Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json)
Hash identifier: whKLyfKj1ai4y6L3/CeOVwXtgE/CrNxKkKcZ4epUAQM=
Subject key identifier: 35:16:F4:80:3E:8E:6B:46:D5:A3:30:6E:32:9B:3B:46:EB:D3:89:3F
Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Certificate serial: 01962D1883225DE67D5FBE0B308464984AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
Manifest number: 0C1F
Signing time: Sun 13 Apr 2025 03:01:43 +0000
Manifest this update: Sun 13 Apr 2025 03:01:43 +0000
Manifest next update: Mon 14 Apr 2025 03:01:43 +0000
Files and hashes: 1: c0UDF77YneOEpDbpE_XbzKIY8Uk.roa (hash: foV69gLO281sdub8JnH51RHuvFTq6y1JtigYK6aR0Ho=)
2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: 5AVPr2gVsAhbGahj66nppCMV+F+WSKVMrDAAYqgJVXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:18:83:22:5d:e6:7d:5f:be:0b:30:84:64:98:4a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411
Validity
Not Before: Apr 13 03:01:43 2025 GMT
Not After : Apr 14 03:01:43 2025 GMT
Subject: CN=3516f4803e8e6b46d5a3306e329b3b46ebd3893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:3b:7c:39:47:9d:70:94:18:00:e6:1e:27:
ca:1a:22:a2:2f:9d:be:22:a0:6b:a3:63:83:cd:07:
85:e6:23:bb:4f:9a:4f:d9:55:1e:16:9c:6a:29:4b:
09:79:68:ec:9d:b7:42:8e:94:0a:10:46:09:ba:53:
c9:db:13:8e:c4:36:c3:b7:e6:b9:7a:f7:71:4f:d6:
92:48:fe:fe:96:55:08:de:ab:5e:d2:e5:18:ce:c8:
21:18:f0:c4:d9:bb:1e:ea:43:b7:ee:98:df:e2:85:
b3:d3:07:c1:a6:11:40:d9:79:d3:81:45:47:fe:bd:
b0:cc:0b:a8:40:42:97:7f:5a:2e:67:d4:a2:ae:09:
8c:0b:71:af:d8:11:36:90:fb:e9:e7:48:59:40:dd:
34:90:84:77:6f:18:0a:26:d6:2d:85:b3:83:fe:44:
00:76:ab:67:25:b9:63:14:3d:b4:e0:45:dd:f8:8f:
93:9e:da:83:0a:e0:3e:58:c8:fe:9b:12:db:71:b8:
5a:d4:eb:a7:8f:5a:24:05:53:c1:78:58:e5:66:72:
28:39:cb:91:d7:2e:83:d6:7a:61:ff:9d:bd:6e:a0:
27:67:a5:3a:67:99:9d:b8:a1:49:a4:da:5c:0e:ef:
2c:64:a7:85:3c:07:cc:2d:fd:8d:88:74:0f:bd:ac:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:F4:80:3E:8E:6B:46:D5:A3:30:6E:32:9B:3B:46:EB:D3:89:3F
X509v3 Authority Key Identifier:
keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:44:22:31:68:db:cc:04:d8:04:39:b3:2e:dd:02:73:37:69:
42:f7:d8:4d:2c:13:e1:0c:c4:e8:76:9f:81:4a:4e:25:f5:67:
d0:16:c4:b6:4f:29:88:e6:62:5c:37:ad:62:bd:f9:c7:f1:f0:
e7:9e:c9:5c:93:b5:e0:c5:c8:ba:30:c3:15:d0:00:51:8e:c0:
c5:4b:ea:43:c9:a0:96:1d:e2:be:1a:38:e7:ac:64:81:e3:46:
ce:d5:39:16:4b:75:bb:7c:ce:4c:e9:47:eb:c2:48:0f:f3:fb:
bd:4c:e1:dc:c2:b0:e8:00:93:bc:49:54:f2:21:3d:59:69:ff:
cc:d0:12:e7:2b:d5:10:e7:64:7d:67:a3:4c:cd:e4:7c:8a:84:
aa:f3:8f:1b:80:62:20:c8:ce:cd:70:a8:ad:23:f4:76:24:e2:
e9:ff:66:d8:dc:65:6e:c4:a8:88:f6:59:50:b2:ad:69:39:16:
d7:91:e0:a2:a3:94:6c:12:b9:ef:72:21:64:1a:21:4d:f3:18:
c5:d1:14:85:96:43:8a:ef:de:bb:e5:e7:98:e5:3e:3a:3e:08:
ae:70:3e:84:55:78:d6:2e:fe:98:e0:e2:8a:af:f0:8d:b5:a3:
c0:0d:b8:39:2c:11:8a:8c:c0:2b:c4:f5:ee:0e:0d:2e:ce:73:
f2:d2:cc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:07:59 2025 by rpki-client