Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json)
Hash identifier: 42gB0nZG3HKX4mNfeOxZue0a1N296Ivolrvlz9B1Dco=
Subject key identifier: 4F:80:4A:A0:42:B3:F9:CB:5C:82:18:54:B1:1C:51:62:70:FC:49:76
Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13
Certificate serial: 0196778CBD849DEA32B7DF3CD8029A361B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
Manifest number: 131F
Signing time: Sun 27 Apr 2025 14:00:34 +0000
Manifest this update: Sun 27 Apr 2025 14:00:34 +0000
Manifest next update: Mon 28 Apr 2025 14:00:34 +0000
Files and hashes: 1: SJp3f39U8JpmGyOGPYf4ey38gKw.roa (hash: AzJPuHNFE77wKcqOaeYwNfNn2l81OV83K0EY7MEvPyA=)
2: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: E96U1c043IkHbf0F1wHdRksZQGMQk25XOQ6sr2N+Uqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:8c:bd:84:9d:ea:32:b7:df:3c:d8:02:9a:36:1b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13
Validity
Not Before: Apr 27 14:00:34 2025 GMT
Not After : Apr 28 14:00:34 2025 GMT
Subject: CN=4f804aa042b3f9cb5c821854b11c516270fc4976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:de:bf:a9:e3:d0:4e:84:27:36:5c:1f:b4:
81:a1:72:43:d0:2d:d1:4e:01:f1:d0:91:96:1d:35:
f5:7f:52:f8:7d:4e:b5:0c:78:9d:c5:a4:ee:ea:5f:
1c:f1:0b:07:85:03:7d:fb:33:a4:af:59:d4:dd:d5:
41:a2:ea:67:0b:a7:eb:ad:61:22:1c:bc:f4:53:78:
25:85:be:fd:a0:80:60:69:a3:f4:6d:e2:ff:d4:bc:
01:9e:34:41:cc:54:86:90:11:96:f4:2b:76:dc:39:
43:d1:c5:c6:c0:e5:19:b1:36:55:56:d1:b7:43:2e:
d8:cb:be:fb:8e:df:a3:05:5c:c0:6a:33:66:56:e2:
2d:dd:27:e7:da:99:94:e2:7d:85:6b:38:92:6e:6b:
47:e0:f2:97:d9:77:68:a2:48:91:e0:1b:a1:8f:98:
3c:9c:74:81:f9:a0:91:5b:92:9c:32:fe:53:86:b3:
2d:bd:c9:bf:b6:4b:33:f9:cc:61:4a:0c:d2:f2:a8:
6c:25:54:7b:ed:24:c0:16:5a:ed:bc:f9:ac:ca:db:
f3:51:b4:1d:e2:0b:d2:d4:5a:9c:84:30:fd:25:00:
8a:b1:55:e0:4f:cf:76:2c:4d:ed:49:f2:53:04:df:
89:51:1e:24:c0:85:af:03:34:88:7d:01:d8:03:55:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:80:4A:A0:42:B3:F9:CB:5C:82:18:54:B1:1C:51:62:70:FC:49:76
X509v3 Authority Key Identifier:
keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1e:b8:c8:00:ea:3e:e5:49:40:34:2d:b0:10:d6:b1:74:c0:
50:7f:fa:12:05:7b:8b:27:2b:db:2c:c6:96:39:eb:05:2b:69:
ee:6d:61:cb:86:c1:be:e4:fa:b2:09:a8:b1:cf:c7:dc:9e:58:
9e:90:de:82:25:f6:82:29:1d:9b:43:c0:c1:80:58:75:11:c8:
16:a3:46:a2:fa:91:d4:e6:8e:21:e8:44:ad:bc:2d:99:06:51:
07:32:2a:c8:75:4e:b4:2a:d0:f2:25:91:67:06:2f:1b:bf:7c:
7e:f9:63:d2:80:ec:b1:b2:22:d0:cb:be:cb:9f:bb:4a:ca:da:
1f:93:40:b7:f2:b3:06:d4:a6:f7:5a:cd:d1:62:dd:74:93:28:
47:d1:bc:eb:ce:3b:a3:44:d9:15:48:51:31:d9:18:1b:eb:af:
df:8d:74:22:e7:76:3e:68:f4:c9:fa:46:28:43:46:89:84:2e:
9d:d4:17:f1:c2:5b:b0:74:2a:d7:8e:ed:5b:7e:82:b9:79:56:
3b:ac:94:f6:14:dc:19:a7:91:bf:bd:3d:f5:97:ff:11:07:3c:
d4:ec:b8:80:0c:fd:08:ee:38:9e:e7:f9:c2:25:05:01:db:a0:
f7:90:92:0f:68:6b:72:26:4d:31:17:9a:55:c5:bf:22:8a:f6:
93:d0:80:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:54 2025 by rpki-client