Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
File: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft (raw, json)
Hash identifier: t0HACnabs4cAOFRKFBk1HCgXfEzOJOGwm989kLfRj20=
Subject key identifier: B8:5D:9E:09:11:E9:12:41:33:6C:96:54:F1:DC:9C:23:51:6A:3A:60
Authority key identifier: 66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
Certificate issuer: /CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Certificate serial: 019655A5B195D66D748C4E9378C480A23BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
Manifest number: 1238
Signing time: Mon 21 Apr 2025 00:00:44 +0000
Manifest this update: Mon 21 Apr 2025 00:00:44 +0000
Manifest next update: Tue 22 Apr 2025 00:00:44 +0000
Files and hashes: 1: 6JYNh-n5WyyjhpESG3f33euXdz0.roa (hash: F75DJeS7+fMY7BG2ZrDAaDOIaz0HnjQabtUssq/wKLk=)
2: Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl (hash: 4tcXeUJD781uNLkxRoYoT0zq+Z+ZAPNRhs4lHNkzYE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:b1:95:d6:6d:74:8c:4e:93:78:c4:80:a2:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dfb43158d9ddb2f5b9f2923753bed3fb1173ca
Validity
Not Before: Apr 21 00:00:44 2025 GMT
Not After : Apr 22 00:00:44 2025 GMT
Subject: CN=b85d9e0911e91241336c9654f1dc9c23516a3a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:2d:18:b5:49:5c:d6:26:70:3e:65:26:f2:
09:0b:1b:50:aa:a2:ba:e0:88:6f:d2:87:65:33:b2:
c1:f6:5d:55:7b:4c:7f:cd:96:9f:e9:40:66:d9:48:
9c:b4:04:86:38:13:7d:a5:8d:2a:0b:1b:51:00:43:
60:66:f2:b5:6b:fa:cd:65:7b:22:4e:6d:80:cf:81:
25:d8:70:ef:52:a9:00:fb:24:c3:92:bc:98:c8:ff:
d8:61:be:b9:e3:02:44:ca:01:d3:7b:d1:b0:95:c8:
1b:85:9f:52:73:83:f5:dc:62:22:fc:89:14:57:18:
92:c1:6b:4e:13:ed:5f:16:d5:40:91:15:70:d2:35:
4f:a2:3f:89:87:aa:15:a4:93:ba:8f:b7:9e:4b:1a:
45:f8:85:9e:fc:1d:33:0b:02:a4:4a:ca:2e:0c:99:
9e:79:ff:f0:10:bf:e8:64:1d:5d:7e:67:9c:7f:5c:
82:9d:0b:97:0e:99:7a:84:e3:e5:09:62:e2:ee:2b:
7c:fd:18:af:af:b6:6f:15:6c:ff:22:eb:5a:9b:6b:
a0:05:a0:46:5f:4b:86:e5:5d:09:8b:f0:70:6c:be:
85:75:26:07:38:49:ff:dc:db:39:e8:50:68:22:9a:
1e:67:46:e9:24:7b:76:31:61:2f:14:99:d3:43:40:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:9E:09:11:E9:12:41:33:6C:96:54:F1:DC:9C:23:51:6A:3A:60
X509v3 Authority Key Identifier:
keyid:66:DF:B4:31:58:D9:DD:B2:F5:B9:F2:92:37:53:BE:D3:FB:11:73:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/aef530-0c91-4c28-85ae-27cb1b026113/1/Zt-0MVjZ3bL1ufKSN1O-0_sRc8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:a2:fa:e3:ac:c3:b3:6b:8b:e6:73:bf:13:9e:ac:a2:8b:
27:01:1a:91:92:72:f6:6e:bc:a6:af:c8:b1:12:b4:3c:cf:6f:
a3:75:58:ae:10:a0:70:21:55:8d:55:8d:7f:a2:a2:86:a1:ed:
c2:7b:d5:3e:fa:81:0d:25:9b:4d:82:9e:ca:a4:12:ff:7e:92:
75:87:6a:40:05:85:c3:34:92:bd:0d:72:14:00:90:9c:4f:f0:
77:ce:42:8a:6b:5b:8c:9e:cc:45:fa:6b:32:0f:fc:af:a4:b1:
f9:13:71:8f:c8:14:eb:82:3b:7f:33:fd:3e:18:f1:4f:6c:c6:
ea:59:88:c9:b8:49:c0:48:9d:14:11:42:76:f0:08:fc:6c:fa:
28:cc:44:6b:88:a7:c4:8e:15:95:51:d8:3a:11:6f:ba:40:d5:
4f:3c:eb:5c:99:c3:ae:f6:ad:b7:af:1f:c4:52:fd:a6:d2:a7:
4c:ae:0a:4a:60:c0:87:45:a8:f1:d6:cc:be:37:b0:1b:5b:ef:
2d:6a:42:5c:be:81:0f:c0:5a:27:ba:cb:31:cf:11:11:d9:30:
2d:ce:52:13:03:82:56:e7:b8:90:e9:93:df:b1:4b:94:23:bb:
8f:66:51:99:2d:ca:03:8f:2b:ef:57:6c:48:ed:d2:9b:f0:4c:
f9:ef:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:39 2025 by rpki-client