Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json)
Hash identifier: XCJm6h8gAnKZeuSHDZhZ26ol0x4VJGu1rN/uP3jRxso=
Subject key identifier: 89:38:A1:59:D8:60:0F:56:7F:BD:01:A2:A2:01:73:32:76:3D:69:E7
Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Certificate serial: 0196808F995F7C3D54EDF7FAF89F370040F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
Manifest number: 0222
Signing time: Tue 29 Apr 2025 08:00:16 +0000
Manifest this update: Tue 29 Apr 2025 08:00:16 +0000
Manifest next update: Wed 30 Apr 2025 08:00:16 +0000
Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: K3KdF6foRj6BewAY5gnKyXaYqLJepYGqrP3PpyjEWDg=)
2: mVbUdqr9oEcPiZysELwHzge0y8g.roa (hash: Y+aQue+b7f/IHLBZfZa5SygpKDtfepbI9i9idjcQ+mQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:99:5f:7c:3d:54:ed:f7:fa:f8:9f:37:00:40:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa
Validity
Not Before: Apr 29 08:00:16 2025 GMT
Not After : Apr 30 08:00:16 2025 GMT
Subject: CN=8938a159d8600f567fbd01a2a2017332763d69e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:98:9d:15:5a:ed:d3:8a:dc:c0:f6:43:f4:5a:
a0:2a:3c:78:52:fb:31:3e:3f:c4:76:a4:21:22:d8:
3c:93:67:e8:77:f7:40:de:a1:4c:60:58:b9:c9:3f:
22:f2:b0:92:e4:f4:c6:ea:63:72:44:93:36:69:6f:
63:ee:2a:ef:85:a5:32:5a:1c:d7:6f:a4:06:af:0b:
c3:12:8b:af:bf:e8:67:f0:01:7f:fc:a3:09:2c:a7:
dc:75:1b:72:a3:05:dd:c8:e0:0a:57:d4:e5:d0:49:
1d:20:6f:58:a1:a0:1a:94:2b:fa:c4:4b:7b:f0:8a:
26:3b:ba:9b:16:3f:35:63:4c:7e:f6:46:50:25:21:
98:c4:44:a3:97:5b:11:72:86:ea:32:f0:a5:bd:e9:
18:6e:5d:8e:d7:f4:44:d3:06:4c:9d:54:1d:c3:b5:
f9:9f:12:d9:3f:dd:e6:0c:36:ec:51:1b:19:58:f4:
7c:1c:28:0d:1e:60:63:50:cb:6d:ea:e7:7e:8b:b3:
61:84:75:00:7d:b1:32:65:df:02:55:2b:d7:cd:12:
4c:93:b0:cd:e1:cd:92:ff:86:0b:c7:9d:60:57:97:
63:d2:2e:46:02:85:74:bf:ea:8a:4b:e5:3e:4e:69:
4b:8e:78:38:76:b8:98:be:69:cc:7c:1e:eb:16:25:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:38:A1:59:D8:60:0F:56:7F:BD:01:A2:A2:01:73:32:76:3D:69:E7
X509v3 Authority Key Identifier:
keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:90:c8:81:3a:8c:d1:d3:ff:2d:ad:6f:22:b9:54:22:8d:95:
b2:26:20:47:03:49:76:f4:89:2b:7d:5c:0e:d6:1b:87:bb:29:
26:a3:72:b1:a0:09:dd:85:63:92:46:66:97:85:fd:89:72:3d:
46:a3:df:ba:8a:e3:9a:53:19:74:0d:cf:36:cf:d6:71:84:a7:
7c:4c:8f:7d:d4:21:4b:06:e9:02:c4:b2:3a:7f:64:01:93:bf:
b8:f7:b2:75:e8:dc:24:67:7f:d5:07:d3:70:27:45:11:9f:cd:
d1:7b:d1:1c:3e:34:84:21:0e:32:42:2e:e8:dd:b0:3f:cc:c1:
77:f0:45:e5:d4:55:ec:67:83:26:f3:96:55:39:21:4f:bb:1d:
4c:80:41:2c:db:93:fe:4c:2f:01:90:fa:65:a8:73:0a:09:79:
36:96:d0:70:91:9d:1c:f3:3e:f8:13:48:05:c6:77:5a:c7:6f:
62:ec:38:b0:2e:b0:14:ce:6f:dc:4c:0f:4c:7c:ff:3b:62:51:
d0:38:a6:fc:7d:9d:f3:79:9a:6f:01:2a:5c:88:39:74:3e:bd:
b4:de:8b:df:05:a5:bd:f1:8e:c4:4f:78:7f:a3:38:4f:d1:69:
44:5c:e4:73:d3:5b:e1:e9:bf:76:08:20:36:06:11:9b:af:2d:
ce:fb:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:11:27 2025 by rpki-client