Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: m3bQ2TGBOjSWv+CHtse1X5IlyQGRC7PZ1bOwC7eLtgk=
Subject key identifier: A9:77:1B:74:DD:73:58:7C:5B:F2:31:FE:3D:DB:50:C6:9F:9D:2A:AA
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 01964DB5623858723843A3E91A59BBAF671D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 0627
Signing time: Sat 19 Apr 2025 11:00:54 +0000
Manifest this update: Sat 19 Apr 2025 11:00:54 +0000
Manifest next update: Sun 20 Apr 2025 11:00:54 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: 9WeS1BUa0zwOG3QusIhdOeQcwj/gkSqU6m3/UiBQyRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:b5:62:38:58:72:38:43:a3:e9:1a:59:bb:af:67:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Apr 19 11:00:54 2025 GMT
Not After : Apr 20 11:00:54 2025 GMT
Subject: CN=a9771b74dd73587c5bf231fe3ddb50c69f9d2aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:fe:c5:0e:4f:bd:20:87:cd:91:d4:00:de:
5c:fc:db:0b:5f:2d:89:06:7b:5d:23:06:51:a0:2b:
58:a6:cd:9b:66:24:29:df:1e:3e:f0:60:2e:34:ae:
2f:74:16:64:8c:5e:41:a7:83:fc:7d:a5:fd:70:b0:
71:d7:a6:b8:53:ad:29:df:f3:f0:41:14:84:49:19:
76:7a:b6:eb:74:f4:36:3a:b3:36:f7:9b:40:47:ec:
f8:d0:f8:7c:82:60:d7:8f:49:40:bc:bc:9b:79:6e:
64:71:b7:1e:85:46:d1:65:a5:b3:f0:13:a2:36:b4:
e3:e0:37:39:47:07:fd:78:02:8f:4a:20:ae:bf:4d:
71:70:3f:f7:9c:f4:ba:06:f4:75:d2:f4:aa:e8:25:
03:fa:32:2d:05:76:78:d6:dc:80:73:55:8d:ee:3b:
ec:6f:f9:6c:58:46:26:55:7d:58:fc:fb:80:ab:3d:
9b:41:d9:68:e8:ce:ea:2c:55:85:3a:47:8c:bf:77:
98:34:4f:67:d6:2e:f4:04:df:3d:48:d9:e7:1e:a8:
b6:af:57:cc:ea:9b:6e:47:a2:95:c7:00:86:a1:51:
09:10:0e:3e:6d:29:f4:b7:f3:56:ba:d1:79:e7:4c:
fb:b0:ea:9a:c9:67:34:85:9c:29:70:6a:97:d6:59:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:77:1B:74:DD:73:58:7C:5B:F2:31:FE:3D:DB:50:C6:9F:9D:2A:AA
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1b:70:74:c7:b9:6b:6d:89:2f:1e:6a:49:96:53:fc:07:47:
fb:59:1c:86:f4:00:bd:0d:8f:af:a9:55:1d:9f:5c:bc:ee:b2:
75:7f:04:0b:3b:cf:2e:bb:d4:c2:33:b9:78:b1:54:3f:21:ef:
15:f9:f6:a6:d7:cb:7a:df:90:98:33:79:38:b0:b5:03:18:49:
e1:fb:eb:7b:4d:28:73:c2:b3:9e:15:35:8a:11:07:42:16:4e:
d4:c4:07:51:a7:72:fa:e4:aa:ed:5e:f6:59:ee:c7:f6:0c:76:
78:6f:e1:24:b9:29:67:e0:0b:e7:60:1d:a3:72:5f:b3:ba:04:
58:e1:2a:61:e8:c4:fc:8f:41:c9:a5:4e:7b:a9:30:80:4f:6e:
43:b6:98:f7:73:d7:81:d3:26:c7:1c:8c:28:4f:7e:d1:12:76:
d8:81:d9:d6:a5:7b:77:ce:5e:fd:eb:fa:c1:f5:85:c1:f6:da:
3b:4c:06:81:77:ac:67:db:bc:a7:d7:51:25:a5:57:44:c0:9f:
f0:80:10:7f:1d:be:49:0e:b2:bf:6d:8e:53:78:d3:93:57:6d:
f2:9f:90:e0:c5:6a:d7:37:a3:ad:45:f5:2d:99:33:e5:55:b0:
af:6c:6e:9d:48:ea:1b:37:87:3f:d3:ed:f7:e9:7e:e1:42:30:
4e:81:b4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:06:50 2025 by rpki-client