Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
File: zhIoo6PQBlTUsRFzOHTjHYDAogw.mft (raw, json)
Hash identifier: kkCcdBs3D1TiBhk3KSdWcly5SY+CSQf0fhRDIPMn9lk=
Subject key identifier: 5C:B8:A6:8A:73:24:A0:54:3B:0A:A7:DD:86:94:97:A6:57:67:6A:E9
Authority key identifier: CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
Certificate issuer: /CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Certificate serial: 0196556E5E91BB599F7A4B60E17F52BC70F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
Manifest number: 73
Signing time: Sun 20 Apr 2025 23:00:18 +0000
Manifest this update: Sun 20 Apr 2025 23:00:18 +0000
Manifest next update: Mon 21 Apr 2025 23:00:18 +0000
Files and hashes: 1: 1-MrWjx41MLE2Craolgg-haNHa9U.roa (hash: tIwb/8MDPQoteToypid0+b6Y/WqY8vQG76gQarvTyPE=)
2: zhIoo6PQBlTUsRFzOHTjHYDAogw.crl (hash: ajkN2ggfb5k3H0w3PCRpiZqKYRtzk55dJUxNYWCG150=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:5e:91:bb:59:9f:7a:4b:60:e1:7f:52:bc:70:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce1228a3a3d00654d4b111733874e31d80c0a20c
Validity
Not Before: Apr 20 23:00:18 2025 GMT
Not After : Apr 21 23:00:18 2025 GMT
Subject: CN=5cb8a68a7324a0543b0aa7dd869497a657676ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:1e:6c:b8:dc:f6:b7:57:6a:99:ac:25:62:
0c:46:28:06:a1:1d:a9:d3:51:64:d8:77:e1:10:13:
70:d8:52:0f:cc:62:99:24:c8:e6:e8:f5:89:4e:cc:
a6:c1:59:99:20:90:0d:96:5d:6f:bf:c8:53:ae:0e:
8a:83:c3:aa:03:02:c8:c2:5f:9c:1f:23:fd:46:0c:
e7:ab:2b:84:dd:42:d1:b6:90:89:2e:47:a0:10:8f:
cd:2b:65:be:fd:49:84:5c:d3:b6:fa:6b:43:a2:29:
6f:bb:a2:e5:f9:9e:a0:6f:39:d4:0d:77:e3:64:db:
e0:d7:21:2e:15:cc:b1:61:c1:a3:3f:f5:24:20:3b:
bd:37:fe:5f:bf:d9:94:2d:6d:00:f9:33:cf:89:14:
b9:23:fd:5b:12:26:e3:e7:81:e2:b2:d5:76:9d:d9:
c8:0a:f5:69:10:87:84:b4:18:f1:5d:8a:20:8b:49:
7a:f0:45:f8:c2:79:cc:be:c2:19:4a:6a:21:af:14:
6f:08:bb:16:eb:fe:45:e1:59:0e:b2:6a:a3:1e:29:
f5:a9:99:a0:f5:01:ef:0b:67:a7:10:89:dd:e0:53:
db:b7:e7:bc:13:e3:b3:4b:63:cd:c7:76:1d:fc:53:
e6:0a:e1:08:c4:4c:85:b7:ac:b1:6b:51:dc:53:ed:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:A6:8A:73:24:A0:54:3B:0A:A7:DD:86:94:97:A6:57:67:6A:E9
X509v3 Authority Key Identifier:
keyid:CE:12:28:A3:A3:D0:06:54:D4:B1:11:73:38:74:E3:1D:80:C0:A2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zhIoo6PQBlTUsRFzOHTjHYDAogw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f9d7ba-a44b-462d-b333-fd7dbdf8e300/1/zhIoo6PQBlTUsRFzOHTjHYDAogw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fd:15:eb:b4:28:a8:39:db:76:4b:2d:5a:52:6a:70:01:59:
74:50:c5:2b:3e:e5:14:09:cc:8a:94:82:49:9e:72:0b:b5:fd:
e9:3e:99:ed:20:de:26:6e:c2:b0:26:50:25:8a:72:18:8a:6e:
9b:f3:4b:17:a8:f8:24:c1:2c:af:8a:1a:8b:09:ec:e5:23:e7:
20:59:1a:23:81:b7:c5:e2:c7:9f:24:0e:23:21:d0:7a:29:5f:
83:6c:16:70:3c:98:9d:a4:74:dd:3f:83:c7:df:e5:60:35:20:
73:60:a2:76:35:96:a2:29:1d:b6:12:7b:4d:1d:c5:e2:96:dc:
92:fa:c2:5a:71:bf:3c:c9:89:8f:be:d0:37:32:e9:a4:72:93:
be:57:1d:89:e2:38:5c:39:b8:6b:fe:b7:48:5d:a2:4a:0e:dc:
38:8d:34:ed:b0:52:70:c5:ec:a3:ef:03:b4:a7:05:45:b9:ad:
e0:ee:27:35:13:51:6d:8d:0b:ac:aa:4e:48:1a:c0:08:b1:53:
3c:c0:78:e1:6c:9d:6f:93:36:24:b5:9d:5c:9e:3b:62:e7:03:
cf:86:f7:73:7d:44:d1:a6:ae:00:84:2b:47:12:20:41:0b:8b:
f1:05:a5:52:89:4b:e5:c3:e3:f2:c4:fe:eb:41:9f:75:38:85:
cf:73:97:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:43 2025 by rpki-client