Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
File: pj_zsazNggGkEWyYdXM5I0KJgB4.mft (raw, json)
Hash identifier: g8oHB5SWSBX9S2tssnv/imzyW85+xIpRe8Rd5OrjjG0=
Subject key identifier: 89:0C:FA:4E:42:E0:77:2A:0B:2B:8B:82:2F:A4:9C:4B:76:E1:BB:13
Authority key identifier: A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
Certificate issuer: /CN=a63ff3b1accd8201a4116c98757339234289801e
Certificate serial: 0196579463AFEEFED4EC02D02063BAAE10A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
Manifest number: 03C5
Signing time: Mon 21 Apr 2025 09:01:04 +0000
Manifest this update: Mon 21 Apr 2025 09:01:04 +0000
Manifest next update: Tue 22 Apr 2025 09:01:04 +0000
Files and hashes: 1: pj_zsazNggGkEWyYdXM5I0KJgB4.crl (hash: 2AwPq5YwN68/XmEwLyD0fhUFC/4ZH4TqKLMlG9StgFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:63:af:ee:fe:d4:ec:02:d0:20:63:ba:ae:10:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63ff3b1accd8201a4116c98757339234289801e
Validity
Not Before: Apr 21 09:01:04 2025 GMT
Not After : Apr 22 09:01:04 2025 GMT
Subject: CN=890cfa4e42e0772a0b2b8b822fa49c4b76e1bb13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:f6:a3:51:7d:79:a2:1a:db:96:92:7d:97:
2c:fc:74:95:b3:85:b4:57:f1:d8:b3:40:c7:02:af:
20:af:4e:dc:20:61:61:2f:0a:a3:45:16:a9:86:b8:
f8:96:19:e3:4f:88:38:1b:ee:63:dd:e4:ae:c2:4d:
24:92:16:5a:af:76:62:e5:3d:33:36:e4:73:ce:02:
b3:d5:59:55:96:1d:58:7d:52:71:e7:23:81:c2:7c:
ca:34:ba:31:05:5e:31:eb:fe:44:59:c0:d4:6c:a4:
c4:a2:18:a1:ab:9d:45:4b:5c:07:e9:2e:0f:03:0e:
e5:27:1b:d5:2a:12:0a:54:44:02:c1:21:a8:21:2c:
9c:f0:3c:f5:2b:76:82:e5:17:b3:87:98:28:07:04:
c9:f9:74:35:52:a5:77:9e:cc:bb:8d:e3:0c:7c:54:
b2:64:0a:e8:7e:e7:6a:5a:3a:5d:a3:dd:6f:cf:b2:
3f:11:1b:a6:a5:cf:b6:4c:54:29:05:9f:df:2b:78:
94:e8:db:88:bc:3a:98:01:03:5f:f3:24:1d:2a:33:
6a:ae:86:f7:86:c2:83:d9:a1:29:f7:be:e6:ea:5f:
10:51:d9:a1:10:62:5c:f4:55:80:4d:28:a3:10:9c:
c2:b3:6b:e8:05:0c:cd:de:5f:78:7a:cc:0a:10:de:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:FA:4E:42:E0:77:2A:0B:2B:8B:82:2F:A4:9C:4B:76:E1:BB:13
X509v3 Authority Key Identifier:
keyid:A6:3F:F3:B1:AC:CD:82:01:A4:11:6C:98:75:73:39:23:42:89:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj_zsazNggGkEWyYdXM5I0KJgB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26e21e-db81-46c7-955a-77d315cc16aa/1/pj_zsazNggGkEWyYdXM5I0KJgB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:60:33:b9:a0:53:97:a5:1c:27:13:96:f0:46:83:8d:6b:88:
c8:09:81:2e:79:63:da:2b:9f:18:6d:e9:ce:9c:81:fc:92:8b:
aa:24:7f:f2:89:9e:cc:c7:d3:c3:8c:4c:71:2f:3f:66:12:ec:
fc:1f:52:79:89:48:0d:3c:a7:e9:cf:ae:55:d5:5b:35:7b:4e:
27:72:74:92:3c:23:0b:0f:28:f2:50:50:b5:d8:f0:dd:49:7d:
cd:10:b5:af:93:c3:8d:df:25:b7:cb:0c:d7:f7:aa:6f:8f:94:
17:76:8b:c4:42:1b:cc:8c:4a:d4:61:8f:51:b6:8f:cf:98:45:
b2:0f:68:e4:71:38:13:92:61:c3:c3:0b:c1:32:62:7b:5c:8d:
7f:67:8d:63:1c:4c:5c:b0:25:9f:24:2e:64:b5:51:7d:19:46:
7b:69:5f:ca:b8:b5:61:10:91:4c:72:39:a6:f7:93:72:79:83:
c1:36:db:f1:07:84:a0:12:82:4e:84:29:51:83:47:0b:1a:1a:
b8:ec:d0:79:0f:1c:04:69:65:7c:cc:92:33:4f:a9:75:e4:99:
79:7e:d6:6c:91:58:db:9f:04:a8:5e:ed:d6:8a:1d:c3:bc:01:
be:f2:d2:3c:41:ee:97:9a:2e:c5:cc:67:89:db:40:d0:2b:35:
b0:bb:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:24 2025 by rpki-client