Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: DtP6ANcT2B+Lo4pyOexJVAd4Ov30pfQmGtm99PTCLOg=
Subject key identifier: D5:E1:E0:DF:4F:34:80:B3:11:E4:AE:4A:7E:26:99:14:E2:5D:E3:BC
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 01963DD449407DFF374D55C64BFC58F152F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 09B7
Signing time: Wed 16 Apr 2025 09:00:44 +0000
Manifest this update: Wed 16 Apr 2025 09:00:44 +0000
Manifest next update: Thu 17 Apr 2025 09:00:44 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: 68JZj9NgBkbKKCAozM3ke0Ihrox7INDDWCtRkdojfpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:d4:49:40:7d:ff:37:4d:55:c6:4b:fc:58:f1:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Apr 16 09:00:44 2025 GMT
Not After : Apr 17 09:00:44 2025 GMT
Subject: CN=d5e1e0df4f3480b311e4ae4a7e269914e25de3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:d5:6f:99:b6:b7:91:76:b4:32:96:05:a5:
51:16:e7:d4:91:34:f4:41:a9:ca:27:01:ae:79:e4:
ec:8d:23:8c:e3:0a:95:b0:85:50:71:2a:67:c8:bf:
e1:99:52:4c:43:7e:8f:ff:dc:b0:05:ad:d8:da:27:
70:73:80:ec:78:dd:55:29:9c:87:d9:fe:62:76:20:
9d:b0:bd:11:24:4a:cc:06:da:61:f7:ea:27:ea:fd:
d7:ba:7b:1f:24:b0:b7:33:7a:a0:0d:e6:eb:e9:ca:
95:65:a0:f5:7f:4f:28:79:82:7c:dc:97:62:14:c8:
6d:af:42:a5:37:60:f9:4f:3d:a1:87:8a:e5:e9:c3:
7f:f0:3b:13:01:c9:ac:25:8d:f6:22:c1:a0:67:63:
8f:73:fd:41:7f:a3:d6:17:4e:10:27:74:1e:14:93:
7b:0a:7e:3a:c8:c7:6e:9c:a1:8f:79:bf:52:e6:f6:
7c:c2:d4:63:a4:e3:58:c4:e5:53:e2:33:5d:80:49:
29:59:a2:8e:1d:15:50:72:75:49:ef:f1:6f:f2:06:
93:f4:53:70:60:7c:d5:7c:f3:93:d0:0a:e9:60:5b:
c3:5d:f1:fb:a9:e0:c6:e7:c8:2f:57:81:59:51:8e:
ee:79:75:c5:4a:5c:ad:7d:00:58:0e:6b:90:6c:a9:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E1:E0:DF:4F:34:80:B3:11:E4:AE:4A:7E:26:99:14:E2:5D:E3:BC
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1f:4e:50:89:1d:63:7c:33:2c:fb:91:4e:37:03:c6:a9:90:
24:af:e8:6e:a8:7b:b9:93:86:e4:15:f7:e2:26:eb:af:09:ae:
1a:3e:67:39:b6:93:9a:74:fe:2f:35:ea:d6:54:a5:73:9f:74:
3b:07:86:53:44:d1:60:d2:75:b4:91:17:94:00:49:f3:f4:9c:
25:bf:61:05:28:ce:46:7f:e2:e0:41:f3:a4:ae:45:3f:6d:e1:
20:af:d6:d6:23:f4:61:2e:fa:a0:6a:7f:3e:ec:03:4a:e8:b7:
10:95:8a:d5:96:d9:d9:78:90:58:2f:91:d9:0c:fc:f5:3d:b1:
7a:75:68:a0:34:32:c0:0a:c8:08:fe:6e:17:7d:e8:13:44:04:
fa:83:64:85:d0:e0:a6:a1:13:ca:f1:6b:ae:02:18:68:46:0f:
a5:c1:61:83:c0:33:c3:91:0c:60:31:99:7e:90:c0:93:3a:aa:
5c:fa:9d:fd:04:fd:a7:4e:9c:a8:37:82:3a:27:53:54:04:46:
af:18:e2:61:10:41:df:ee:1f:31:35:da:a3:5b:9e:ec:ce:d6:
ee:34:e9:57:01:46:75:2d:61:0e:a2:0c:01:63:e7:21:f3:f8:
f1:9c:a6:81:f1:89:d5:16:51:0f:b4:07:85:4f:bf:84:c2:17:
62:f4:31:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:07:56 2025 by rpki-client