Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
File: Z0phqKnJfAPN6-BfglWOUdv5CCE.mft (raw, json)
Hash identifier: BIYCTwTj4JY2s/Ob1txQWlTih7X4rBcikEvWkUXB6/Y=
Subject key identifier: BE:CE:9C:11:20:FB:07:15:CA:41:8E:2B:3C:FA:D6:09:36:83:2D:5F
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 01967AFB72C3D93417CD06B277EECCBE707D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 06:00:21 +0000
Manifest this update: Mon 28 Apr 2025 06:00:21 +0000
Manifest next update: Tue 29 Apr 2025 06:00:21 +0000
Files and hashes: 1: 1e1cgbN_Yaq9w5khFXqXWp5wB-4.roa (hash: zmQ3HER/wocZd/4CaU6ugdYYeJQWdIjr3eNuvlDrc/k=)
2: Z0phqKnJfAPN6-BfglWOUdv5CCE.crl (hash: +TC4OIfzkzZGoF6ks9ya3BkuxcddRh+WoEw2QQMbNO0=)
3: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (hash: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:72:c3:d9:34:17:cd:06:b2:77:ee:cc:be:70:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Apr 28 06:00:21 2025 GMT
Not After : Apr 29 06:00:21 2025 GMT
Subject: CN=bece9c1120fb0715ca418e2b3cfad60936832d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:00:48:68:57:6f:2d:7c:b7:25:c3:63:86:
b5:a3:cf:69:75:63:c0:e1:37:cb:16:25:bd:55:46:
9c:72:c9:12:ea:71:4e:22:7c:0c:85:b9:ce:96:bc:
76:10:d3:47:24:49:7e:54:2b:2a:cb:cb:6b:bf:86:
b9:62:a9:f9:12:b0:02:e5:0b:0f:da:bf:a7:1d:a0:
af:c7:50:f2:69:3f:84:08:fa:bc:f1:66:97:44:10:
f8:f4:db:7d:a4:fb:7d:db:42:90:8c:d4:39:1b:b7:
a5:57:06:ca:d9:d2:39:1d:87:9f:13:ef:e6:2f:23:
ad:2d:d1:9c:89:29:7c:f5:a2:18:0e:0c:0e:48:c9:
b3:4e:df:7d:e3:71:05:09:49:a6:c1:68:b2:6f:ee:
8b:ea:1d:52:6e:fd:c7:bb:94:5a:0a:47:ed:7e:2d:
04:13:fc:c8:4f:48:c9:bd:e1:30:3c:15:40:f2:b3:
71:5e:a7:da:9a:8a:f3:55:f4:30:82:6b:a4:55:62:
c3:df:86:9d:cc:ff:d4:90:c2:21:a7:70:50:71:ee:
0e:3e:d3:ca:8f:8c:4c:27:33:c3:bc:54:21:13:59:
dc:19:e3:45:0e:68:ac:d1:49:b2:4f:06:23:38:4f:
50:8d:e1:28:4f:52:df:e5:69:f7:4f:60:8a:e1:13:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:9C:11:20:FB:07:15:CA:41:8E:2B:3C:FA:D6:09:36:83:2D:5F
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:55:32:bf:47:63:44:a2:14:03:e4:cb:82:a9:36:dc:34:bf:
f2:35:a9:01:2a:6a:e6:06:d5:1c:cd:15:4c:35:63:0e:2e:6a:
7e:ec:2d:4a:62:a9:25:e0:2e:12:ec:fc:8f:cf:21:37:ea:7c:
00:68:f8:a1:93:b3:37:59:f1:af:3e:93:6c:0c:ef:24:a4:ff:
ce:e2:02:f2:46:27:6a:62:2e:9b:9d:a8:f2:35:c8:80:6b:aa:
01:00:17:bd:3a:33:76:3c:a7:bd:a2:60:c4:17:2f:66:a2:77:
1c:cf:b2:eb:da:d4:21:02:a6:0c:54:01:7b:c5:e6:0b:77:84:
15:c9:9a:93:3c:20:29:e7:1f:2a:7b:8e:e9:e9:bc:dd:33:e9:
ee:06:9c:ec:be:47:50:0e:50:d0:91:11:54:08:6a:58:4d:e4:
ac:7d:95:0a:40:99:7a:a2:c0:50:2b:0a:9d:fd:3f:44:e9:8c:
77:d3:f6:e8:ab:bf:de:5c:65:96:5e:5d:2c:94:81:49:8a:ef:
a2:6b:90:b1:85:db:76:73:89:f7:91:25:4d:c7:57:4c:5f:9d:
d1:6e:04:23:63:d0:74:48:3a:ef:2a:88:99:1b:bd:74:76:8d:
0c:50:a8:54:0d:bc:74:86:17:cc:e4:9e:b3:57:ba:5b:7f:60:
9e:05:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:24 2025 by rpki-client