Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
File: Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft (raw, json)
Hash identifier: cTDZmnTyG2CIHplloN8pCas3E55ziBvHFxHKSJko+tM=
Subject key identifier: A9:3B:FA:EE:BF:23:7D:E5:53:2B:02:DF:A5:54:5A:C9:46:19:50:45
Authority key identifier: 67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
Certificate issuer: /CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Certificate serial: 0196797B00D6EE16F5437BC0F8D6CD0B20A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
Manifest number: 1524
Signing time: Sun 27 Apr 2025 23:00:26 +0000
Manifest this update: Sun 27 Apr 2025 23:00:26 +0000
Manifest next update: Mon 28 Apr 2025 23:00:26 +0000
Files and hashes: 1: Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl (hash: 7Rn1Z6102kcrZkrrsizXXdlHwFN8xBHy4EDl76bUnKg=)
2: nTDhf9VvaUWtGXfSXd6ZXiNxw-A.roa (hash: TEsr7FEvfPnHZkOwTNPtPOQvAkTL24+b73nNoo3Z3WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:00:d6:ee:16:f5:43:7b:c0:f8:d6:cd:0b:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6749aeda8a8ace7ec596fc187a2fe10582a6704d
Validity
Not Before: Apr 27 23:00:26 2025 GMT
Not After : Apr 28 23:00:26 2025 GMT
Subject: CN=a93bfaeebf237de5532b02dfa5545ac946195045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:18:f1:76:fa:4e:74:db:04:59:4b:81:8d:
0e:3b:c9:d8:0e:08:bc:45:bc:70:ac:8a:89:a5:14:
74:50:e7:85:81:f8:46:9d:0d:b0:69:52:f4:3d:9e:
74:8d:64:b9:d5:5d:cf:15:79:97:81:b9:aa:f3:2e:
b2:a4:55:af:f3:71:d7:0f:72:7b:2c:2e:28:d6:9c:
7d:ad:18:50:78:bf:3b:b2:a8:c5:44:8d:e7:5e:b8:
74:cb:3a:47:33:40:f1:7b:86:ec:cc:f3:ea:62:40:
2a:85:a3:44:71:af:ea:47:78:15:60:d5:5f:00:c9:
1a:dd:e0:01:8a:71:fe:09:3d:eb:58:28:fb:21:44:
1f:30:5e:c8:9c:59:e5:d4:4f:5b:b5:32:db:df:0c:
50:eb:9e:88:d2:94:52:34:ca:3b:b0:02:0a:fa:f4:
07:33:50:27:9d:b7:26:b1:c7:55:7d:24:29:7e:bf:
1b:2e:84:25:9c:e0:12:ca:05:f9:82:8a:11:de:36:
c7:42:36:8b:a9:46:cd:52:1d:a0:77:71:c6:75:4d:
86:ce:30:68:6c:64:5b:93:b2:98:1c:ee:34:4f:90:
31:60:1f:bd:12:64:32:bf:4f:d8:98:64:12:cb:c0:
47:25:bd:04:1a:c9:f0:af:8b:55:75:89:0c:4b:75:
e6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3B:FA:EE:BF:23:7D:E5:53:2B:02:DF:A5:54:5A:C9:46:19:50:45
X509v3 Authority Key Identifier:
keyid:67:49:AE:DA:8A:8A:CE:7E:C5:96:FC:18:7A:2F:E1:05:82:A6:70:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mu2oqKzn7FlvwYei_hBYKmcE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2d36ab-dee5-469d-9216-6663faba1dd0/1/Z0mu2oqKzn7FlvwYei_hBYKmcE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4a:08:a5:57:67:a0:09:90:47:93:d9:40:e5:d5:27:3d:01:
d1:b4:e3:20:94:95:a0:cc:9e:d3:dc:bd:79:51:0d:a0:03:ef:
75:c4:52:a8:19:58:45:e1:c7:fc:8d:69:b3:a1:f5:7e:14:d4:
48:1e:a9:2b:b4:8d:80:bb:ce:c8:3c:9e:d3:25:c0:41:19:3d:
49:27:89:9e:c4:d5:ad:19:e4:58:97:3a:50:09:f6:ef:d0:76:
ac:ee:f8:05:af:86:e7:42:b9:b7:30:6b:9a:6b:a8:77:cf:4a:
78:95:ac:41:0e:7e:90:ec:37:54:9b:e6:87:10:1a:a6:d2:73:
50:1f:ae:6a:e1:58:c4:a5:7d:bf:6d:81:5b:dc:a7:bc:5c:fe:
52:f1:be:f3:ae:a9:67:cb:7a:60:07:74:81:5c:78:94:55:18:
67:43:93:d5:af:03:b5:a0:a8:66:10:dc:0b:45:57:04:1d:f4:
61:6b:e8:24:96:36:08:2a:b7:da:10:6f:35:70:6e:34:1b:d8:
d1:9b:47:77:7f:cf:d4:af:98:d0:5c:4d:3d:cb:73:2d:20:5f:
7a:42:05:7d:f4:9f:4e:a4:b9:dc:f3:96:d9:e1:6f:8c:36:30:
f9:7c:0c:c6:0f:35:bf:a0:95:2e:eb:06:2f:d8:da:c5:22:e2:
97:3c:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:24 2025 by rpki-client