36:59:94:5a:a9:79:e4:28:10:
6b:76:36:3e:37:ef:78:74:59:74:ff:54:3a:9e:c4:f6:c2:fd:
58:2a:67:ec:f3:6f:31:59:88:75:18:af:09:84:ab:19:bb:e8:
33:d4:a9:b1:43:2f:84:6c:5d:97:50:fc:5f:ec:43:3f:1d:93:
02:cf:7a:5f:3b:91:8c:d0:0b:05:42:47:20:50:44:10:26:29:
6a:61:84:c2:78:c1:14:5e:59:d9:8f:3b:84:5e:96:7e:29:c1:
16:cb:01:58:32:64:ab:76:5f:02:e3:86:b5:97:62:36:ea:91:
31:77:27:79:6a:30:4d:25:ce:1f:02:8f:54:d1:9a:68:fb:39:
b0:86:4d:e0:33:9c:73:f7:b2:bc:ed:53:d7:4f:c2:bc:ef:69:
92:68:0d:a0:8a:50:c7:ac:2e:e3:49:f1:b9:11:11:f5:7a:68:
f9:ab:37:d9:90:74:23:77:a9:a0:20:da:7c:46:6e:46:2c:66:
7a:81:ed:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:24 2025 by rpki-client