Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
File: _Zrjdhfz--SIgLIw_nx84PDcQcc.mft (raw, json)
Hash identifier: +LtNxhndZkT3khfwpUSYQ5qd5BZYEsDKXTsVmd5bEzo=
Subject key identifier: D4:4A:55:66:8E:C5:60:04:91:4A:7A:A2:A6:39:65:DE:58:3C:A5:B4
Authority key identifier: FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
Certificate issuer: /CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Certificate serial: 01965538C2619317ED7536E015EB8950461C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
Manifest number: 016C
Signing time: Sun 20 Apr 2025 22:01:45 +0000
Manifest this update: Sun 20 Apr 2025 22:01:45 +0000
Manifest next update: Mon 21 Apr 2025 22:01:45 +0000
Files and hashes: 1: 9n6_QxUWNBj6pf-W1Docqojo_24.roa (hash: W63L5HqQHsa90UnMU3ePl9vAesD8fNZQ8F6zbeRpPKY=)
2: _Zrjdhfz--SIgLIw_nx84PDcQcc.crl (hash: Z9ddSkfYjb4DG7i5IrvI4cBFMCxNDaHkOVqBK92Hl6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:c2:61:93:17:ed:75:36:e0:15:eb:89:50:46:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd9ae37617f3fbe48880b230fe7c7ce0f0dc41c7
Validity
Not Before: Apr 20 22:01:45 2025 GMT
Not After : Apr 21 22:01:45 2025 GMT
Subject: CN=d44a55668ec56004914a7aa2a63965de583ca5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:08:8f:58:56:1f:a6:d4:70:93:f1:5e:4a:
84:2d:c3:85:fd:67:1b:43:7f:e4:ea:6f:b8:08:16:
04:37:f0:15:a8:db:33:17:e8:f4:a4:d9:2c:b5:8f:
c6:8f:d2:e5:af:cc:72:ba:c0:4d:06:4d:98:72:bf:
0c:61:48:d9:1a:8f:71:14:7d:9a:85:1c:5f:3d:2e:
78:ca:30:f8:34:cf:49:ac:6d:0c:70:68:5e:8d:65:
09:ca:87:5c:9a:8a:54:36:8c:b7:ef:6e:c6:34:e6:
19:0d:17:5b:9c:a6:88:15:2d:e8:31:94:a4:a7:da:
6b:7a:52:b2:e1:58:8f:f6:11:f7:b1:6d:be:b3:0b:
25:1a:41:e3:85:e2:6d:89:96:44:9d:9f:12:97:42:
f2:47:35:d1:c3:7c:79:5e:a0:8a:37:23:8d:91:6d:
57:db:3e:ee:ec:33:5b:ae:d1:c5:45:66:91:fd:fd:
aa:a6:32:b7:4a:8a:1e:f4:4c:8f:d6:47:ef:40:dd:
b3:87:7c:58:50:1a:15:0a:e2:3a:10:70:f6:60:68:
34:57:f6:73:35:63:ec:7e:5e:c8:fa:6f:86:87:ba:
6d:6e:3e:91:5d:9a:10:92:97:a7:5a:5e:1a:fd:a1:
0d:fb:79:cc:51:70:f2:45:ad:f1:be:95:52:b0:62:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:55:66:8E:C5:60:04:91:4A:7A:A2:A6:39:65:DE:58:3C:A5:B4
X509v3 Authority Key Identifier:
keyid:FD:9A:E3:76:17:F3:FB:E4:88:80:B2:30:FE:7C:7C:E0:F0:DC:41:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Zrjdhfz--SIgLIw_nx84PDcQcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c8f41d-ea73-4a03-ba72-0f50773b0ede/1/_Zrjdhfz--SIgLIw_nx84PDcQcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:9d:b7:d2:ec:d4:5c:d6:49:4e:38:03:ea:9f:f5:dd:ee:1a:
cc:c9:76:16:e0:ff:ab:c7:39:f4:11:04:b2:66:06:7d:30:dd:
59:6e:33:c3:31:15:e3:6a:69:8b:a6:93:40:f6:de:31:ee:a1:
bd:ae:84:2e:16:76:41:8e:d8:eb:2d:6a:01:57:9a:5e:3b:6f:
60:63:c2:a9:0a:16:83:4d:b1:32:24:65:20:84:93:23:e9:14:
30:d9:da:64:8d:43:35:e0:76:04:59:17:c4:da:20:fc:00:20:
db:7a:e3:19:92:b9:52:ae:2b:93:51:34:ec:08:13:36:4d:10:
d6:63:4f:84:47:e9:c7:0e:59:41:05:91:cf:3d:63:0c:ed:a6:
55:ca:30:b9:4e:29:85:03:eb:7b:e1:40:a3:4e:f7:f0:57:38:
30:b4:06:73:30:a9:b2:d2:15:ba:a7:61:40:60:7e:2e:ce:c1:
dc:a8:11:b4:1c:26:64:dc:9b:73:92:5e:80:bf:38:77:60:28:
94:57:d5:9e:08:d1:eb:e1:a3:4c:9c:bf:eb:5e:cb:59:ab:b2:
c7:8e:f5:dd:49:b1:0b:f8:40:64:a8:5f:ee:59:ba:38:db:27:
6c:a6:a3:06:8b:a1:c4:b7:7e:01:80:9f:b5:1f:12:31:28:78:
5d:97:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:40:38 2025 by rpki-client