Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: Mnj4L7TYfxp4+B393CWMaUdsEZOBK3NooM1onOdY48I=
Subject key identifier: EE:72:88:73:30:A1:DF:5C:34:80:55:39:98:E4:3A:A1:35:A4:C9:CC
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 01964B9048D22A3DF6233F3AB07E0BA5421F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 0DE8
Signing time: Sat 19 Apr 2025 01:01:09 +0000
Manifest this update: Sat 19 Apr 2025 01:01:09 +0000
Manifest next update: Sun 20 Apr 2025 01:01:09 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: 9sDwMVT25oyRQEyieLqqnRRdL6g2uZQeaCIb50jAW7Q=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:48:d2:2a:3d:f6:23:3f:3a:b0:7e:0b:a5:42:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Apr 19 01:01:09 2025 GMT
Not After : Apr 20 01:01:09 2025 GMT
Subject: CN=ee72887330a1df5c3480553998e43aa135a4c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e8:c1:00:17:b5:3f:3f:dd:98:5e:82:a0:c1:
a2:f4:21:68:c8:37:cf:dd:48:70:e9:ae:d9:8b:3b:
91:c4:ae:61:34:2a:3d:07:9a:5f:c7:0f:33:cd:ee:
57:c9:29:c8:91:b8:29:48:84:85:5b:7c:7d:9c:cd:
e6:db:e1:a1:8c:50:db:82:44:a1:40:d9:91:87:e8:
a0:56:4d:23:d8:d9:4f:86:74:a2:55:c7:15:c7:96:
16:96:88:59:16:49:f4:1d:31:8a:08:5d:bc:4d:9b:
86:cc:2f:84:31:63:db:c6:20:88:7d:e8:91:3d:74:
d3:a0:0c:1e:d8:f3:1b:67:6c:b9:55:52:0d:6a:f3:
f2:d4:c9:74:20:47:82:78:51:a6:7d:12:7a:b1:a6:
91:09:24:d0:58:76:2f:b5:08:14:01:47:11:bb:d2:
7b:e3:5a:09:55:b9:e2:19:c8:35:82:9e:b8:d8:ae:
2e:3b:d1:cf:f2:76:77:46:9a:24:03:af:99:f8:87:
00:44:30:13:c7:59:a7:d8:e9:f7:b7:09:62:32:55:
4e:07:fb:ce:49:23:5a:1a:3a:74:5c:d1:c0:52:e1:
c8:5e:11:5a:26:6e:89:1c:2f:22:de:c8:bb:6f:62:
e2:74:26:b6:12:7d:e5:82:0d:7a:65:e6:6d:a5:11:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:88:73:30:A1:DF:5C:34:80:55:39:98:E4:3A:A1:35:A4:C9:CC
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:73:47:44:09:ed:c9:9a:6f:09:3d:b2:7b:e4:70:a0:c0:78:
a3:d0:9d:b6:19:bc:a5:fe:6e:e7:71:7e:06:5b:63:2e:80:ee:
a7:34:56:19:59:8b:bd:a0:e7:ba:c6:5d:f4:a0:2c:1f:0f:5b:
37:89:56:8b:f2:f0:b5:5f:f8:ec:b3:7e:0a:00:be:44:85:27:
e8:48:41:40:0c:7b:0b:34:f0:77:3e:d1:92:e1:fe:d9:84:a9:
99:29:eb:02:21:f3:a6:24:86:26:a9:f9:28:50:98:b6:f5:05:
8a:6a:d9:6d:69:4a:2e:85:2d:9d:2d:c0:58:2d:65:f8:50:1d:
93:b0:3f:7d:5e:00:e5:23:fd:4a:cc:a1:9b:0a:5f:db:54:65:
ca:a7:a1:5b:33:2e:89:5c:1b:11:c3:87:d8:46:fc:04:ae:c0:
cd:c4:77:66:7d:90:b5:3e:84:8a:22:e7:45:92:40:3d:b6:a1:
4f:1d:86:3c:c6:01:3c:3f:0b:9c:fd:ed:5b:5a:b3:cc:e4:7f:
63:88:73:c0:7b:de:a5:c6:ea:ad:d7:79:a1:43:a6:62:c8:b9:
62:a6:44:da:4b:52:b6:38:34:02:95:94:39:a3:b3:c8:b6:ce:
12:aa:1b:c6:c6:09:6e:c9:72:ae:25:c7:59:be:02:18:bd:18:
a8:c4:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:25 2025 by rpki-client