Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
File: rzkvKN7GuMzrfNcOevcdjNyqmgY.mft (raw, json)
Hash identifier: nJTma5aoYD5r2QfTfs+285diXZdOmj/CjjYc1wuJJ78=
Subject key identifier: 40:D1:D5:C0:7D:A0:59:AF:3E:B3:64:E2:7E:45:F0:A5:EA:AA:1A:22
Authority key identifier: AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
Certificate issuer: /CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Certificate serial: 01965E04176F39FDCF8EB53A28C8E1CF4852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 15:00:48 +0000
Manifest this update: Tue 22 Apr 2025 15:00:48 +0000
Manifest next update: Wed 23 Apr 2025 15:00:48 +0000
Files and hashes: 1: jlnSpYKnKgIEV_ZJFnqA1zdm8Xc.roa (hash: W+tCfuFHaZiswjzfI3LjlAyiu6GbDCuHiVsPBGynsaw=)
2: rzkvKN7GuMzrfNcOevcdjNyqmgY.crl (hash: 0iNRKj68iK7TpoDEoUFgAJZPkVBP4R126DdI74hP7To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:04:17:6f:39:fd:cf:8e:b5:3a:28:c8:e1:cf:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af392f28dec6b8cceb7cd70e7af71d8cdcaa9a06
Validity
Not Before: Apr 22 15:00:48 2025 GMT
Not After : Apr 23 15:00:48 2025 GMT
Subject: CN=40d1d5c07da059af3eb364e27e45f0a5eaaa1a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:7a:26:c3:0c:58:76:78:36:2f:d3:12:96:
9b:8f:32:4a:7d:27:66:9f:01:09:79:6a:42:11:ab:
c6:16:e4:cc:7f:45:71:1b:bc:44:77:7f:cb:58:0e:
03:af:95:04:97:82:b1:95:00:ad:54:33:c4:21:75:
10:c3:bc:8f:e5:1f:91:6c:5c:f2:32:1e:26:91:95:
ee:de:70:78:1a:e3:0b:8b:fd:8e:ab:c6:60:50:8e:
71:3a:50:fa:e4:e1:d0:15:d5:d9:9c:a2:b0:1d:06:
de:7b:0d:fa:21:08:8c:36:c3:62:d4:97:bb:5d:24:
7e:82:ae:c7:7b:7b:44:64:f8:66:91:72:81:23:db:
e9:84:d2:1c:93:d5:4d:81:cf:43:0a:62:fd:33:70:
65:77:d5:7e:b4:d9:c2:03:85:13:12:79:3c:b8:ba:
da:b4:e4:58:12:2b:aa:eb:2e:0e:0a:1a:01:c3:6b:
a1:55:d7:9f:69:1c:80:a0:38:cd:68:a4:65:be:2c:
be:84:70:3d:64:aa:c5:87:6d:34:93:bc:96:39:99:
59:fe:e0:07:d4:ab:94:3b:29:16:4f:a6:bc:52:0e:
f0:92:4f:9a:4c:b9:84:03:da:b5:f2:00:d3:23:28:
96:cd:b6:79:e8:a3:92:fb:bc:51:08:2d:8c:cd:e3:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D1:D5:C0:7D:A0:59:AF:3E:B3:64:E2:7E:45:F0:A5:EA:AA:1A:22
X509v3 Authority Key Identifier:
keyid:AF:39:2F:28:DE:C6:B8:CC:EB:7C:D7:0E:7A:F7:1D:8C:DC:AA:9A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rzkvKN7GuMzrfNcOevcdjNyqmgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2f36d4-72e1-4046-b73f-ab9eadb1d797/1/rzkvKN7GuMzrfNcOevcdjNyqmgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c6:c8:d5:76:72:b0:5a:f8:70:69:8f:47:20:16:15:c1:ff:
90:96:6d:ba:f6:97:f9:8a:75:bb:a7:26:6e:4d:31:7a:fe:22:
f9:05:f8:fe:f8:08:3a:d5:8f:e1:4f:f1:f3:4d:29:4e:bb:3f:
f6:6d:bf:4e:55:1a:8e:6b:be:fb:0f:a2:8c:13:b5:d4:98:7f:
b6:44:06:9e:d9:f8:12:f7:88:0b:eb:d3:92:1a:11:ed:05:b3:
16:dc:f9:17:00:87:7c:d0:2e:63:d6:c7:dd:3f:35:0f:54:36:
eb:51:f3:5b:f6:ac:0b:23:da:0a:ab:28:d0:9f:e6:c2:96:96:
d4:22:ce:6c:e1:8b:17:2b:8b:9a:43:1c:a0:04:d7:21:23:46:
fa:5e:65:f9:ab:fb:8b:df:13:5e:88:b3:81:5a:42:6d:54:1f:
c6:22:dc:4e:b7:75:a5:a9:90:48:a1:3e:89:0e:4f:b6:f5:eb:
b4:ec:0c:e2:f8:a5:49:a5:fa:86:c2:50:52:46:18:a5:38:e7:
10:05:f9:bd:d8:d2:a7:31:56:50:21:84:b1:8c:26:c3:66:35:
f1:b6:b3:04:58:ca:0b:b2:e0:90:64:e3:08:8d:0e:a0:75:0b:
af:6a:6f:ef:52:8e:8a:fa:99:9e:cf:0b:5b:05:54:d7:97:06:
3e:35:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:09 2025 by rpki-client