Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
File: zzaFkhY6Sa04_60dQZp3UrMz2nc.mft (raw, json)
Hash identifier: ytHzc2pNwKZfhg0PWKsQKYOGURv5c3wRAIZp/qSPlSY=
Subject key identifier: 97:2F:59:08:DB:0E:D8:AC:4E:AE:C4:39:78:E9:44:B6:9E:9C:9F:26
Authority key identifier: CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
Certificate issuer: /CN=cf368592163a49ad38ffad1d419a7752b333da77
Certificate serial: 019654930D37D6F2369F1084056EF24E81D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
Manifest number: 0833
Signing time: Sun 20 Apr 2025 19:00:45 +0000
Manifest this update: Sun 20 Apr 2025 19:00:45 +0000
Manifest next update: Mon 21 Apr 2025 19:00:45 +0000
Files and hashes: 1: slxq6aORhvR8ox82bJzLl-kYQrU.roa (hash: ZHj8y1bs7bZjE7NP/f98Eczzt5W05lwyMtCauXhXnlo=)
2: zzaFkhY6Sa04_60dQZp3UrMz2nc.crl (hash: yjfoaD+LsgMhLLeNrTOp/wcbRtSWmeOO2jj6bxmvxto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:0d:37:d6:f2:36:9f:10:84:05:6e:f2:4e:81:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf368592163a49ad38ffad1d419a7752b333da77
Validity
Not Before: Apr 20 19:00:45 2025 GMT
Not After : Apr 21 19:00:45 2025 GMT
Subject: CN=972f5908db0ed8ac4eaec43978e944b69e9c9f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:16:fe:15:65:06:79:b9:71:35:e5:22:a4:
20:e4:10:f0:d8:3b:f0:da:65:0f:64:f0:f1:02:7f:
f1:af:a6:eb:01:69:88:76:cf:96:8a:78:48:8a:45:
96:5a:1d:f2:b6:26:03:90:02:d3:02:97:6f:dd:41:
fa:d3:e3:63:2f:94:60:e8:41:8d:d0:10:8a:d0:88:
c4:2d:b0:8c:8f:93:ca:82:42:bf:ff:43:20:49:76:
b2:de:fa:99:c0:8f:03:20:8d:d1:9f:1f:24:4e:d8:
f0:2d:64:9d:dc:28:30:17:d8:d6:bf:27:ab:55:fb:
9d:ec:8a:5f:54:49:bf:cf:b1:ad:6b:e4:a6:54:0f:
82:a6:ad:73:a4:23:7e:01:3d:3d:4e:52:7c:df:58:
6d:b2:b9:3b:ae:01:df:47:63:90:dd:c2:13:b3:8f:
a7:98:02:5e:25:53:ed:71:60:de:df:65:d6:36:92:
83:f2:e3:d5:04:bf:78:5c:cd:a6:56:e7:e9:52:6a:
d4:f5:7f:d0:ef:eb:32:cb:1a:08:08:3a:c8:02:90:
db:6d:da:94:d3:1e:6f:44:c8:06:9b:b2:f7:84:5b:
08:2e:1d:9e:84:1e:88:76:2d:4b:ac:79:c1:49:a1:
a1:87:07:c3:b5:35:81:90:86:f7:34:51:d8:27:2d:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2F:59:08:DB:0E:D8:AC:4E:AE:C4:39:78:E9:44:B6:9E:9C:9F:26
X509v3 Authority Key Identifier:
keyid:CF:36:85:92:16:3A:49:AD:38:FF:AD:1D:41:9A:77:52:B3:33:DA:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzaFkhY6Sa04_60dQZp3UrMz2nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/7206c7-ff26-40ce-be71-231ac6ed9785/1/zzaFkhY6Sa04_60dQZp3UrMz2nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9a:d6:6a:5d:ca:d7:76:d8:a1:fe:a4:fc:69:5a:5f:56:f9:
6c:ae:f8:16:aa:7d:b9:c8:4c:1a:df:4b:c5:ef:96:94:ef:63:
57:66:70:db:5a:4b:6e:62:4b:d2:fd:92:fd:e1:dd:e9:0b:16:
c8:29:42:a1:d2:cf:73:34:c2:77:b6:a8:60:25:05:21:e9:1f:
7e:3d:b5:13:25:83:a5:2e:1a:4b:ee:7a:c6:79:7b:44:a0:b5:
97:e0:79:37:e7:1a:a6:01:bc:d3:6a:a7:a0:7a:82:22:ee:cb:
b0:a8:56:76:be:92:d0:74:84:1e:00:87:fb:2c:27:d0:03:46:
3f:88:84:23:c9:2e:ca:6c:22:0a:d1:c4:25:4d:47:81:ea:5f:
c4:ae:de:d1:2e:bb:61:7c:7f:b0:e8:7e:24:52:f5:3b:5f:20:
a2:2d:3e:2a:df:85:ef:fd:03:99:d2:6f:0a:00:2c:cc:df:d3:
35:d9:f8:41:6b:86:05:3c:13:cc:d2:30:0b:fa:21:83:19:d0:
48:1d:b5:18:3c:8b:1d:5c:15:64:79:e1:8d:0b:87:59:35:9b:
cd:d2:46:6a:83:80:1a:f6:93:68:d0:bb:30:df:d2:80:f9:5e:
5d:43:2d:9c:69:65:e4:5b:9f:db:4b:38:e9:c9:0f:2b:2f:d4:
c6:e6:d0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:58 2025 by rpki-client