Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json)
Hash identifier: YhqdI7BsHnAyILVrrh2b69i7P2pKCX9bx+1V2CHk/ho=
Subject key identifier: A7:C2:A3:80:0F:7F:47:6D:F8:D2:D7:F2:5E:D2:0F:20:94:CD:02:A6
Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Certificate serial: 0196421E9DC65D3D76757CD8A2344BFBB3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
Manifest number: 1488
Signing time: Thu 17 Apr 2025 05:00:24 +0000
Manifest this update: Thu 17 Apr 2025 05:00:24 +0000
Manifest next update: Fri 18 Apr 2025 05:00:24 +0000
Files and hashes: 1: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: 6JddUEgYa84SOMi39QqPKscvRIut6zZ5Yt8XxZaZq10=)
2: nh2jj_LSbHbo6dOlRaW604QLuxE.roa (hash: ajpkQ8o6WuSUyO59iQdi5/jQGtK2O9XCwMuhD9aQ4wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:1e:9d:c6:5d:3d:76:75:7c:d8:a2:34:4b:fb:b3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9
Validity
Not Before: Apr 17 05:00:24 2025 GMT
Not After : Apr 18 05:00:24 2025 GMT
Subject: CN=a7c2a3800f7f476df8d2d7f25ed20f2094cd02a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:78:fb:fa:75:c8:30:48:0e:40:d3:ad:98:
86:88:a4:f9:5d:2c:5e:22:e3:7d:30:34:af:56:23:
e5:9f:df:8f:2c:73:3f:ff:0f:3c:5c:10:17:81:fd:
41:cb:81:a2:a1:d8:be:58:ad:5c:94:a8:7b:44:35:
75:d0:50:16:eb:4e:28:19:00:55:58:29:12:12:3f:
ac:e1:72:22:8e:1d:41:a2:07:d1:82:a8:12:cc:47:
b2:b2:ca:f7:df:48:c6:71:a9:37:66:31:0d:ea:93:
ec:ad:5d:3d:12:5d:1b:55:bd:9f:d9:64:1c:11:19:
f1:ab:7e:b8:39:5e:81:26:03:22:d9:65:a4:5e:23:
4a:35:60:5d:4a:a4:2b:ed:15:ec:3d:ac:a5:9e:c0:
b4:4f:4e:d4:b1:ff:86:f9:f0:09:21:64:9b:d3:9f:
b4:7f:ce:5b:77:4c:0e:8b:70:47:cd:31:0d:1c:16:
fe:91:9f:15:be:de:d9:cf:27:53:66:23:b7:0c:9d:
83:ff:fb:21:0a:1b:34:01:f2:0c:4a:10:72:6a:72:
99:85:c8:76:7f:7b:b8:10:08:15:af:66:48:06:41:
61:54:9a:08:7c:83:60:28:dd:27:6e:47:6e:20:91:
e5:af:93:dc:ea:1d:27:1f:70:37:48:84:7d:98:9c:
4f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C2:A3:80:0F:7F:47:6D:F8:D2:D7:F2:5E:D2:0F:20:94:CD:02:A6
X509v3 Authority Key Identifier:
keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0e:70:78:ca:6c:31:ee:6c:4b:db:7d:50:42:ee:59:fa:d5:
18:4d:5f:3f:81:75:27:c9:e1:6b:23:d1:56:75:61:23:31:f0:
03:75:12:cd:df:01:a9:ac:e9:de:35:94:2a:5d:18:21:23:00:
a3:86:b2:9b:4c:94:c2:e7:f3:b3:ba:40:fb:d8:9e:37:67:e9:
a0:5a:ac:ba:70:e6:3b:a6:1d:03:bb:2f:01:04:31:97:7a:9d:
74:e3:ce:bc:3f:bb:e2:a1:fa:52:15:ce:9d:01:41:dc:fe:93:
82:7a:e1:a0:16:cd:1a:cf:c3:e7:45:91:3c:67:61:28:df:60:
59:1b:00:9b:22:f6:7b:f2:56:61:d8:63:06:4e:37:41:db:c6:
d8:75:77:fd:57:30:ad:dd:8f:40:6e:59:37:38:13:ad:aa:af:
76:32:02:6e:ca:95:d9:eb:dc:a9:aa:ae:fc:ee:41:f6:22:6b:
c5:83:98:98:8d:d6:69:c5:08:ce:06:16:09:77:2f:2d:44:16:
0e:69:e8:57:4b:88:e4:f6:6e:78:cd:ed:a8:fc:f4:c0:13:32:
3a:cf:cf:a8:04:ee:c9:fa:04:5d:0a:77:5f:67:ea:44:68:28:
65:57:53:3f:25:37:ff:bd:5c:32:aa:55:bf:4d:6a:e2:b4:62:
94:24:4f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:05:57 2025 by rpki-client