Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
File: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft (raw, json)
Hash identifier: xoTCCtzuEK8DQCdunrf1DieQR3C+XtPzDy9ddcHpl+E=
Subject key identifier: 8D:7D:EE:4E:93:1E:EA:C4:BA:20:C3:9B:69:F8:0E:FF:7F:44:CD:A9
Authority key identifier: 67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
Certificate issuer: /CN=67e30c179cd42a8641583234501b18eff2515549
Certificate serial: 01967AFBA7DE782800C11FA5E5DF8BA7DB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
Manifest number: 0494
Signing time: Mon 28 Apr 2025 06:00:34 +0000
Manifest this update: Mon 28 Apr 2025 06:00:34 +0000
Manifest next update: Tue 29 Apr 2025 06:00:34 +0000
Files and hashes: 1: Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl (hash: OAq3FicJQGLTyZkotVcvt9/NN4Tlfdamg1xF9PH9VZo=)
2: lkL5vhYsimFlGwIzKJdrtVwcZdU.roa (hash: 2H7/6waax/BGz3Tq1LVCIZcHdShd+I6qEgMYBcT4Hpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:a7:de:78:28:00:c1:1f:a5:e5:df:8b:a7:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e30c179cd42a8641583234501b18eff2515549
Validity
Not Before: Apr 28 06:00:34 2025 GMT
Not After : Apr 29 06:00:34 2025 GMT
Subject: CN=8d7dee4e931eeac4ba20c39b69f80eff7f44cda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:33:a2:60:ce:ae:e9:e3:63:4e:93:24:8c:
f3:03:52:d5:26:6e:0b:b0:c2:95:71:64:e5:ca:c5:
01:83:8e:9c:28:7e:d7:71:78:ff:96:13:fd:c1:1e:
cb:04:69:ad:d1:5f:6f:5c:a2:b0:00:6c:af:08:f3:
66:48:81:08:b1:3b:42:43:f1:4b:ce:86:72:25:59:
d6:53:78:73:0d:f2:58:30:1c:15:1c:d5:17:90:45:
13:41:e9:e3:95:7f:95:09:8f:8f:1f:a5:d1:9f:2f:
e4:3d:ea:7e:6a:dd:23:ed:8c:4e:c6:38:85:60:6a:
13:4d:b5:c9:f1:fc:58:4e:aa:aa:22:d3:27:94:f4:
7e:7d:c8:8c:7a:95:76:86:46:93:18:21:f7:2a:d6:
d5:bf:43:5d:c1:2a:84:4a:8a:a7:49:a3:b7:79:9d:
8d:02:56:4b:fc:18:7c:e3:a5:7c:cc:aa:c2:43:02:
e7:57:fa:ad:b9:b5:81:cf:0a:42:45:c3:d8:c9:64:
03:ae:c8:ea:63:20:0f:2d:7a:bb:7d:23:9a:2f:a1:
62:b6:ca:ac:5a:be:43:2d:df:f3:1d:4a:53:20:58:
d3:93:b6:f5:82:32:ee:63:13:69:d4:a5:86:01:a1:
95:e3:d2:5f:01:2f:46:3b:22:7e:a4:e8:30:be:03:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:EE:4E:93:1E:EA:C4:BA:20:C3:9B:69:F8:0E:FF:7F:44:CD:A9
X509v3 Authority Key Identifier:
keyid:67:E3:0C:17:9C:D4:2A:86:41:58:32:34:50:1B:18:EF:F2:51:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b1a1f8-6a5d-4a16-9f4b-c563f734ab74/1/Z-MMF5zUKoZBWDI0UBsY7_JRVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ca:d9:86:85:ad:24:20:23:f4:87:d0:4c:46:8d:00:d0:8e:
47:5c:18:30:5d:f4:e6:4c:ea:d8:45:e2:93:48:f4:1c:78:52:
d1:2b:fb:7e:4e:4e:07:84:b1:6a:1d:1a:d0:48:da:b6:83:7d:
dd:89:51:16:0c:31:ec:c6:d5:48:b8:f7:b3:7b:25:e6:32:21:
cf:84:9c:52:bf:56:0c:0c:03:69:05:5a:8f:25:9c:27:07:05:
9c:c7:c3:d8:e3:b9:ba:be:8b:7b:aa:39:99:98:81:1c:96:e3:
b4:2e:1b:74:10:ec:b2:14:aa:64:0b:6f:a9:17:21:bd:44:22:
79:9a:2f:d7:20:3b:21:f8:da:40:61:4a:84:fb:9c:03:57:68:
15:18:da:63:2d:d3:72:d2:20:38:7d:da:34:63:e3:b6:9c:38:
b4:71:c2:38:da:be:d9:fc:0f:a4:c5:f7:17:55:4a:2e:5b:00:
4f:29:d0:1e:81:0d:84:f6:83:c9:2f:60:ed:5b:bb:be:f6:ed:
99:fd:94:02:ff:0e:9f:13:04:48:f0:fe:26:79:51:d4:f3:d3:
d2:31:fb:5c:71:c5:30:3e:a7:1c:06:fd:75:73:76:e2:7f:5b:
be:94:f4:3b:39:c5:4e:45:e4:c4:6e:4d:a2:4c:a8:0b:97:7e:
04:ea:43:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:11:31 2025 by rpki-client