Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
File: Zl5NfqijRwyXA-51UUgcNvd0_rs.mft (raw, json)
Hash identifier: kh5DhEWZit7LtLyG79VtWEbYK9gez0V1Lrj3txTfTjc=
Subject key identifier: 4F:C2:37:E8:A3:92:C2:B0:E0:8A:E8:0B:C9:EC:52:F4:8F:94:EF:CA
Authority key identifier: 66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
Certificate issuer: /CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Certificate serial: 01959005F38A99F93728B75918B29DAA2857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
Manifest number: 11B4
Signing time: Thu 13 Mar 2025 15:01:03 +0000
Manifest this update: Thu 13 Mar 2025 15:01:03 +0000
Manifest next update: Fri 14 Mar 2025 15:01:03 +0000
Files and hashes: 1: S0pNJSWXYYXq-25eb1GwpN3HQK0.roa (hash: m9B8zg7UBpImnvUAy09vDVUi2G4915DaZZi26V5t6xo=)
2: Zl5NfqijRwyXA-51UUgcNvd0_rs.crl (hash: 6us/wobvnAIvv01Y6dG6U0UspenYpjWICjISnSsFyAc=)
3: bXUvwPEgFNH1kM9-zFhBBlN0jGo.roa (hash: 3Ie6IrqVMtZvkUhbCRibjgIELU/61w4y/T2SSNFuyr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:05:f3:8a:99:f9:37:28:b7:59:18:b2:9d:aa:28:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=665e4d7ea8a3470c9703ee7551481c36f774febb
Validity
Not Before: Mar 13 15:01:03 2025 GMT
Not After : Mar 14 15:01:03 2025 GMT
Subject: CN=4fc237e8a392c2b0e08ae80bc9ec52f48f94efca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:58:f3:c2:fa:42:79:41:48:bd:bc:c1:1d:
79:4e:45:6a:93:9b:d4:cc:f9:59:74:e8:b9:9d:be:
44:59:63:0f:8c:67:cb:b8:b8:9c:45:2f:b4:74:9d:
aa:35:6d:9c:90:a8:1f:a6:05:5b:6c:c2:b3:73:4e:
63:fd:07:c1:03:f3:94:b1:18:03:dd:d2:38:20:49:
66:f4:57:bb:38:32:5b:cd:38:58:48:ab:e3:f3:07:
5d:d7:c0:95:16:a2:d1:af:97:43:c5:ea:0e:a3:4a:
de:d0:bc:a4:76:38:ce:04:20:99:8b:39:4f:2a:d4:
c2:16:4f:36:99:a1:6d:04:44:10:06:24:84:04:13:
10:c3:17:56:89:de:f1:16:77:aa:54:4b:e5:ba:2d:
11:bf:b3:54:d8:01:e6:56:f7:a2:73:73:96:c1:df:
f1:f7:e5:0b:48:e0:c6:82:3b:81:8c:0b:f7:be:fc:
2b:30:c7:54:f5:af:a7:6b:2b:68:52:09:95:ee:1e:
4c:f9:6e:f0:0c:39:ed:2e:5f:3a:fb:0d:51:58:c9:
ee:dd:97:12:ad:5f:f5:d3:5e:5a:25:53:54:b9:cd:
43:63:61:4f:20:05:b2:80:f4:a1:ef:9c:f4:4d:64:
de:b4:e4:52:9b:da:bd:4b:d4:f2:21:70:b6:ee:6a:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:37:E8:A3:92:C2:B0:E0:8A:E8:0B:C9:EC:52:F4:8F:94:EF:CA
X509v3 Authority Key Identifier:
keyid:66:5E:4D:7E:A8:A3:47:0C:97:03:EE:75:51:48:1C:36:F7:74:FE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zl5NfqijRwyXA-51UUgcNvd0_rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/14ddd1-deac-41ff-ba6b-162ed624e282/1/Zl5NfqijRwyXA-51UUgcNvd0_rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c9:8b:6f:25:b3:3a:e8:f6:eb:cf:72:7b:67:f4:72:a9:4a:
15:45:ff:fd:a4:81:83:19:4a:85:44:04:d6:eb:ca:e6:91:8b:
19:01:d7:a4:1c:df:d8:9e:a5:cb:ef:57:f7:c8:8c:ae:9b:78:
17:5d:21:3f:36:b5:f4:29:49:e5:a5:bd:27:aa:e8:24:ec:28:
da:d2:8e:45:f3:30:65:a2:31:1f:f6:28:e1:a5:bb:64:8e:56:
e6:e1:82:b1:0d:3c:e3:aa:13:88:83:4c:52:42:ef:65:ad:a0:
97:5b:bc:2a:78:f1:c5:b1:4e:a2:b4:44:9f:08:9b:bb:28:4e:
c9:43:11:6f:76:c0:42:ff:65:58:8e:82:3f:08:82:21:4b:3a:
a9:21:1a:bc:54:f3:aa:5e:3f:7d:5b:91:9a:38:60:c0:47:ca:
59:9a:75:8b:60:8f:68:21:45:85:4b:ef:c0:6a:8f:c9:74:37:
7f:ac:b2:81:f3:48:46:b7:ba:b7:e9:1a:79:c7:14:e7:4e:7c:
35:2b:52:f3:dc:d0:23:43:9a:8b:05:66:d0:c3:2f:40:5d:cb:
95:3a:ce:15:61:d4:30:3c:82:43:54:2b:bb:a6:8a:41:eb:3a:
6a:8a:32:ae:44:e7:3f:3f:fa:06:6c:ee:a0:21:3e:e1:a8:72:
4a:69:d2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:50:21 2025 by rpki-client