Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: l3+xIktVfY/LhCyF/OggMOMTm3vfrN1Ktea3JhUrliU=
Subject key identifier: A3:3F:AB:AE:C4:F7:F5:E4:91:28:F4:9E:DD:BF:4B:15:66:DA:FF:A2
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 01964AEABD2A8A8F29E576330014B6FD6FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 13D0
Signing time: Fri 18 Apr 2025 22:00:19 +0000
Manifest this update: Fri 18 Apr 2025 22:00:19 +0000
Manifest next update: Sat 19 Apr 2025 22:00:19 +0000
Files and hashes: 1: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: pD37k9nnuBSz0Vk1IO4lgX2k5use7byZBB17krbe63I=)
2: NEgXAX_wlUMaQy2Alio_tXjqDko.roa (hash: AzGPeergn3UOGKBGdY9DWg2cAqJA+mog0I2Sf6Bpi0g=)
3: piNzw1TtbP-p8HWhuy6SBF8spgg.roa (hash: wNEUGiASiQTLAx7gOGoQvQVkZK49FM62Tev24iu4h1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:bd:2a:8a:8f:29:e5:76:33:00:14:b6:fd:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Apr 18 22:00:19 2025 GMT
Not After : Apr 19 22:00:19 2025 GMT
Subject: CN=a33fabaec4f7f5e49128f49eddbf4b1566daffa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:aa:1f:e9:72:f5:7f:93:50:6c:f5:f2:a8:
a1:27:85:6b:8d:c2:50:c9:f6:e3:e5:70:d5:ca:d5:
5e:22:89:fe:a7:92:9a:75:f9:77:0e:00:fb:f5:19:
c2:66:93:1d:63:94:6b:3d:b1:6a:bf:f0:e9:05:e0:
fd:5d:57:28:8d:59:ce:be:19:ea:96:50:7a:55:87:
c8:6f:7d:c6:2b:25:f2:90:6a:cd:2b:f6:63:f0:56:
1f:8d:93:a0:1a:36:4c:8b:d8:2b:c1:66:84:e2:84:
d0:d3:07:78:28:dd:c8:88:f6:0c:8f:ba:20:8e:ee:
28:cb:84:28:a5:0d:78:dc:0b:9a:f9:c7:27:e1:5e:
aa:1e:e7:4e:a8:0c:86:ff:e1:5b:65:53:b8:1e:e6:
c2:53:bd:d9:b0:c7:46:24:19:82:d1:ea:d4:f2:c2:
53:a9:10:f8:b4:33:04:55:3c:5c:7f:cd:4e:2e:79:
d3:79:fe:d2:80:a3:2d:f7:56:33:67:10:d2:72:7a:
be:f4:a5:4c:5a:ce:38:19:32:19:71:87:0d:4c:ef:
b2:7e:89:ef:ee:59:91:ac:0e:d1:c1:76:65:10:6b:
c8:1d:d5:4c:3e:9e:b7:24:42:72:60:52:71:44:f7:
5f:35:ac:c6:bf:de:c8:f5:8f:48:e4:9f:2a:5d:1f:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3F:AB:AE:C4:F7:F5:E4:91:28:F4:9E:DD:BF:4B:15:66:DA:FF:A2
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b6:cb:ae:f3:69:a9:fa:30:56:17:75:fa:f5:29:aa:63:4f:
5d:08:f4:78:10:14:19:f8:9e:3e:c4:07:59:56:b9:bb:2d:ad:
a6:d6:67:b0:44:0b:8d:26:da:99:82:4d:08:99:92:5d:23:62:
0c:d8:7d:ab:60:dd:03:a1:bd:83:69:cb:fe:59:45:22:22:15:
57:24:99:8d:d7:04:c3:cc:94:93:e1:9c:39:34:38:42:76:e6:
27:3d:85:ae:b7:79:22:d0:ae:7e:59:32:5a:cb:93:8f:89:c3:
54:d6:2a:e6:77:06:57:b8:d5:92:8b:64:3b:bf:89:4d:d2:27:
3e:7b:ee:4d:ce:da:8c:1a:ab:34:20:17:8f:99:f4:7e:d1:44:
47:db:47:c3:09:96:94:e7:78:9a:77:d1:4b:12:ac:c3:14:77:
62:e3:d7:8c:63:c4:e4:f5:e9:2a:71:3a:9e:ad:2c:ee:5b:7a:
4d:ef:84:5c:66:1d:dc:7c:e9:94:19:a6:23:c2:3e:06:9e:25:
c4:69:b8:f2:b7:39:71:59:c7:e2:79:01:57:8d:ba:71:6f:3c:
23:67:66:8f:98:b6:9d:eb:30:27:09:0a:c8:a1:48:cb:4f:1c:
7e:63:4c:34:88:05:72:d4:9c:ce:93:11:65:18:8f:b0:f6:15:
f2:d6:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:41 2025 by rpki-client