Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: y88Ksp9wQ1HTj8HlbSRZ9CE05JM0uZ5+xP8F/SVe4Xc=
Subject key identifier: 39:D7:AA:71:79:31:98:18:BB:D7:D7:F6:8F:6D:3C:05:67:E4:F7:9E
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 01965425757141C09BF4973B021E39123F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 0CB2
Signing time: Sun 20 Apr 2025 17:01:03 +0000
Manifest this update: Sun 20 Apr 2025 17:01:03 +0000
Manifest next update: Mon 21 Apr 2025 17:01:03 +0000
Files and hashes: 1: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (hash: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: 2mMsoulk/fSRlPyCmP4anYq+7UvyfUEGtqgmNrTY6ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:75:71:41:c0:9b:f4:97:3b:02:1e:39:12:3f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Apr 20 17:01:03 2025 GMT
Not After : Apr 21 17:01:03 2025 GMT
Subject: CN=39d7aa7179319818bbd7d7f68f6d3c0567e4f79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:41:5c:9e:3f:26:1b:b6:da:47:cc:95:dc:
fc:7c:cb:b7:f7:48:f8:35:be:dc:ac:47:68:6b:50:
31:3c:9a:1a:e5:8c:e6:db:55:09:5a:56:fe:bd:7c:
5a:67:a0:21:77:32:8a:a4:c8:3f:ff:4c:73:0e:8c:
ae:7a:d1:97:76:0c:68:ba:53:bd:d5:dd:1d:04:66:
00:ee:58:09:24:13:e2:fc:7b:f5:7f:62:71:49:d9:
59:b0:ff:d6:f9:b7:49:4f:62:02:67:f3:0b:ab:56:
70:34:14:14:48:67:b5:e8:13:ba:b1:93:6a:d6:dc:
5f:3c:c2:16:ac:eb:a1:5a:03:a7:d2:f9:18:17:c7:
33:90:3e:80:7f:d3:4b:a1:57:eb:6b:d4:1e:e1:63:
f0:ac:c7:f5:9e:c8:32:a2:f9:53:df:23:5c:08:6c:
54:89:07:35:09:d1:c3:e0:46:4d:69:62:59:3d:1d:
fe:06:b9:87:2f:b3:ef:f7:da:d7:80:a9:02:02:46:
e8:cd:e4:ac:90:99:8a:ee:96:aa:78:23:dd:b1:2a:
3f:9f:1f:d3:4b:af:fe:6f:d9:73:e9:66:44:a9:19:
cb:a6:56:8c:e4:e3:d0:26:34:69:99:e7:e5:5d:cd:
97:2d:ee:8f:6a:52:78:0d:30:4d:9f:1a:25:f1:d7:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:AA:71:79:31:98:18:BB:D7:D7:F6:8F:6D:3C:05:67:E4:F7:9E
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6b:87:c4:ce:66:36:6d:60:7d:7f:03:b7:d9:1c:4c:86:98:
08:20:99:9c:9b:f7:15:21:7c:c4:53:61:cc:2f:a5:f6:a2:f8:
ec:8b:20:83:7a:74:df:6e:11:26:e5:ee:8b:72:6c:fc:c6:49:
aa:b3:fd:b7:80:bd:95:d9:1d:97:9f:0b:6f:d3:55:fd:db:a7:
0b:63:b0:8e:e1:ef:39:9b:e9:00:47:b9:d7:dc:a2:e1:99:56:
b8:67:c5:d2:c0:ce:5f:14:89:99:94:7b:02:24:21:8f:2e:64:
00:13:8c:ad:d9:3c:87:7b:39:b8:ba:56:17:65:cb:5f:c8:19:
05:cd:ca:f7:b6:ec:0d:76:9a:33:c8:ba:8a:ee:94:be:b1:86:
c4:20:20:e5:f7:ba:86:a1:1c:3c:91:55:58:fe:c2:44:dc:3e:
dd:e3:cd:1b:d0:03:51:90:df:d8:b2:c1:c9:7a:69:c4:d7:94:
59:19:5c:1c:06:12:0a:71:5e:c1:42:f4:c4:c9:62:0b:5a:21:
ca:19:d1:e8:f0:93:d5:71:c3:39:4a:0c:ca:08:ff:fb:98:74:
68:5d:fc:ee:0e:15:6c:a0:45:20:55:71:c4:6a:fa:62:b2:23:
10:32:69:e5:7e:ab:b4:c0:ac:9d:b9:4b:59:11:b4:15:bc:fd:
83:d9:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:02 2025 by rpki-client