
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
File: zgDhEsA_aV-fJdO3K7I6TDTtITg.mft (raw, json)
Hash identifier: UafaUK2mmuXqAFFX8Pl38bD0P/n7SeDZ5JbeuOwmL/U=
Subject key identifier: 15:51:10:F2:81:EC:3C:CA:96:41:28:4D:AE:2C:E3:09:CA:40:57:B1
Authority key identifier: CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
Certificate issuer: /CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Certificate serial: 0196545C6EDFB4294F3CFD58BB1E71E48FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
Manifest number: 0FBD
Signing time: Sun 20 Apr 2025 18:01:05 +0000
Manifest this update: Sun 20 Apr 2025 18:01:05 +0000
Manifest next update: Mon 21 Apr 2025 18:01:05 +0000
Files and hashes: 1: 1-OuknPy_I73ZJ_OK7-eydsH6EGQ.roa (hash: 1km3bnZmBhTCtJX0A5W/ri14NfTFKPNRu0kBcpb2/R8=)
2: zgDhEsA_aV-fJdO3K7I6TDTtITg.crl (hash: fcz/Q3PliaX9hYUoGummmi29RvAByeC5pY8gsYntOx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:6e:df:b4:29:4f:3c:fd:58:bb:1e:71:e4:8f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce00e112c03f695f9f25d3b72bb23a4c34ed2138
Validity
Not Before: Apr 20 18:01:05 2025 GMT
Not After : Apr 21 18:01:05 2025 GMT
Subject: CN=155110f281ec3cca9641284dae2ce309ca4057b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:c9:5e:d5:cf:cc:f9:7d:49:14:a9:eb:ed:
4f:a5:4c:57:d6:7b:22:30:9c:df:ae:25:da:cb:f1:
1e:ae:e3:eb:a8:11:bf:2b:00:df:aa:d7:60:7c:5b:
d8:80:d2:75:ac:1c:bd:72:f0:56:cb:7c:0f:f4:37:
ea:34:2a:78:ce:82:7d:4a:b1:6a:3b:1a:e4:16:35:
2b:de:60:60:8a:b8:16:47:f0:01:9f:b3:4f:47:c4:
05:ff:e6:d9:80:96:73:0a:54:92:64:08:80:ba:56:
f4:6a:01:6e:41:8c:e3:e4:56:a7:f4:8b:73:8e:64:
3f:3d:89:77:fc:ee:51:bd:dc:7d:0e:dc:d1:69:5a:
7d:88:8e:28:b7:c6:7b:df:45:f0:56:38:89:66:2e:
c1:a3:dd:01:46:06:75:d8:5c:4c:7d:e5:e5:2a:13:
a1:29:0b:44:61:86:08:30:0d:04:e3:8d:89:5a:ad:
06:71:1f:2b:f3:e1:23:70:5c:85:4e:25:21:59:77:
f2:f8:ea:73:7f:4a:6b:66:a8:c8:6f:39:5a:10:7e:
98:78:1d:fb:5a:64:77:b1:a2:f7:a2:48:34:02:1d:
16:8c:c0:8b:56:be:c4:72:0d:99:3c:7b:51:b4:ad:
9f:56:a7:63:64:ec:45:6f:21:5d:e0:10:44:e7:b5:
bf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:10:F2:81:EC:3C:CA:96:41:28:4D:AE:2C:E3:09:CA:40:57:B1
X509v3 Authority Key Identifier:
keyid:CE:00:E1:12:C0:3F:69:5F:9F:25:D3:B7:2B:B2:3A:4C:34:ED:21:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zgDhEsA_aV-fJdO3K7I6TDTtITg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/100c25-e025-45ef-90a9-f3463fc72cb5/1/zgDhEsA_aV-fJdO3K7I6TDTtITg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d0:d5:6c:08:02:2e:93:d0:3c:d2:a9:98:1c:b5:e3:dd:14:
46:dd:5a:4f:49:a1:c3:3a:fe:c4:a5:17:6f:80:d4:d9:0a:f8:
bc:b4:14:75:a3:9d:4f:cc:13:ce:7f:5c:1d:a1:92:6c:bd:08:
cd:87:86:76:e3:ad:91:c5:77:d0:c4:df:4c:00:9e:c5:c0:14:
0c:e2:12:21:04:dd:d2:48:a4:5f:4a:9c:27:3c:ff:0a:a6:07:
dc:c4:46:83:3a:10:f0:b8:ec:af:3b:03:1c:94:25:14:d3:d9:
d8:88:59:82:cd:e2:62:14:af:a9:ee:5c:35:b3:28:6b:75:ea:
e9:86:2f:01:bf:c6:8b:22:39:c0:73:1b:df:85:e9:36:95:0a:
fe:a2:b9:c3:42:8e:c2:19:e1:be:65:cb:26:e0:48:da:7e:38:
0b:12:63:33:8e:f7:b2:bd:d5:3e:18:e8:8f:6a:56:74:67:11:
50:7a:66:c4:a5:33:48:51:56:35:5e:49:65:fb:7e:0e:34:05:
bf:0e:f4:61:94:b0:00:0d:0a:33:7b:3b:2f:97:0d:90:a3:07:
38:30:38:b9:e7:8c:e2:d6:a8:54:ff:8b:7a:a9:13:5b:f5:3c:
43:d3:a8:00:8f:dc:bd:04:c3:1d:6d:17:ee:b0:a2:46:63:b6:
e2:d0:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:13:38 2025 by rpki-client