Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
File: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft (raw, json)
Hash identifier: s/ts+ef8AVAVqwSRxfH+mKW56dQzuJ6KzNJno7S+r2g=
Subject key identifier: 71:E1:57:3A:41:6C:3C:B3:17:A0:66:C4:37:59:25:BE:B4:53:A7:03
Authority key identifier: CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
Certificate issuer: /CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Certificate serial: 019643D629227E9FC65E3697B3EA80759126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 13:00:30 +0000
Manifest this update: Thu 17 Apr 2025 13:00:30 +0000
Manifest next update: Fri 18 Apr 2025 13:00:30 +0000
Files and hashes: 1: 7Q8_vm5PkOdikyJ8sSU6Xpax6dk.roa (hash: EraKJ6RiXoWZD2Rj0FRU/KChelRj7EhOxKUvscIGtvY=)
2: BR1Ii_38AODfT46uM_LQNIk35f0.roa (hash: pnSwgnciRzgnr7iozogNocb3NYdeZrHWudq2Bv1+yUM=)
3: zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl (hash: QNREKQXXpKHuRrXa7KB/ZgjaK8OyWXUEx8Q8A3FcADs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:29:22:7e:9f:c6:5e:36:97:b3:ea:80:75:91:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd7f8789490107097b20cfa6e3d459f136274ba4
Validity
Not Before: Apr 17 13:00:30 2025 GMT
Not After : Apr 18 13:00:30 2025 GMT
Subject: CN=71e1573a416c3cb317a066c4375925beb453a703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:04:cc:d4:4c:b7:5e:2e:80:29:3a:a4:66:
7b:ed:e4:d6:b7:b9:fd:1c:16:12:df:b9:d3:e7:d1:
1d:2d:e4:6c:0c:be:53:88:cb:93:c2:48:e9:2f:ee:
c6:4b:8f:4f:04:56:27:fc:6a:d9:e4:41:28:5f:e7:
00:52:1c:f5:f7:f3:ce:09:1d:9b:76:8d:33:7a:af:
56:d8:b7:e2:18:86:93:0e:eb:7e:f6:43:10:b7:f8:
a9:ad:78:48:11:fb:66:e1:43:e4:fc:46:1d:81:47:
84:6a:7c:6d:0e:92:e5:3d:10:47:8b:d8:ec:af:15:
c9:06:80:cc:31:e3:85:a0:81:73:30:03:50:0f:e3:
c5:d6:51:3d:6e:2e:9f:41:2f:5b:ed:1d:aa:2f:5c:
c6:bf:46:5a:aa:36:3d:61:9b:6a:03:87:85:f6:68:
3d:9a:a4:08:52:02:83:00:fb:e3:9f:2c:aa:28:5f:
81:a6:d5:b7:7c:a2:5e:f6:65:cd:c6:eb:bd:2e:52:
b0:80:c4:44:02:b5:c9:b9:2f:40:ec:25:c6:f4:9c:
47:0c:c4:47:08:f4:a3:1d:2a:48:e9:50:aa:48:07:
be:49:d4:90:c5:7a:e4:2c:f1:fc:fa:e5:f2:d2:f7:
3a:37:2f:65:c2:93:20:73:b2:d7:fe:96:e4:09:65:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E1:57:3A:41:6C:3C:B3:17:A0:66:C4:37:59:25:BE:B4:53:A7:03
X509v3 Authority Key Identifier:
keyid:CD:7F:87:89:49:01:07:09:7B:20:CF:A6:E3:D4:59:F1:36:27:4B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7b8d5d-13e6-4d2b-bce3-4980fca8d277/1/zX-HiUkBBwl7IM-m49RZ8TYnS6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:36:4e:4f:0e:3b:3e:18:32:f6:65:5a:ab:34:1b:f2:74:5f:
80:d1:f8:4a:43:5d:4f:5b:5e:50:fe:21:c2:74:41:0c:d6:12:
9a:ee:ef:4f:21:88:56:df:e0:69:eb:b4:5a:5c:8d:b6:eb:16:
24:65:83:80:43:7a:7e:55:7a:93:79:ec:6f:bf:33:8e:d1:69:
e4:aa:2c:97:5a:dc:e1:17:6e:58:50:cf:c1:39:96:94:b9:b0:
7e:c0:3d:5e:7e:6d:22:64:af:85:39:7e:36:84:94:96:c9:14:
6e:4f:2c:98:e6:e3:70:4a:0b:dd:af:c7:24:69:c5:7d:30:04:
eb:e5:e9:5a:31:c3:55:3e:c5:7e:14:e2:3e:19:42:5d:71:9c:
1b:2e:d0:2f:9d:83:fe:df:8b:0b:d0:59:c7:03:99:b4:c6:28:
67:fe:21:c0:a0:71:4f:c3:99:47:fe:f1:25:e9:e6:12:b5:8b:
e9:4e:32:23:0b:16:11:cc:30:1c:fa:7d:7c:ec:34:22:2c:5d:
4e:76:7c:7b:56:98:2c:13:ba:78:26:8a:ac:b7:7d:29:13:b1:
db:33:3a:1d:24:b0:7e:2c:7e:51:65:ec:eb:49:0a:54:f4:a6:
5c:51:38:10:ee:4f:73:01:c2:c8:b6:4d:5c:54:21:c2:34:3d:
cb:ce:00:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:48:39 2025 by rpki-client