Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
File: z431Kt_i_Oaulvb-BdFAieAkfO4.mft (raw, json)
Hash identifier: jwgCMbGrG/JBBtWW58MEyiihzg+bCSQqF774kcim/d4=
Subject key identifier: CB:D6:48:4F:41:1A:91:5A:AC:38:FC:A7:3D:C1:65:52:82:3C:50:13
Authority key identifier: CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
Certificate issuer: /CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Certificate serial: 01974D44D056C5A551F4F73FC91BE090A1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
Manifest number: 0D33
Signing time: Sun 08 Jun 2025 02:00:44 +0000
Manifest this update: Sun 08 Jun 2025 02:00:44 +0000
Manifest next update: Mon 09 Jun 2025 02:00:44 +0000
Files and hashes: 1: TiwKb7nlOPMc1Vnv8DcKupSD5jY.roa (hash: nQWhe0fyffCN2quQfKSQ56T2rfLrYZUxC64fwkrxixE=)
2: z431Kt_i_Oaulvb-BdFAieAkfO4.crl (hash: S/loXciCPcMcIqD0oVTiY2nvBbPwH0kvsYa7Qwh5C7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:d0:56:c5:a5:51:f4:f7:3f:c9:1b:e0:90:a1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8df52adfe2fce6ae96f6fe05d14089e0247cee
Validity
Not Before: Jun 8 02:00:44 2025 GMT
Not After : Jun 9 02:00:44 2025 GMT
Subject: CN=cbd6484f411a915aac38fca73dc16552823c5013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:8d:8e:f7:4f:a6:cc:79:1b:ef:94:c9:93:
3d:23:7a:b7:48:ed:64:71:ff:a9:f5:23:f0:3d:10:
e2:2c:60:03:60:56:3e:08:c2:b8:fb:ad:91:23:30:
76:58:88:bf:28:3c:d4:1a:30:1e:f0:8a:e2:fe:85:
06:7c:7c:34:2a:f0:b4:31:65:57:bb:11:04:9e:9f:
7c:4b:81:56:d5:e2:8c:ad:e0:19:18:a2:cc:95:c9:
30:2d:98:1e:7d:e0:7f:93:eb:b6:b4:a8:10:6f:f5:
3c:46:be:2c:f4:b3:e2:ba:ec:8d:a2:47:5d:9e:ac:
5b:3a:0a:ab:19:35:5a:c9:c8:f8:59:0a:c9:0e:55:
05:4c:8e:d7:dc:32:12:d7:2d:c6:8e:52:89:92:a6:
60:00:b1:4c:c9:d4:15:40:c9:1b:a0:5f:13:66:37:
a0:88:52:6f:f7:56:b8:54:63:a9:f4:2b:2d:6f:07:
3b:60:ae:07:c6:a5:5e:d9:13:96:09:00:65:fb:8b:
de:ff:07:89:51:0f:5b:9d:cb:45:5a:b0:26:2e:d6:
2a:cd:ae:ab:51:ef:07:a5:e2:1b:ef:24:e4:39:8f:
bd:0b:6e:85:56:da:a9:6f:06:c1:83:5b:2c:5d:97:
fd:10:8f:e8:4c:a3:33:c6:f2:f5:3d:6a:b6:b4:50:
93:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:48:4F:41:1A:91:5A:AC:38:FC:A7:3D:C1:65:52:82:3C:50:13
X509v3 Authority Key Identifier:
keyid:CF:8D:F5:2A:DF:E2:FC:E6:AE:96:F6:FE:05:D1:40:89:E0:24:7C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z431Kt_i_Oaulvb-BdFAieAkfO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f22743-1898-47e5-96e2-f797e1f544d9/1/z431Kt_i_Oaulvb-BdFAieAkfO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:68:b9:58:3c:8a:1f:44:f8:bc:4b:8f:37:fc:7e:19:12:b6:
3f:e3:99:f1:4e:01:54:32:51:28:00:58:2f:d3:c0:c8:b5:e0:
4d:5d:2c:c6:bf:0b:36:b5:94:c1:9c:0d:7f:5b:52:67:2f:9d:
90:2a:32:1c:17:3a:69:83:dc:a6:70:af:f3:8f:9c:a2:72:e0:
e8:d9:d7:b5:f1:b3:b0:7a:2a:3f:13:0f:72:93:b3:0e:f2:e8:
9e:4a:a2:5e:44:eb:32:4a:ea:7e:80:0d:b2:22:c3:e2:ce:31:
5c:a0:84:b7:47:f6:b6:a1:7d:29:2c:18:7f:72:b6:ec:e1:56:
5b:d9:81:c5:bf:bc:43:14:02:bc:b8:5b:4d:c9:35:2e:e9:09:
f1:f7:f3:9c:1a:cb:07:2c:94:64:13:b3:b2:cb:f4:b4:5f:74:
04:4c:c6:82:d2:53:40:89:c2:08:c7:0b:5e:09:39:62:6e:00:
6d:7e:d8:44:e2:92:63:db:c4:03:a8:c4:57:cc:59:a8:be:92:
f3:e9:6f:1d:59:0c:a1:eb:36:ee:86:29:a5:e3:d5:a5:e3:a4:
d5:34:6d:01:3b:2b:b5:96:66:63:38:77:b9:9d:ef:a4:e8:cd:
62:52:c1:07:85:4e:f6:ea:cb:e5:82:83:e4:29:a1:41:27:67:
7c:41:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:53 2025 by rpki-client