Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File: Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier: kCOkdyDViXGcY6MuCmc9oSMCHucB9Cmis/tFaO0kC9w=
Subject key identifier: 58:81:30:61:3D:B8:99:D6:00:74:7E:5C:8F:FD:A9:70:49:27:82:2D
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer: /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial: 01966104F4CDC348723A8A0B371134A9823E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number: 0CC6
Signing time: Wed 23 Apr 2025 05:00:36 +0000
Manifest this update: Wed 23 Apr 2025 05:00:36 +0000
Manifest next update: Thu 24 Apr 2025 05:00:36 +0000
Files and hashes: 1: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: DnbfvRVbpjisOs85J8bZLcdNOeHoj+LJ6oMqInfV8xs=)
2: lAxCqPMpI5f-sYorlBydxXXqa9k.roa (hash: VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:04:f4:cd:c3:48:72:3a:8a:0b:37:11:34:a9:82:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Validity
Not Before: Apr 23 05:00:36 2025 GMT
Not After : Apr 24 05:00:36 2025 GMT
Subject: CN=588130613db899d600747e5c8ffda9704927822d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:f9:28:61:ba:50:e4:6b:ff:1a:e4:a3:8a:
2e:0f:33:aa:fb:4d:37:42:33:78:2b:60:4c:75:58:
46:c9:d3:e5:81:2c:1f:c9:89:47:b6:c9:da:58:f4:
6c:76:69:59:90:33:13:27:d1:25:db:9e:07:d5:b8:
c3:a0:4c:29:65:63:03:ce:f7:73:b9:02:ea:4d:83:
aa:73:52:68:c0:14:2d:c8:6d:c8:df:cb:27:9b:66:
5c:b3:9b:d7:bf:14:a0:b4:d8:fb:2d:3a:47:db:80:
77:60:aa:4b:86:bf:a5:38:8f:fd:98:75:df:85:2b:
1b:bb:61:39:e1:9e:9a:ac:e1:dd:d4:fc:b2:8b:a8:
6c:9d:5d:8b:12:4c:6a:c8:3c:7f:82:b1:38:40:2d:
a1:cc:2b:e4:72:40:c5:e6:91:9a:54:db:ab:69:df:
9a:60:c4:9b:3a:b2:40:25:ee:39:e1:63:00:11:4f:
82:92:0a:33:18:28:40:22:b5:63:ef:51:af:7f:92:
7a:03:ca:9c:d1:a1:cb:bf:03:26:80:76:ee:d6:df:
b9:79:7f:2c:64:71:f2:03:4b:11:56:8d:ee:8d:49:
bb:e8:04:d9:24:0d:94:89:15:b3:f6:7d:6f:27:55:
21:71:75:1a:b4:54:ab:59:93:76:4f:fb:33:51:50:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:30:61:3D:B8:99:D6:00:74:7E:5C:8F:FD:A9:70:49:27:82:2D
X509v3 Authority Key Identifier:
keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ef:24:1c:61:a4:98:34:c9:44:b9:0f:18:51:a5:3d:8c:8a:
cc:22:61:19:f4:00:8b:68:4e:96:db:4f:b2:2e:16:0e:c4:05:
8e:bc:05:c9:b6:f5:91:62:b4:69:57:d2:7a:83:aa:77:54:fa:
79:25:7c:d2:d0:b6:7b:f4:84:03:28:03:bc:4e:55:45:3c:37:
d5:57:40:eb:b5:89:09:79:87:be:ae:d1:9b:f7:27:ca:45:39:
e9:37:1d:f4:0c:18:ad:c0:f9:82:b5:d5:2c:e4:a0:a2:f7:27:
4c:6a:2d:e5:72:84:77:98:ec:94:98:80:cb:35:a4:fe:e6:32:
3f:0b:92:3f:01:77:cb:fb:89:0f:9c:2f:77:7e:37:7a:d8:63:
91:7e:6a:84:45:18:ba:28:17:17:b4:aa:5d:77:81:37:80:b8:
a0:94:1c:39:90:f8:b5:19:62:73:35:7f:0c:9a:7d:15:f4:ee:
5d:e7:99:53:b6:b8:03:80:a3:d6:64:c5:09:e8:a3:ff:0d:ea:
77:5d:2a:70:09:b9:c5:43:38:3c:e1:ab:f8:1f:90:04:0a:c4:
72:92:f4:ff:6f:c9:8f:b7:de:57:24:d9:42:1e:ae:02:54:46:
7b:04:44:14:68:d3:0b:a5:82:09:1c:3d:9f:59:f7:9e:42:bd:
14:4e:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:10:27 2025 by rpki-client