Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
File: zNNXkIMM50aalMWbLizLv1420T8.mft (raw, json)
Hash identifier: Vkfk+mrA37QBnq0E1wqtluJ8W/XhFqB4Z33O2vcrisE=
Subject key identifier: D0:FB:08:8F:29:F2:BA:C3:AE:FC:76:79:54:16:5E:CA:58:C0:2F:14
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 019604F7EF1EF8750EB556A172CA2DBE2D2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
Manifest number: 0F4C
Signing time: Sat 05 Apr 2025 08:01:19 +0000
Manifest this update: Sat 05 Apr 2025 08:01:19 +0000
Manifest next update: Sun 06 Apr 2025 08:01:19 +0000
Files and hashes: 1: 0yOggjDqNy10C3OKz3C0rIr3a-c.roa (hash: caWl/Q44QQWpPzxLX9RAZwZuiCmuzzxKu+jqUXyZ8ec=)
2: ifcwYHfmty9P7YlJSIwto5Z8mhc.roa (hash: j3Q6hvt9y1dRnxH4mfVL1HI6Z3oaft4npRVPXBxnB5Y=)
3: zNNXkIMM50aalMWbLizLv1420T8.crl (hash: oNwbKF1vX5bsvwDPiJdmlOM/Iylm24d3p5H+ClZzfas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:f7:ef:1e:f8:75:0e:b5:56:a1:72:ca:2d:be:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Apr 5 08:01:19 2025 GMT
Not After : Apr 6 08:01:19 2025 GMT
Subject: CN=d0fb088f29f2bac3aefc767954165eca58c02f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:92:b2:2a:c6:67:f2:a3:a0:01:c4:d2:63:
dd:0a:32:dd:fe:b0:48:3b:95:e6:9b:67:39:2c:50:
00:66:89:84:01:e7:25:09:e2:66:52:28:64:6e:da:
35:95:76:7b:62:6e:f6:56:fc:52:04:7c:f1:40:29:
b4:08:5b:83:8c:25:47:01:8e:4d:d5:d9:30:8a:20:
6c:6f:30:bb:c8:b1:96:56:5f:20:ac:b1:53:07:1f:
ee:27:01:d6:93:32:02:31:2f:47:d4:ad:b4:bf:ff:
e7:33:75:13:3a:0e:d4:64:e4:5e:b4:87:72:4f:a0:
94:e0:ae:e9:1d:a6:b3:2a:7f:b0:ef:d2:44:4e:ee:
ef:fe:dd:19:25:84:88:4e:01:95:7b:3e:ef:e4:b7:
e9:41:41:f2:7e:5d:73:43:0b:a8:a2:84:89:ce:17:
e5:d3:d1:3c:69:c3:b1:75:0b:3c:17:b3:b4:48:a0:
f3:37:21:40:b1:94:72:de:73:18:85:e5:d5:9b:ab:
f4:ee:8d:f9:91:ed:92:2a:3e:8d:25:0f:88:7f:d3:
8d:39:4a:25:06:c8:d1:f0:0c:0c:50:e4:a9:b4:2e:
82:0c:d6:6e:12:44:d8:bf:43:d2:13:17:33:4d:f1:
89:70:e4:9f:eb:a1:44:5c:f4:fc:60:e3:a2:36:7c:
44:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FB:08:8F:29:F2:BA:C3:AE:FC:76:79:54:16:5E:CA:58:C0:2F:14
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9e:4a:45:6e:a9:3c:80:af:dd:52:b9:9c:f3:e5:d8:a7:d0:
03:a4:6e:ad:22:e0:b2:ac:9d:f6:c4:25:76:07:b0:3b:ae:f4:
a2:f9:12:10:11:b3:31:3f:00:86:a5:a0:6b:fb:2b:33:6b:6e:
59:f7:17:7b:60:4b:b5:cb:87:e6:64:61:59:fd:44:70:7a:ca:
60:dc:03:0f:89:1b:7f:fb:a1:91:93:dc:aa:1a:96:2b:c7:06:
dd:5b:97:4b:de:23:9b:ed:e0:a1:80:aa:c5:0b:08:4e:6d:ca:
b5:86:68:47:dd:1f:e7:75:a1:f8:8d:1a:ae:9b:6a:78:65:76:
50:ea:d7:b5:45:59:ff:a4:91:de:d9:71:9e:d2:50:ec:64:ac:
81:26:58:b0:bc:70:70:44:10:0f:6c:ac:80:f5:2b:7c:5c:07:
bc:d2:32:cc:9b:e5:9e:7f:e4:c3:2f:b2:9e:61:d5:a4:47:72:
96:56:3d:99:fb:cc:ff:3b:81:6f:94:8e:a6:f7:78:65:e0:b7:
1c:cb:55:83:4e:7c:9b:ef:e4:30:ee:6c:89:2c:ee:66:2a:8f:
de:45:60:ed:7e:58:42:86:4f:d2:23:b0:ea:01:c0:1b:c0:50:
59:55:37:fa:1d:e4:da:d7:82:2f:3e:b7:af:cc:a9:c4:34:f6:
c9:53:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:10:00 2025 by rpki-client