Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json)
Hash identifier: t0lBpjTLF/uO04JCOEr3ZogDfIBAk+c9ObjYsIma+Tc=
Subject key identifier: BA:39:3A:8C:4D:FA:13:59:0F:7D:1B:53:91:E1:08:39:7F:64:7A:B7
Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Certificate serial: 0196B5C78439DC8E98913786A576EA86FFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
Manifest number: 049E
Signing time: Fri 09 May 2025 16:01:13 +0000
Manifest this update: Fri 09 May 2025 16:01:13 +0000
Manifest next update: Sat 10 May 2025 16:01:13 +0000
Files and hashes: 1: PYhNNzuk9SlKthV_33iOWNORmCM.roa (hash: 8PTIGwrPsJPGQk8kIZHLm7NCCrY0xp7lDA1kLSNWPlg=)
2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: RsUaEZJCMm0ZpMAANJUy9KfPb4V5DgBI/rieXRwKM+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:84:39:dc:8e:98:91:37:86:a5:76:ea:86:ff:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b
Validity
Not Before: May 9 16:01:13 2025 GMT
Not After : May 10 16:01:13 2025 GMT
Subject: CN=ba393a8c4dfa13590f7d1b5391e108397f647ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:2d:1b:06:26:aa:50:27:6c:8b:3e:6f:f1:
3f:c9:45:92:26:96:d5:fb:96:88:e1:48:37:33:63:
98:ed:4e:5e:4a:c0:64:1f:d9:6d:56:8f:2b:8d:4c:
4f:75:a3:cd:16:35:58:15:bb:b5:b4:23:e2:fe:5d:
b2:85:ee:ec:2f:56:47:50:76:c8:29:ca:19:c5:f3:
7b:88:d9:50:31:9b:d7:47:a2:96:d8:99:b7:83:1c:
02:35:c9:e6:b9:ff:ee:71:03:5f:66:65:56:fc:43:
97:fd:31:1d:b4:4d:5e:7d:ae:9e:f3:28:ee:76:96:
95:ca:41:92:4c:3c:a0:af:94:1c:67:ea:06:29:bb:
78:4f:1c:ba:2d:be:7c:aa:67:e1:81:32:11:77:37:
7a:6b:0c:08:bb:2c:6a:f8:12:b5:af:bd:61:cb:23:
1e:28:95:e5:c6:64:8a:59:aa:6d:47:7d:69:4b:3c:
74:b0:f4:7b:54:50:a7:0e:2d:78:9e:3f:6f:67:2e:
7a:a4:22:2e:6e:e5:c7:95:cb:4e:d7:e4:be:dc:1d:
4d:4a:42:dc:2e:7f:e1:fe:4d:f2:9d:69:21:3f:c3:
d3:5e:ca:53:97:03:6e:81:ce:2a:59:ad:0f:2f:8f:
48:aa:a3:f6:2b:62:1f:25:74:d1:eb:93:90:68:b9:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:3A:8C:4D:FA:13:59:0F:7D:1B:53:91:E1:08:39:7F:64:7A:B7
X509v3 Authority Key Identifier:
keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d7:c2:8c:75:a3:4b:cb:8c:4d:0b:f2:c7:c5:6e:97:8e:18:
7c:f9:74:2a:a9:69:6b:e6:de:24:01:d1:29:db:ec:c1:91:1e:
90:18:27:c8:23:07:b0:49:5c:8c:d5:b6:1a:32:92:46:4a:4f:
82:4f:2d:3a:1d:7f:93:f9:b2:b9:cd:43:97:2e:ac:69:8e:31:
18:40:d5:82:f3:a2:c9:33:57:cc:6f:6d:47:9f:1f:ee:e3:10:
1f:0c:50:e8:f4:68:eb:4f:5a:46:17:45:37:cf:c7:33:71:bf:
77:be:3b:a1:aa:97:2a:90:99:2d:a6:46:6a:6a:bf:47:22:1a:
38:10:e0:e1:79:c2:35:89:5d:7f:d7:93:a7:e3:ab:7f:12:1f:
32:9e:9e:4f:4e:0b:48:95:8a:58:03:dd:60:be:68:73:7a:9d:
01:8c:f6:88:c9:53:00:0c:fe:b1:47:b1:0c:0b:b2:f5:c6:18:
6a:f5:48:9b:0c:6b:fd:e0:3e:be:1e:bd:29:86:3e:20:d7:47:
1b:a6:f4:49:29:87:09:e1:e3:1f:6c:b1:86:56:68:c2:2a:2d:
7d:be:e0:60:36:02:18:0e:9a:f2:7f:6b:f4:e3:c8:94:00:3b:
ec:b0:33:cc:61:f4:d5:23:ca:f6:91:70:1d:f9:76:64:4e:72:
d2:a1:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:11:10 2025 by rpki-client