Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
File: zXPyONls9npe_Aw3R2_TBgKa9VI.mft (raw, json)
Hash identifier: qx/cQ1UNtoWmeqgnwAsmDxlRknar2SB2huVL8RKlqgc=
Subject key identifier: DA:A2:F4:AF:D7:26:76:08:8D:3F:2B:96:F8:FA:53:D8:7E:D1:CB:CF
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 0196526D7A728EEE522420C0219F6A378AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 09:00:28 +0000
Manifest this update: Sun 20 Apr 2025 09:00:28 +0000
Manifest next update: Mon 21 Apr 2025 09:00:28 +0000
Files and hashes: 1: 1IglzTgNxvlQxtZzdqvHXP8KoF8.roa (hash: ONhCC/oPBTKCApZ6GbcEqvO3nMk4C52NzJJDkv5+JsI=)
2: rkFFxagKsCZzL6ha1afROc46-i4.roa (hash: X8v0BqEuUtbA/N/cHBtFm11dCr+R+u6qXiVNMBQlsf4=)
3: zXPyONls9npe_Aw3R2_TBgKa9VI.crl (hash: xn3e8hanhrISG91EkZRvaVlWVVYIg3nR8WiosRnR2eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:7a:72:8e:ee:52:24:20:c0:21:9f:6a:37:8a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Apr 20 09:00:28 2025 GMT
Not After : Apr 21 09:00:28 2025 GMT
Subject: CN=daa2f4afd72676088d3f2b96f8fa53d87ed1cbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:be:09:fa:49:e7:0b:f2:80:69:fc:41:cc:21:
ae:ef:86:f2:64:2b:1a:86:d9:d5:1f:33:84:b9:de:
bc:e7:30:5e:11:e8:a1:ae:e2:0b:81:54:bf:bc:49:
ca:ae:15:47:0d:31:ed:98:1e:16:2e:43:51:2d:de:
46:f9:57:b7:f3:e3:fa:cf:6f:9b:54:a8:7f:16:14:
79:44:ed:bf:20:ba:7f:99:12:e6:2c:1e:b7:0d:35:
8f:30:be:39:28:17:8a:ae:91:46:1b:6e:37:67:66:
1c:6f:d1:79:86:74:0e:dd:87:24:89:95:d9:a4:b9:
d6:b8:99:44:5e:f9:46:ce:70:e1:a3:8e:79:50:83:
1a:4b:77:e9:c0:ad:9c:0e:ec:39:79:63:63:3d:4d:
14:87:3b:cb:c0:93:09:c6:ba:40:04:ec:47:b0:09:
39:64:1b:39:8b:fc:34:17:1c:8b:a9:c3:ab:cb:2c:
70:2e:6a:3e:91:54:f0:f2:90:d0:78:d8:6f:d3:8e:
99:cc:9f:a5:81:71:7c:46:6e:9d:a6:83:16:5c:ab:
fc:87:72:9c:fd:08:83:a3:59:50:58:4b:39:ba:c5:
23:17:ae:ef:77:21:14:62:c7:58:31:3c:f0:53:c6:
23:a7:da:04:18:50:07:2a:bb:a6:45:f1:80:03:21:
2c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A2:F4:AF:D7:26:76:08:8D:3F:2B:96:F8:FA:53:D8:7E:D1:CB:CF
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:11:d2:c7:79:50:f3:32:3f:17:d1:df:33:02:a8:cc:e1:2e:
11:91:a6:6f:fd:39:50:b1:40:fb:26:15:0f:60:f1:82:73:53:
4c:f9:64:c9:c2:97:f9:88:83:b9:8f:60:40:15:7b:20:a3:0d:
f2:3a:13:38:b9:83:fd:02:c7:eb:6e:06:19:da:79:be:81:52:
aa:47:6f:31:8b:6e:92:06:44:7f:6c:19:c1:1b:03:e1:ca:e7:
bc:0f:cc:00:85:94:bf:2c:33:5e:b7:fc:64:e7:cd:14:3a:0a:
b4:c4:fa:06:69:a5:14:a9:fc:ca:2d:2a:c8:a7:70:23:e4:db:
86:ee:46:2a:49:a0:18:f0:1d:9b:c5:4b:2a:67:1f:a2:cb:ac:
bc:90:5f:dd:94:4f:f7:dc:20:94:e0:2b:e8:16:dc:3f:8b:c2:
8b:1e:9e:29:d5:89:0e:cc:c4:47:88:c8:a1:1f:2a:15:a6:ad:
f5:b7:a7:34:b9:2e:7f:8a:4f:c6:9d:db:85:38:59:e7:92:34:
8a:d0:e9:7d:b2:ca:17:01:ac:21:b2:e4:9e:bd:57:e2:5d:26:
78:53:7f:e5:69:cb:5a:a4:0d:58:02:94:5b:7e:30:c4:4b:75:
67:85:cc:d6:88:4f:bf:f0:d2:7e:e0:fd:87:23:d3:8e:dd:1e:
d2:f1:fb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:04 2025 by rpki-client