Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: HRfsscT+HxY2EaRuvn1z+ezmNMZ9jCJhV4swPmyllRU=
Subject key identifier: 81:F7:0E:1A:15:C9:41:60:35:00:46:2E:16:92:01:1F:F4:51:F9:4F
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 01959073D33BFC3CEA11C98FA0285C2F9BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 05C5
Signing time: Thu 13 Mar 2025 17:01:04 +0000
Manifest this update: Thu 13 Mar 2025 17:01:04 +0000
Manifest next update: Fri 14 Mar 2025 17:01:04 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: ZLOrxwI3Ja0LeFj4ETRsMJ6JsykG6EjTUuei3owh/j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:73:d3:3b:fc:3c:ea:11:c9:8f:a0:28:5c:2f:9b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Mar 13 17:01:04 2025 GMT
Not After : Mar 14 17:01:04 2025 GMT
Subject: CN=81f70e1a15c941603500462e1692011ff451f94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:02:1c:b9:d9:5b:f4:17:fd:a1:99:68:ee:
a7:0e:a6:45:a1:28:63:f5:bb:58:1d:d6:b1:33:dd:
5a:b5:ec:d7:10:87:9f:56:ca:43:ac:f7:d0:71:35:
e4:f0:39:64:6c:19:1c:36:53:c6:e3:1b:d8:98:93:
9e:ab:66:c3:77:e7:e1:85:42:14:14:0f:31:57:8c:
54:5d:e5:ba:99:9f:41:9e:c0:ef:78:9c:c8:88:70:
0c:11:51:2d:a8:50:c5:1e:f1:01:37:03:cf:2c:ba:
df:55:a2:e9:df:f8:e7:14:42:25:ba:5d:59:ed:23:
30:dc:68:4d:42:c2:ac:66:50:6c:fb:ac:01:67:09:
fa:78:41:55:a7:23:22:e5:1d:55:53:d5:9c:ad:bb:
1d:9e:8c:bf:97:c2:c2:de:5f:28:47:42:15:a3:36:
a7:cd:42:c3:88:a9:c5:9a:98:06:3d:0d:6b:82:39:
5d:fe:db:6c:4d:33:94:ba:53:21:3c:1a:d5:81:7a:
e0:9f:c7:3b:28:fb:c7:34:b7:6e:aa:51:13:71:66:
8b:38:13:cd:91:e3:86:ba:7b:d8:3f:f5:f5:95:fc:
8e:06:7f:4b:c2:e9:c7:f1:43:95:cb:d4:64:b8:8a:
55:94:a4:61:93:fd:58:01:b5:4f:c8:f9:c7:a8:d6:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:0E:1A:15:C9:41:60:35:00:46:2E:16:92:01:1F:F4:51:F9:4F
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cc:53:d3:8b:b0:9b:f5:98:61:6d:e3:d6:f1:3c:93:58:70:
d5:bb:fe:45:35:22:f5:04:f5:d7:c4:51:1e:cc:ea:d1:4d:5f:
e9:a5:5b:f1:c1:9d:05:b8:c6:00:21:ca:62:ad:b6:9d:36:ba:
14:f6:64:9b:77:16:27:7c:d7:a4:00:9c:b7:3c:6c:a8:7c:57:
68:57:9a:89:83:3b:c6:ed:1d:2a:00:a6:c7:d0:dc:f5:74:09:
fb:24:45:23:00:83:3b:66:b8:7a:8b:f0:8f:4d:35:38:8f:25:
5b:71:5d:36:ce:6d:39:61:1a:1f:ad:ff:6e:4d:01:f1:88:23:
fd:eb:31:e6:17:a7:5a:af:cb:b6:15:c3:42:ed:c5:ac:0b:cb:
35:f3:68:ff:13:31:b9:d2:53:95:95:fc:dd:8f:f8:14:c7:ac:
fb:64:53:12:ab:fe:5f:d6:9b:e7:32:4f:30:10:ac:35:e0:f8:
0c:08:45:06:b4:9a:3d:7f:3b:71:84:e7:50:35:32:67:b5:9b:
b8:d3:91:96:37:a6:b2:91:93:fd:b6:56:95:02:69:ea:d9:36:
62:0a:e5:8f:db:a5:0a:9c:b8:2f:50:da:de:5e:a9:2a:5d:76:
89:5d:30:c3:fe:54:4f:22:0d:25:f4:a8:dc:9c:3d:15:ee:65:
08:54:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:48:32 2025 by rpki-client