Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
File: pZp4qFEvkJzm1HMlLwTPGenmiio.mft (raw, json)
Hash identifier: UKSnBLK4DqNf+cIC2NVKASQb9FxzFUOodTVNxjYRGKs=
Subject key identifier: 93:4F:70:FE:98:23:5D:27:B7:2B:22:FF:78:61:FC:BF:6B:63:76:85
Authority key identifier: A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
Certificate issuer: /CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Certificate serial: 01964D476F53FC040E685382F5C186AA4744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
Manifest number: 0B85
Signing time: Sat 19 Apr 2025 09:00:49 +0000
Manifest this update: Sat 19 Apr 2025 09:00:49 +0000
Manifest next update: Sun 20 Apr 2025 09:00:49 +0000
Files and hashes: 1: RuFROxCqzeIbzpx-h2zhu4XG73k.roa (hash: mYt7O5vyisef0XC7lwr4ZHkct165sZT5ZjyUS4XqL/8=)
2: pZp4qFEvkJzm1HMlLwTPGenmiio.crl (hash: 6Rd+pHvKzy/m9bDUexgr/7hE2ABhP8XvjKhDVWOhQEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:6f:53:fc:04:0e:68:53:82:f5:c1:86:aa:47:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59a78a8512f909ce6d473252f04cf19e9e68a2a
Validity
Not Before: Apr 19 09:00:49 2025 GMT
Not After : Apr 20 09:00:49 2025 GMT
Subject: CN=934f70fe98235d27b72b22ff7861fcbf6b637685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:1e:d6:00:99:b4:ac:dc:46:fa:fb:85:bf:
ed:3e:b4:6a:f1:10:8a:44:22:9e:13:a2:e0:92:22:
3b:5b:3f:0d:ec:4d:de:24:15:8d:38:80:f5:f0:03:
32:11:27:b3:94:36:fa:69:fe:4c:fc:f8:df:62:fc:
0e:90:c4:56:d1:81:4e:95:98:32:92:b1:f5:db:0f:
26:68:53:66:15:31:46:e2:97:c0:9e:a5:a5:d6:d6:
09:ee:3a:6e:16:90:f3:12:83:03:db:91:ad:69:00:
3b:37:0b:60:87:8f:21:b4:4d:b7:4a:66:09:41:24:
ec:a2:19:e4:92:56:dc:28:8e:5d:a1:a1:d8:00:fc:
c4:39:a8:db:e9:97:92:e7:ff:d9:df:95:97:54:e3:
a4:b5:57:a3:5a:ed:4a:b7:49:d4:1a:16:fb:da:e9:
6c:58:b0:5b:0a:c3:37:15:4c:76:8b:49:81:21:05:
49:5b:8e:4d:a0:80:c6:14:44:6e:f9:3a:62:97:4e:
29:4c:97:16:78:93:25:51:71:8c:f5:49:52:22:7f:
d5:6a:35:73:33:05:62:b8:db:8f:0a:4b:bd:f9:47:
5d:9d:50:b4:0b:19:b1:fe:b3:e8:03:c3:d9:e1:96:
ab:da:6e:fe:70:1b:14:e8:bf:d5:b2:8a:b6:4b:c5:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4F:70:FE:98:23:5D:27:B7:2B:22:FF:78:61:FC:BF:6B:63:76:85
X509v3 Authority Key Identifier:
keyid:A5:9A:78:A8:51:2F:90:9C:E6:D4:73:25:2F:04:CF:19:E9:E6:8A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZp4qFEvkJzm1HMlLwTPGenmiio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ab57bd-cfed-441f-a437-438e84c7107d/1/pZp4qFEvkJzm1HMlLwTPGenmiio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:2d:5e:60:49:11:4c:e4:e1:57:b2:c2:bb:d6:26:96:02:
a0:cb:62:23:55:c9:26:70:22:40:56:67:64:e6:32:5a:06:b8:
ca:02:83:31:95:cb:0a:c3:6d:97:c5:a0:54:34:66:b2:5d:c5:
6c:99:20:d8:c0:89:81:10:5d:fc:d6:26:3e:92:cc:f5:d4:77:
79:d9:e4:50:a2:17:c1:10:8a:7f:44:e6:94:d7:74:2d:c9:c4:
4b:be:f6:08:d7:c4:2f:f0:59:63:53:e9:55:fd:d4:4c:4b:f6:
84:77:10:ed:ca:ff:30:33:0d:f4:5c:e6:a4:2a:eb:79:ff:f9:
72:41:5d:33:c8:cb:37:71:b5:11:8e:55:65:50:35:39:13:39:
b6:4e:39:3f:cc:73:02:b9:70:1a:18:5f:e7:02:0f:6d:c6:59:
bd:2d:5a:bd:6a:d6:66:d0:de:37:92:ea:5d:31:b7:37:eb:be:
26:96:56:44:6b:ba:1d:9e:53:c9:a7:ab:1f:b6:77:bd:f5:ea:
5d:a6:19:e6:eb:a3:7f:b3:ea:4a:2c:22:80:9c:d6:c4:cd:da:
33:33:37:ac:85:28:49:f6:a2:98:81:e3:a4:f0:bc:de:0e:3a:
20:ef:8d:58:12:80:56:4b:7e:b5:17:d0:66:e7:08:6f:e6:df:
f2:63:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:21:47 2025 by rpki-client