Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
File: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft (raw, json)
Hash identifier: oASzi/QI8xanxAFTrowS0YhUCQ0EfvQhsI4RuOMsKl0=
Subject key identifier: 10:44:A7:09:4B:76:E2:E1:55:F2:AD:9B:1A:20:CE:79:08:4E:70:1A
Authority key identifier: 65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
Certificate issuer: /CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Certificate serial: 01957946B14A0064560FF23C5875C27971F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
Manifest number: 148D
Signing time: Sun 09 Mar 2025 05:00:30 +0000
Manifest this update: Sun 09 Mar 2025 05:00:30 +0000
Manifest next update: Mon 10 Mar 2025 05:00:30 +0000
Files and hashes: 1: CHPWlUWLkhhN8KqcQvdgSIi7nSQ.roa (hash: oTR4o/Lu/P2pP/jqKMJRfshRV5ap+zULnMucNhK6ij0=)
2: D4kPuzxI99LO9za1uzpIOKYzyZk.roa (hash: c+Ehw1XN1UBVbiuLbeIY9bu5RDnn9bT1POuqZJ3ek+g=)
3: ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl (hash: 4fiNyg9Oats0UY1W/tLYG6aK2rzePHk1M3kY92DnW0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:46:b1:4a:00:64:56:0f:f2:3c:58:75:c2:79:71:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658290fe9814fcb062ab71e32ec1f96da9973a33
Validity
Not Before: Mar 9 05:00:30 2025 GMT
Not After : Mar 10 05:00:30 2025 GMT
Subject: CN=1044a7094b76e2e155f2ad9b1a20ce79084e701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:4c:53:f4:30:65:40:63:7e:11:db:89:79:
e1:b4:2a:5f:0f:c2:65:e5:c3:c4:29:6d:17:84:a9:
81:4c:36:76:b1:b2:1e:39:6a:71:eb:7e:0b:8a:6c:
91:8f:22:4f:38:7a:14:b2:98:71:ce:1e:cb:6f:44:
61:29:a9:ef:48:81:78:4b:92:ba:d4:cc:4a:26:9d:
cf:55:eb:55:81:2a:de:c3:3e:6e:0c:46:c6:06:1f:
05:b9:fd:d3:07:4c:d8:95:11:9c:71:0d:ba:a6:9e:
b6:6e:71:16:34:a2:c7:e3:15:35:1d:a3:f1:dc:23:
1d:ad:7d:b3:49:33:ec:61:3f:1a:b9:96:a2:9c:3e:
8f:34:30:f5:36:e5:d4:67:b9:7c:2c:af:0e:10:9a:
e2:43:c1:17:d5:10:97:35:cc:b4:ac:78:10:1a:dd:
8c:70:90:be:ce:44:ee:4d:c0:ca:4d:d6:e7:41:a3:
ed:0e:3b:a7:60:26:bc:8d:5a:91:98:6f:25:e9:7b:
f2:ad:96:59:81:af:f7:70:e8:f5:b3:bc:01:fa:26:
62:f9:bc:b5:67:c0:a1:d4:41:d0:ab:82:c6:b6:66:
e5:bd:4f:0d:6c:28:75:1b:f2:71:3f:62:3e:b2:55:
47:bb:4e:68:65:fa:36:e9:64:ae:69:2d:fc:ab:29:
75:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:A7:09:4B:76:E2:E1:55:F2:AD:9B:1A:20:CE:79:08:4E:70:1A
X509v3 Authority Key Identifier:
keyid:65:82:90:FE:98:14:FC:B0:62:AB:71:E3:2E:C1:F9:6D:A9:97:3A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d3b13-c4a1-41c0-a839-aede3ffa4457/1/ZYKQ_pgU_LBiq3HjLsH5bamXOjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:38:4e:56:fa:d4:46:4c:4f:f6:47:98:2d:11:67:e0:fa:03:
f6:6f:09:4f:e6:9d:52:d8:f8:35:63:83:e6:ae:d1:04:45:bd:
3e:2a:cf:68:b3:cf:0b:8d:e9:35:d2:8b:25:75:65:89:f2:e7:
50:81:69:a9:d7:5a:04:05:f0:5f:27:2b:1c:b8:55:4f:d1:0e:
42:77:3c:7d:57:71:2a:b1:20:38:dc:6c:a0:59:ff:ef:88:84:
31:f3:30:5a:4d:c2:c6:5e:c7:df:0a:e9:5d:d9:e6:a1:c1:0d:
19:87:4b:d3:8e:3d:00:bd:51:c5:cc:f9:10:a9:72:78:54:23:
c7:39:7e:ca:c8:8d:b7:ae:9f:5e:aa:2e:99:6a:15:b1:0e:7c:
98:94:8f:ae:b2:20:8b:0d:c5:eb:33:1f:73:bd:2b:b7:d1:84:
63:e2:42:f1:5e:ab:ec:d0:25:29:b9:98:4e:35:84:bf:5f:88:
ce:70:f7:1e:93:bb:3d:f5:e9:32:a4:0a:76:a4:52:78:71:16:
9f:d8:af:31:0d:18:24:27:85:29:2c:73:23:d0:75:9b:d0:d0:
91:c2:ec:a8:1f:0f:4e:8e:32:56:42:0a:dc:d0:5e:fb:a8:bd:
36:75:e7:f0:61:cc:22:ba:27:ed:f4:0b:a3:84:d7:26:2e:7c:
e2:b7:66:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:39:14 2025 by rpki-client