Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: ckpE83vNYDhpt166LKnde4dm/6Cx7i5SaSPMszek5i0=
Subject key identifier: FB:7F:45:3F:B6:5D:72:F4:BC:D4:AB:4C:CB:A6:DC:5C:DF:0F:BB:F6
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 01958F616DBE6908689356419D05ABF7426D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 098C
Signing time: Thu 13 Mar 2025 12:01:21 +0000
Manifest this update: Thu 13 Mar 2025 12:01:21 +0000
Manifest next update: Fri 14 Mar 2025 12:01:21 +0000
Files and hashes: 1: bL9XDxQqDi4zzbqIbwV9pxg-nag.roa (hash: vqETjbVoGoH82qeAvCJ8Sz1hJwZnPnltJtLCCK0jXFQ=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: 5y30+KcHwNPR+dz6Mkk56nGUgDT2flU0+3fouHsZKRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:6d:be:69:08:68:93:56:41:9d:05:ab:f7:42:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Mar 13 12:01:21 2025 GMT
Not After : Mar 14 12:01:21 2025 GMT
Subject: CN=fb7f453fb65d72f4bcd4ab4ccba6dc5cdf0fbbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:04:e7:c2:51:32:8c:13:2d:d9:12:fc:b3:
c1:21:f3:03:a2:44:c8:c7:06:29:76:20:10:4a:b5:
5b:a0:00:db:9e:93:56:ed:7b:41:5d:eb:f0:3c:82:
67:91:8d:4a:a5:c0:90:97:b8:f9:9f:11:62:01:4d:
99:80:17:4b:63:08:3c:9e:5e:63:dd:c3:02:a5:ca:
70:c2:72:4f:7d:5a:4c:a4:85:b4:83:02:07:20:33:
d1:5d:f2:89:9d:7f:49:57:46:2d:6d:35:1e:9a:0f:
36:e1:a6:66:03:4e:4a:c8:0f:c7:f1:42:93:69:7a:
cb:13:99:4a:96:ba:66:fe:7e:b0:74:80:f9:e5:38:
ec:80:17:70:e7:41:03:0e:1e:09:e1:49:df:59:d4:
31:9a:21:e5:15:c2:c0:ed:02:bd:48:61:da:06:ab:
c2:dc:d0:53:65:34:7d:34:76:27:43:88:26:d1:37:
88:52:41:ea:e9:55:99:83:49:6a:bc:ce:9f:7f:12:
71:cc:a3:25:48:77:98:27:bf:cf:82:5a:e0:02:ca:
1c:6c:ce:54:f6:6e:90:bc:e3:9e:9b:9e:a6:bb:05:
89:ac:1c:82:c3:ad:18:ea:24:5e:2d:68:f9:2f:ea:
26:0a:d8:62:ae:29:50:01:dc:77:a1:0f:f6:eb:42:
fd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7F:45:3F:B6:5D:72:F4:BC:D4:AB:4C:CB:A6:DC:5C:DF:0F:BB:F6
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1b:a0:07:8c:ef:17:03:0b:97:62:2c:4d:a0:7f:aa:1f:eb:
f4:88:1c:d2:1b:9f:fe:a6:0b:58:1f:df:68:3c:4c:6c:5e:1f:
94:33:4d:5e:9c:4d:d3:b8:ce:ee:bc:84:c9:54:0f:47:ed:4e:
bb:71:23:e0:86:0d:cc:52:8e:fe:71:cf:46:f3:0c:70:dd:2c:
47:55:e3:e6:e8:b8:2d:46:df:b6:e1:8e:95:4f:d1:ab:e1:5c:
70:6b:ed:fe:83:c2:ed:d1:02:1f:fb:94:cb:84:ee:db:b9:c6:
f7:cf:56:bd:05:04:de:37:a5:e5:ad:e0:ed:16:cc:c0:03:3f:
8b:da:fb:77:eb:6d:49:e9:a9:ad:26:16:85:42:c5:c6:fc:32:
a0:06:df:a6:90:2d:24:7d:ec:94:39:b0:82:96:5b:c1:ac:7c:
b1:eb:70:2f:88:6b:5e:38:8b:89:f7:85:8c:47:e9:7f:c1:bf:
48:02:71:a9:57:77:62:a9:37:e8:3b:80:fd:d3:64:be:f5:97:
73:34:25:46:16:60:30:7d:b2:f4:7e:30:a6:93:e1:10:f0:fe:
c2:2f:f5:97:d6:f7:64:ea:a5:55:de:81:20:e4:1e:a2:83:3b:
0c:e0:0b:81:6a:58:42:a0:65:02:71:6b:56:5e:f3:a6:e9:d8:
ad:57:0a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:21 2025 by rpki-client