Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
File: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft (raw, json)
Hash identifier: MC+TGz7bszTNLJ7xV5g3nEG/lbKqvs0wOj1nAkkSYkM=
Subject key identifier: 40:84:D0:73:D6:91:0D:D2:10:9C:8F:EB:A4:FF:93:35:28:44:CB:B6
Authority key identifier: 67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
Certificate issuer: /CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Certificate serial: 0196A3F770B9C21AE320FA1E6C045242EF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
Manifest number: 1524
Signing time: Tue 06 May 2025 05:00:24 +0000
Manifest this update: Tue 06 May 2025 05:00:24 +0000
Manifest next update: Wed 07 May 2025 05:00:24 +0000
Files and hashes: 1: Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl (hash: QRiz0IFt63w+OR4r6lCyHfoCoGw2iNVB24Zj/ztP+vM=)
2: lAuSQuDFdUBMNl3lAy120twR4Nc.roa (hash: JpmAAAEWNaHqqF/Ty2UXmq2zX1BZOYcR9uwtzXs+1Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:70:b9:c2:1a:e3:20:fa:1e:6c:04:52:42:ef:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d34fc03002eaa7f36b2e7e635eda8c30c48284
Validity
Not Before: May 6 05:00:24 2025 GMT
Not After : May 7 05:00:24 2025 GMT
Subject: CN=4084d073d6910dd2109c8feba4ff93352844cbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:94:13:95:4e:95:e1:a7:69:92:5b:f9:86:
fc:be:16:dc:71:54:9e:6d:d3:dd:03:e9:8b:b8:d6:
0a:ff:e0:f9:d1:a9:a5:f3:10:74:1c:35:98:0c:d0:
71:2a:f8:d0:8a:3f:33:86:6f:72:be:6e:41:7c:d7:
71:93:a7:84:1b:0d:56:0c:fe:45:e0:f8:17:2d:f9:
50:7f:1f:8e:8d:27:28:79:ae:10:a0:40:06:34:e1:
9d:5b:5b:e5:32:f7:9c:b4:36:b5:62:bd:67:a2:e0:
ff:42:94:ce:9f:37:86:7e:b4:c9:8c:b3:f3:90:f2:
c3:9b:3b:3b:46:6f:e4:58:e7:d4:12:97:5b:49:19:
9e:cf:d9:d1:a1:b1:dd:99:95:20:ce:7c:ef:c4:2a:
70:ff:5b:bb:e5:a1:a0:4e:c7:dc:73:7b:4c:20:09:
2b:42:c8:e8:56:8e:85:8f:ba:d7:60:71:88:bb:42:
97:cb:c8:3b:99:4e:50:c4:c0:18:0f:6a:41:4c:f2:
84:f3:bd:00:70:1d:ba:23:d3:d9:1d:05:87:8f:72:
13:37:02:be:ad:c6:82:1b:55:b0:9e:97:40:d9:e3:
6f:1f:a4:45:fb:e3:b2:4b:54:6f:5c:75:fa:5c:2c:
ab:0d:94:70:4a:a3:6d:aa:de:f1:76:fe:8c:42:24:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:D0:73:D6:91:0D:D2:10:9C:8F:EB:A4:FF:93:35:28:44:CB:B6
X509v3 Authority Key Identifier:
keyid:67:D3:4F:C0:30:02:EA:A7:F3:6B:2E:7E:63:5E:DA:8C:30:C4:82:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/299d61-6b96-4054-98a3-dc42c7693df9/1/Z9NPwDAC6qfzay5-Y17ajDDEgoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:42:c1:fe:57:c7:fd:8c:3a:d2:6d:51:25:c1:d8:a7:3f:91:
73:97:2c:09:e8:b6:cb:a2:c2:04:59:e7:55:f8:eb:13:44:f7:
82:a2:4d:6b:34:12:23:69:ef:43:37:3f:cc:e3:06:6e:1f:aa:
40:18:c5:82:30:17:72:a7:71:89:24:1c:78:3c:55:8c:bf:8a:
79:72:5f:f1:c5:93:41:0d:61:3b:c9:88:33:e8:32:f6:d9:d9:
63:92:0c:0f:83:15:9e:eb:aa:61:53:ad:a9:7e:46:7c:a9:9e:
2e:54:6c:39:98:6a:b2:2d:c8:bd:20:d3:e7:53:29:88:c0:6a:
83:41:cb:38:55:64:6a:49:dd:1b:2b:42:6b:4a:e9:5d:35:07:
86:05:fc:57:3c:d5:ae:60:c6:a9:7e:cc:22:29:19:2f:43:a8:
a2:c8:f4:86:a2:fd:97:dc:46:26:bb:46:81:a5:b6:a4:27:2e:
0c:99:50:93:4b:04:93:93:93:ad:a1:19:ac:f2:34:5a:f7:f5:
3b:2f:11:ce:01:b3:87:23:9d:f9:00:19:9e:25:12:40:af:7b:
db:8e:ae:25:50:78:5f:c9:5e:cc:78:0b:5e:48:47:63:9e:c8:
a2:75:8e:8e:48:bb:ef:66:31:4b:1e:f0:f4:c1:6a:45:76:b1:
5e:a8:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:55:34 2025 by rpki-client