Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
File: z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft (raw, json)
Hash identifier: +NE1M0Cq+jmk27D9hOJTaEthX/wpCT1ubAsC6Y3nMNM=
Subject key identifier: 7B:51:D2:42:ED:75:E8:C1:99:25:E8:5D:42:FB:76:A6:B9:60:73:99
Authority key identifier: CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
Certificate issuer: /CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Certificate serial: 01965F4D64CFCA08E5DFED1148DEE380AAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
Manifest number: 0CB3
Signing time: Tue 22 Apr 2025 21:00:29 +0000
Manifest this update: Tue 22 Apr 2025 21:00:29 +0000
Manifest next update: Wed 23 Apr 2025 21:00:29 +0000
Files and hashes: 1: d_srjB0rV-pBdYCmFI9IWlpmnVU.roa (hash: LS1Loj0+H4fYStPGBES8E134AHzfdF+eT4WU4j8b55c=)
2: z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl (hash: NYD/JKyvV92P2Nn5mv0s/w0E5vG7LXVc9hYbQcT6cMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:64:cf:ca:08:e5:df:ed:11:48:de:e3:80:aa:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9cc33182e44d897f4eacf14213467ef88711d4
Validity
Not Before: Apr 22 21:00:29 2025 GMT
Not After : Apr 23 21:00:29 2025 GMT
Subject: CN=7b51d242ed75e8c19925e85d42fb76a6b9607399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:61:b8:59:38:b0:cf:ec:a7:bc:70:0b:e4:
9c:28:7f:4e:ab:fc:53:db:b7:eb:b2:bb:2c:ed:f7:
70:30:99:2b:6a:0b:dd:3b:0e:cc:e8:1d:7e:0f:56:
9d:7b:03:7e:06:16:8f:1c:31:1e:45:71:a8:71:aa:
4c:c2:32:b6:00:a5:21:6b:d4:fc:10:a9:be:10:66:
36:eb:04:c3:36:74:55:17:51:87:ab:fd:91:8e:3f:
d7:63:32:5b:86:cd:29:5c:3f:0f:db:44:0f:eb:9d:
47:39:ac:fc:4a:ed:0a:0f:4f:81:a1:d2:ff:e7:41:
dc:b9:7d:5c:9e:ad:33:41:40:d7:85:ab:18:55:23:
dc:16:10:6d:fe:74:a5:50:5b:58:01:4b:ce:46:cb:
c5:31:07:6c:34:1f:01:fb:4c:81:7f:6a:07:4d:31:
43:c9:98:af:34:58:2c:ca:a1:12:cc:7a:f2:ba:11:
e3:73:64:fa:f8:ee:5b:61:d1:cc:17:1a:cc:71:22:
51:63:01:4d:81:e7:f5:a0:ca:80:0b:03:ed:c9:d8:
a3:59:41:a3:01:99:dc:c0:8a:12:2a:a5:59:d0:e2:
40:35:42:a1:db:86:c1:78:1a:bc:57:b9:6c:58:25:
04:40:ab:64:ad:30:59:9d:61:51:77:89:67:e9:28:
fc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:51:D2:42:ED:75:E8:C1:99:25:E8:5D:42:FB:76:A6:B9:60:73:99
X509v3 Authority Key Identifier:
keyid:CF:9C:C3:31:82:E4:4D:89:7F:4E:AC:F1:42:13:46:7E:F8:87:11:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5zDMYLkTYl_TqzxQhNGfviHEdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/z5zDMYLkTYl_TqzxQhNGfviHEdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:26:d8:05:25:11:9a:97:4e:9f:5d:4b:d9:16:88:56:cc:e5:
37:3c:5b:5c:05:5b:3b:1c:62:71:15:0c:2a:3c:4b:ae:df:ab:
3a:44:d7:bf:aa:69:be:2e:a3:d2:3d:a8:d0:fa:26:aa:5a:2c:
76:bb:71:b9:12:78:f4:f8:19:45:31:a4:70:30:6a:e6:cb:ef:
de:d8:7b:99:25:03:32:9d:4c:78:5e:83:86:a7:01:e8:f9:21:
a8:b0:c2:bb:47:6c:86:dd:a5:5c:f3:7d:83:e7:24:6d:80:73:
7c:26:7d:74:6f:13:f0:7e:1d:83:08:68:47:b9:b6:a9:c3:c9:
21:4d:d9:5d:f8:5a:9f:d4:48:e1:8f:ab:38:a6:cd:13:f4:b8:
68:98:18:fc:89:35:b5:4d:eb:ad:83:7d:58:7b:ad:3e:7a:0a:
fd:5f:68:56:25:b0:84:bf:e4:c2:67:76:54:28:54:de:0c:97:
ca:29:ac:14:18:b7:03:6d:51:76:33:de:90:02:3f:7b:de:a1:
8e:39:52:80:81:b3:28:26:7b:1b:4d:2a:82:6c:17:2c:e0:f8:
29:e1:6d:0f:03:79:c1:c8:5c:5f:29:6b:dc:7f:ab:15:b8:02:
e2:85:c5:a2:41:39:d2:e3:d3:72:08:b3:f5:d6:75:10:03:c8:
83:1e:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:48:51 2025 by rpki-client