Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
File: Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft (raw, json)
Hash identifier: lVk62PKO3fvNt6bVrKSPPlS9Dls5jKTl5JEkBGf/7GA=
Subject key identifier: B4:68:43:D2:56:92:FB:5C:8A:FA:17:9D:53:4D:AE:A2:DC:04:0B:0C
Authority key identifier: 67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
Certificate issuer: /CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Certificate serial: 019675302FA4DEFBCD4B0DDBC80DD90D2B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 03:00:14 +0000
Manifest this update: Sun 27 Apr 2025 03:00:14 +0000
Manifest next update: Mon 28 Apr 2025 03:00:14 +0000
Files and hashes: 1: MnPqlVHc9fosDLrnBlP0E1NoB4o.roa (hash: mD2+/j4E1Q+n6Btlz8PZ33xc+5cKf1HzvljXUQ+mRBY=)
2: Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl (hash: 3VWt9YAuMJMr6iPrDbDAjluBO/+qhq0Z+1QVaKuOJYk=)
3: dAVWxqlNNVP6A8VBFL9RneZwmJI.roa (hash: 1lPQWQ8lwFJDBfgG4WjGvPhvOrJDEic6DuXOVo8+YHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:2f:a4:de:fb:cd:4b:0d:db:c8:0d:d9:0d:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677b43f538f0ae720e527b2a6c0b8a876d96c947
Validity
Not Before: Apr 27 03:00:14 2025 GMT
Not After : Apr 28 03:00:14 2025 GMT
Subject: CN=b46843d25692fb5c8afa179d534daea2dc040b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:97:95:cc:78:d4:98:66:90:f7:fe:93:1b:
f2:1c:60:aa:87:37:32:0a:b5:c2:3d:eb:ae:24:70:
22:7a:ea:67:16:c3:e8:a0:c5:ba:c3:11:c4:8f:2d:
2b:5c:e2:73:23:54:d4:13:23:db:a8:38:61:ac:a6:
32:60:13:50:f4:8e:e0:c2:1c:d3:4a:5d:59:63:be:
ec:39:a6:7b:a8:e9:41:37:5a:af:36:78:b6:61:87:
96:0d:d9:f2:e1:c8:96:76:2e:02:1f:bb:a0:69:18:
fa:dc:f9:87:56:0d:1c:22:94:0d:4f:c7:70:9f:ae:
3b:b2:a3:76:b2:ac:7d:24:a4:e4:29:98:13:5a:7c:
36:31:ca:f9:70:61:06:b7:e4:ee:24:a1:6f:fe:3c:
9c:f0:1b:61:27:50:58:44:3b:35:3b:5a:5b:78:98:
4d:04:3e:bc:a9:e2:e1:3a:cb:92:e8:8b:4b:b8:1d:
b6:ca:96:72:fd:73:69:8b:29:e8:7c:e6:ae:b3:e7:
b0:92:74:31:ec:08:ca:68:66:fa:0b:07:43:18:74:
05:7e:b6:c9:05:d3:7f:b9:19:31:2b:fe:f8:d2:e9:
6e:38:de:b6:0d:94:c7:89:5d:10:15:69:8a:e2:1c:
0d:c9:43:bd:45:74:39:b0:f3:06:69:ed:f3:8f:c2:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:43:D2:56:92:FB:5C:8A:FA:17:9D:53:4D:AE:A2:DC:04:0B:0C
X509v3 Authority Key Identifier:
keyid:67:7B:43:F5:38:F0:AE:72:0E:52:7B:2A:6C:0B:8A:87:6D:96:C9:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3tD9TjwrnIOUnsqbAuKh22WyUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5a6eee-a09a-44e1-88db-2878203a009d/1/Z3tD9TjwrnIOUnsqbAuKh22WyUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:42:cb:a7:55:d0:db:ec:82:eb:55:82:0a:cc:66:ce:1c:8c:
20:35:2f:35:8f:9f:8a:a3:64:44:f0:c4:4e:52:5d:09:d9:49:
c1:f2:a7:04:d4:f2:d8:9b:84:f5:be:cb:47:c7:dc:39:32:f1:
6f:a2:31:f4:ab:3e:d2:ee:b7:5a:15:6f:b8:04:83:77:29:9c:
30:2b:75:b2:60:be:54:81:e1:d1:ac:23:64:df:a4:a0:f2:bb:
02:49:be:17:38:6b:8a:c6:df:9e:03:c7:0b:13:14:28:c2:72:
31:da:b2:62:09:ab:ff:13:ee:22:ba:e9:c3:4f:da:ff:f2:3c:
70:ec:ec:69:90:b7:cb:cc:7b:41:12:af:e6:62:d5:50:bf:45:
5d:49:98:1a:ce:5d:fb:8b:32:3e:39:f9:c4:cb:8e:27:22:5d:
0c:17:30:e3:1f:8f:c5:cb:61:66:5d:f5:ed:bf:a2:e8:fd:0b:
23:3b:0a:b7:86:05:57:48:79:21:5e:c2:bd:58:d8:10:4a:20:
7c:47:23:1b:97:9e:ec:c1:c3:01:f0:8d:07:4c:68:5d:be:24:
30:27:b7:a8:3b:50:2a:1f:2d:a8:ee:7a:20:c8:4c:39:da:5e:
c4:7e:64:99:26:a6:a2:b4:0a:58:d5:45:84:44:00:fa:1e:53:
90:4a:0b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:06:04 2025 by rpki-client