Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
File: zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft (raw, json)
Hash identifier: aIJM7S5/VleH+fFvs5ekZhMt2r1fGXBb5flmJDdlI9U=
Subject key identifier: FC:7F:B1:EB:20:F0:44:3D:AA:09:91:77:EC:00:FC:E9:52:65:DA:44
Authority key identifier: CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
Certificate issuer: /CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Certificate serial: 01958C29606EA0DC63E89A1618709BF0C44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
Manifest number: 0E14
Signing time: Wed 12 Mar 2025 21:01:16 +0000
Manifest this update: Wed 12 Mar 2025 21:01:16 +0000
Manifest next update: Thu 13 Mar 2025 21:01:16 +0000
Files and hashes: 1: 1r-YWbxqyiaEeQQe7XhCESQq4-A.roa (hash: whgT3ej9YeVcd8f315sOoiAQXSfv+O+qM97fjItvC5w=)
2: zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl (hash: 059eeDwmQ/rSMXcnz6dWoUOE79WHVmeu8xRbnWYrxtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:60:6e:a0:dc:63:e8:9a:16:18:70:9b:f0:c4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3087cc702c8d9353fe78f7932440b7e842fc6e
Validity
Not Before: Mar 12 21:01:16 2025 GMT
Not After : Mar 13 21:01:16 2025 GMT
Subject: CN=fc7fb1eb20f0443daa099177ec00fce95265da44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ba:ff:b5:ad:72:7d:0b:a9:46:70:fe:49:78:
32:75:5f:be:47:83:60:c2:21:18:46:1f:ae:6e:13:
54:8f:3d:7f:f8:a0:f5:0a:08:9e:8b:02:25:9c:26:
e2:4a:7a:af:91:f5:c5:22:87:b7:0a:83:6a:47:c3:
dd:d1:7c:9e:60:8d:8f:85:34:9d:4c:f8:20:c1:2f:
fa:b1:2b:2f:17:79:e6:a7:51:36:18:f6:86:19:3e:
1a:f6:3c:c1:3e:98:91:8e:c1:79:a8:36:5e:cd:b5:
c8:19:1f:7f:8b:37:5e:9d:ef:58:39:5f:9f:8a:df:
d5:7a:c0:b8:5e:6a:8b:07:cc:04:66:41:f3:e2:7d:
97:2a:e3:e2:2d:63:ad:97:94:bb:81:7e:e6:e2:55:
09:c2:9f:da:e6:58:a3:7f:54:f3:16:f6:11:ad:39:
63:12:eb:9a:3b:ab:a2:bb:bc:70:06:c1:1b:b7:52:
f1:69:09:68:0e:c1:73:34:5b:7f:80:e0:27:71:d7:
db:e5:84:18:18:fe:a4:62:50:f4:c1:bf:ae:fc:85:
69:43:31:3f:fa:ad:bd:f1:c4:d1:fb:03:0d:f3:84:
77:2c:f9:ac:fc:95:b0:12:89:ba:b2:2d:b0:3d:60:
26:52:40:34:2b:2c:d3:fb:94:02:2e:44:60:20:5e:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7F:B1:EB:20:F0:44:3D:AA:09:91:77:EC:00:FC:E9:52:65:DA:44
X509v3 Authority Key Identifier:
keyid:CD:30:87:CC:70:2C:8D:93:53:FE:78:F7:93:24:40:B7:E8:42:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTCHzHAsjZNT_nj3kyRAt-hC_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/058aa5-6494-4595-819b-f08d71c4f3db/1/zTCHzHAsjZNT_nj3kyRAt-hC_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:0c:71:fc:a3:55:16:35:25:96:b7:51:90:10:d2:e9:21:b7:
68:b9:62:09:2d:b1:4c:eb:f4:97:7e:5b:24:41:da:f3:0b:de:
99:9e:d2:3c:23:5e:7d:a9:da:43:37:6b:0f:24:17:c8:4f:86:
ff:a4:c3:40:b5:0a:63:18:14:a5:81:14:55:bd:9b:e5:f9:73:
4a:90:67:7c:0b:c8:77:bd:fa:6c:ab:9d:86:be:cc:e2:07:0f:
1c:7c:b7:36:3c:e2:b1:d6:ba:24:a3:e4:fb:13:d9:c2:e6:14:
ea:92:0f:90:8c:27:60:2f:c0:0d:1a:6f:bd:17:e6:c0:2f:6d:
2a:6d:8d:13:3e:3d:e6:a1:9c:11:ef:0a:4b:74:9e:dd:6a:81:
dc:61:a6:49:d6:52:8d:98:2f:b0:9f:4e:9a:0f:5a:c0:7a:7b:
7a:26:db:3a:ac:48:6b:e6:e5:6e:6e:79:00:a1:6f:28:dd:59:
39:2c:27:69:0f:cf:ae:50:9d:04:b3:ff:d3:64:90:52:5d:44:
0d:60:31:67:55:7d:69:3c:cf:df:d7:40:fa:9f:52:ea:b8:fe:
f6:95:ce:c1:aa:dd:9d:c1:b2:03:1f:6a:72:26:a2:0a:84:96:
8e:99:8a:8b:63:b7:46:dd:d3:76:79:ca:f2:c6:27:1d:27:24:
0b:2a:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:33:16 2025 by rpki-client