Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
File: z6ExZhMNKdWtimB9gUmNpmAm0DY.mft (raw, json)
Hash identifier: tsJPGWVHA+rw6FSfFPCAhK9Sjbqx6hopPqYSVoGf+Hw=
Subject key identifier: 36:FB:3D:30:73:5C:26:4A:BC:8D:08:AE:DB:80:44:24:B0:DF:17:95
Authority key identifier: CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
Certificate issuer: /CN=cfa13166130d29d5ad8a607d81498da66026d036
Certificate serial: 01968924D290B98450E6BEB4606DAA3DD5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
Manifest number: 0227
Signing time: Thu 01 May 2025 00:00:13 +0000
Manifest this update: Thu 01 May 2025 00:00:13 +0000
Manifest next update: Fri 02 May 2025 00:00:13 +0000
Files and hashes: 1: 8NRIip7PRvYkRKm_8iGpYTYG-fQ.roa (hash: baP/2HoWmnxywqu4ozYPStRBgvEVcCSlNjY9VrvxlOY=)
2: z6ExZhMNKdWtimB9gUmNpmAm0DY.crl (hash: WTgBzBb1DqhkKkwp57jeLo+DBBKZNtggyZnl4KGHRPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:24:d2:90:b9:84:50:e6:be:b4:60:6d:aa:3d:d5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa13166130d29d5ad8a607d81498da66026d036
Validity
Not Before: May 1 00:00:13 2025 GMT
Not After : May 2 00:00:13 2025 GMT
Subject: CN=36fb3d30735c264abc8d08aedb804424b0df1795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:d2:94:f7:c4:2d:ac:7b:cc:32:92:19:3b:
12:fb:c2:a7:b7:d6:89:c6:5b:3f:0a:68:1c:c3:7d:
ee:9a:68:4b:de:d6:3d:90:69:f0:d6:a7:6e:b5:47:
13:d0:3e:7f:fd:58:4b:b7:b5:96:f9:cb:20:61:1d:
03:b8:0a:d3:51:4a:da:1f:c4:7e:df:58:af:fe:17:
f4:af:d5:bb:38:fc:33:71:5c:6f:9f:82:b5:81:56:
3b:c1:29:ea:0b:61:5f:de:51:ac:20:a3:c6:f1:35:
e6:57:93:29:db:9c:6c:00:0d:e4:cc:00:a6:99:2c:
d1:c5:bf:db:db:12:37:19:93:ff:94:82:fc:8a:b6:
80:c1:58:3f:fb:8b:12:31:cd:a9:58:e8:d0:cd:d1:
ec:73:56:6b:5f:29:c5:9c:1c:d7:e8:45:cd:45:1b:
40:0d:83:cc:8a:32:83:a5:d4:fd:73:4c:60:11:a8:
ee:63:fc:a6:c0:5b:9b:fb:83:c8:1a:37:2e:52:54:
47:f9:81:60:d6:c7:52:48:2e:46:a3:56:d6:c1:29:
1f:c7:dd:e4:10:48:35:64:d1:d5:d5:89:8e:c8:78:
4e:d7:81:15:d5:0f:b7:d9:4c:7a:15:66:4c:62:d9:
cf:4c:6e:44:6f:bd:ce:e6:82:8c:53:37:b4:cf:52:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FB:3D:30:73:5C:26:4A:BC:8D:08:AE:DB:80:44:24:B0:DF:17:95
X509v3 Authority Key Identifier:
keyid:CF:A1:31:66:13:0D:29:D5:AD:8A:60:7D:81:49:8D:A6:60:26:D0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6ExZhMNKdWtimB9gUmNpmAm0DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/46ed8d-3f2f-473d-bed5-0c66bd34019a/1/z6ExZhMNKdWtimB9gUmNpmAm0DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:51:f8:c0:17:e6:09:8b:53:7d:23:a0:ec:1c:31:7a:1b:f1:
c1:bb:7a:fa:68:76:26:3a:18:75:f5:3d:78:9e:63:c7:bd:e0:
33:72:c9:e4:43:3d:a0:20:71:b3:1f:06:33:e2:3c:71:17:f4:
a7:e8:6f:88:99:14:31:4d:cc:73:61:b2:82:0f:a0:7b:f2:fd:
b9:35:52:3b:10:e6:97:b4:d1:21:45:db:ba:1e:1d:43:51:22:
2e:bd:d4:01:77:dc:98:97:2b:40:d8:af:47:22:a4:27:2e:9a:
48:03:d8:0e:be:97:16:00:79:00:17:ac:5d:c6:be:1d:b9:3f:
5e:80:19:af:82:84:ed:63:4e:f2:7b:84:01:2e:89:a2:b7:07:
a0:d2:66:24:a7:4f:d9:39:b0:ca:60:1e:7e:82:a4:a5:a6:7b:
c1:3b:55:eb:68:13:2c:66:de:28:73:a0:66:0a:dc:d9:d4:00:
fb:da:54:99:31:97:a0:f9:bf:80:7f:cf:30:f4:86:2b:ca:0a:
57:cf:d7:a5:5d:7d:70:ae:90:d9:df:5d:51:be:89:c6:77:12:
02:f1:53:13:55:6d:57:e1:2a:7f:e2:80:37:d8:55:00:b4:c9:
9d:02:f0:f4:7d:bc:82:e1:be:cf:12:1b:75:d6:e3:a2:48:d7:
35:2c:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:34:06 2025 by rpki-client