Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
File: Z-ppirze4Q3KnWcDpW6HprNZv8w.mft (raw, json)
Hash identifier: 5e9BrW9aMSTiZNye5qFHQh6MKJF9A4pOL4GwJ6tdOf8=
Subject key identifier: 9F:15:9B:36:EE:53:8F:BF:96:B9:A2:9F:49:02:FA:33:D9:73:87:72
Authority key identifier: 67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
Certificate issuer: /CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Certificate serial: 0196760CAEAA08AF6C211C24201E2AA23C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
Manifest number: 1260
Signing time: Sun 27 Apr 2025 07:01:04 +0000
Manifest this update: Sun 27 Apr 2025 07:01:04 +0000
Manifest next update: Mon 28 Apr 2025 07:01:04 +0000
Files and hashes: 1: B8jfK0t3MW9G5Eyome7g6mcF2h8.roa (hash: XZoaAhHYzmiTEDCu8boCYE9STqMqeaTtF4k8PkA4OmI=)
2: Z-ppirze4Q3KnWcDpW6HprNZv8w.crl (hash: cI9vutrCre4Nau3wmtaAFFmq+WBze1dH9hdKYau55jo=)
3: oJ3u5HFBLrPnYIQUuDcUffWGRls.roa (hash: TptDcDy6fR/vh2oAnF8zAlj4ilPKnhA2fKGZE60wq70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:ae:aa:08:af:6c:21:1c:24:20:1e:2a:a2:3c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ea698abcdee10dca9d6703a56e87a6b359bfcc
Validity
Not Before: Apr 27 07:01:04 2025 GMT
Not After : Apr 28 07:01:04 2025 GMT
Subject: CN=9f159b36ee538fbf96b9a29f4902fa33d9738772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:61:8d:c2:81:4a:61:74:04:51:a5:e1:df:
c0:f3:7e:aa:33:81:60:8a:61:75:ba:65:9c:54:30:
f2:d2:56:85:f2:34:dd:c6:6c:b1:99:6a:26:e0:44:
b6:31:69:43:cd:28:92:ad:4f:a2:7e:29:c9:43:99:
c4:a0:69:42:64:39:1a:0e:92:3b:d3:78:52:5b:06:
66:c7:87:d9:54:c9:ee:06:01:a2:42:83:57:92:29:
ef:bf:f9:5d:96:4e:b5:73:1d:47:95:8c:59:02:84:
a1:cb:50:4e:19:a0:8f:9f:97:0a:e9:7a:86:4f:d5:
43:83:92:2d:9f:6b:3e:6d:09:26:3e:0b:4b:d1:91:
25:c0:fc:8b:29:ab:55:6f:d0:ad:bb:c0:24:1e:6e:
11:0f:2a:af:32:21:9e:08:cc:d6:08:d5:8f:81:bc:
08:8c:7a:3a:d7:d7:7c:cc:50:83:86:d7:71:5a:b2:
37:f0:7b:40:e2:8c:6a:99:df:a6:84:00:7f:0f:92:
d9:df:67:71:62:c5:93:5e:79:0c:a2:e0:00:24:5c:
cd:7f:cb:ab:cd:7e:19:b1:4d:78:9e:e0:ac:d1:f5:
c0:14:63:a6:bf:9e:7c:0f:eb:02:b7:cc:c5:b2:98:
98:31:0e:ca:ef:26:53:d2:d6:90:34:bc:35:2d:5d:
72:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:15:9B:36:EE:53:8F:BF:96:B9:A2:9F:49:02:FA:33:D9:73:87:72
X509v3 Authority Key Identifier:
keyid:67:EA:69:8A:BC:DE:E1:0D:CA:9D:67:03:A5:6E:87:A6:B3:59:BF:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-ppirze4Q3KnWcDpW6HprNZv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a322ba-c964-465b-8989-b32d974c210e/1/Z-ppirze4Q3KnWcDpW6HprNZv8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:14:d0:8d:7e:a0:38:35:b9:ba:09:e6:a1:6c:08:4e:8a:76:
c3:d7:7f:4d:17:c0:6a:f0:26:af:e8:a6:7f:13:ec:ff:cf:14:
c8:af:d0:dd:10:2c:7f:21:c0:71:22:a4:9d:c0:fb:f7:da:cb:
0e:05:8e:1b:2d:db:be:e7:e6:7f:e8:05:8d:5a:80:dd:31:59:
32:87:5f:88:ac:54:1a:b7:6c:b2:6f:e8:ef:33:9c:a2:4a:c0:
88:2e:1d:24:e3:30:de:8d:9a:23:85:96:b9:00:85:b5:6c:2c:
73:95:05:b6:85:29:51:8c:51:91:13:61:01:ba:42:4f:61:4d:
76:87:4a:4f:58:ac:68:b1:77:f2:e0:21:0e:77:d5:1f:17:bc:
8f:c1:f5:25:21:af:78:6a:ad:ab:a1:7e:54:d6:5c:fb:ba:f9:
b1:c3:68:31:e2:ed:d1:2a:eb:f0:a1:81:75:03:eb:5d:58:77:
af:4d:96:5f:13:fb:cd:f7:b3:35:a0:9f:73:cc:73:cf:7e:6b:
97:86:c0:af:64:3d:fb:e5:33:fe:f4:51:a0:2e:77:f7:48:aa:
05:74:ef:0e:0e:ce:ee:dc:4a:58:44:02:d8:83:27:6b:9c:eb:
83:22:16:64:5f:90:b9:44:20:99:e5:58:3e:16:16:22:12:70:
84:e5:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:22:17 2025 by rpki-client