Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
File: ZixsPSLPaxAdcUgAbaenKE3LsyA.mft (raw, json)
Hash identifier: DlTR8e0586fM23iT78xupWuhUVsII+wLdxLIVBK4pHE=
Subject key identifier: 3C:C7:8C:93:46:F1:83:D0:7F:4F:0C:17:C0:D7:42:CD:BD:0F:23:F2
Authority key identifier: 66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
Certificate issuer: /CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Certificate serial: 01964F6D1FE3E3F7AE3931846ACD056B5BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 19:01:13 +0000
Manifest this update: Sat 19 Apr 2025 19:01:13 +0000
Manifest next update: Sun 20 Apr 2025 19:01:13 +0000
Files and hashes: 1: 4Oh7XZMGUvgYsZH7CZdGUoLIrDw.roa (hash: h4FhAkel555dNYUyqzqCdfQBJmgL5LydnG571p+4BQM=)
2: NrJiTnkwY5gDZRzjb1VKFaHAiqc.roa (hash: EZzv8aq1wUrfRrM9fo8iLug2Yq9YGVoqZENURQoeQj4=)
3: ZixsPSLPaxAdcUgAbaenKE3LsyA.crl (hash: AkPZ8FrknymyaK9qFtqpFOlbEr7kC1e2WbNiSPbP4PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:1f:e3:e3:f7:ae:39:31:84:6a:cd:05:6b:5b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662c6c3d22cf6b101d7148006da7a7284dcbb320
Validity
Not Before: Apr 19 19:01:13 2025 GMT
Not After : Apr 20 19:01:13 2025 GMT
Subject: CN=3cc78c9346f183d07f4f0c17c0d742cdbd0f23f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:42:7f:4d:1d:d4:77:bc:fd:37:a2:3d:92:
06:be:a1:e3:53:11:52:31:c7:6b:c9:b9:44:67:b2:
9a:8f:ba:8e:aa:bb:f7:a6:2f:97:d6:a7:a7:88:2c:
46:54:8e:93:d4:2f:07:e4:18:6f:60:ed:7f:cb:f3:
22:f6:e4:55:64:76:e0:0d:9b:88:c4:5e:52:ac:63:
44:a2:b0:f2:41:11:c7:56:f8:00:bf:62:cd:f1:ef:
07:4c:ce:2a:21:21:29:ff:b3:1f:4c:d8:91:31:36:
63:20:0f:ec:24:53:58:47:a5:b6:f9:26:a3:6d:db:
ad:3f:76:68:56:2f:05:6d:93:69:dc:60:2a:0a:79:
20:46:cf:2b:19:32:8c:0a:fe:46:96:bf:21:0a:d5:
4f:36:9d:37:40:7e:f6:83:20:62:c3:a5:32:09:a8:
0d:b7:2d:65:f5:38:19:c0:3b:e3:ec:a3:8e:f7:9d:
fa:01:89:76:83:09:77:7b:63:cb:49:dd:42:79:1e:
5a:eb:3c:2f:63:3d:bd:14:0b:64:50:0e:5c:1b:65:
b9:e8:01:cf:18:6f:3d:d5:08:27:04:f7:ad:37:e0:
0d:f9:ea:a4:77:a4:55:65:86:80:0e:84:6b:bb:10:
2b:4d:b6:21:e1:f6:ba:67:1d:f4:d5:ee:cb:24:19:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C7:8C:93:46:F1:83:D0:7F:4F:0C:17:C0:D7:42:CD:BD:0F:23:F2
X509v3 Authority Key Identifier:
keyid:66:2C:6C:3D:22:CF:6B:10:1D:71:48:00:6D:A7:A7:28:4D:CB:B3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZixsPSLPaxAdcUgAbaenKE3LsyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3a886e-4c26-425a-a14d-f21b6ae3be6c/1/ZixsPSLPaxAdcUgAbaenKE3LsyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:a2:67:38:ca:80:c7:7e:13:2d:bf:0b:6b:16:84:23:5a:
8a:12:7e:dd:cf:71:de:d6:2d:8e:f6:2e:f4:3a:8b:f3:50:0b:
54:c2:fa:ff:4f:63:42:08:23:ca:be:97:bd:b8:9a:11:cf:98:
4b:4f:be:89:97:71:38:fe:ca:ed:1b:3a:60:0b:59:c0:68:d7:
7a:b5:72:2c:e6:10:87:66:00:71:3f:ce:32:42:85:55:ea:84:
c6:f5:7a:ec:c1:f0:1b:76:db:ba:32:70:3d:72:a3:2c:7c:60:
e4:4d:cf:54:63:e7:ff:31:6c:a7:1d:e1:1a:8f:fb:35:93:2a:
15:4c:90:e4:fc:4c:ce:d7:d9:87:fb:f5:17:0b:6e:ae:b4:a5:
92:f3:27:40:55:22:84:ac:57:09:df:55:ae:9b:e1:82:53:50:
87:28:57:95:f2:1f:06:cb:ff:11:59:f0:a4:d7:6a:e1:23:ac:
60:b2:4d:32:b5:8a:c7:e4:53:a4:ac:f3:aa:05:59:a5:01:f4:
2d:15:2e:9e:f2:32:ab:8b:7c:e1:a2:80:83:a6:b6:90:bf:b9:
33:80:95:68:17:68:56:08:dc:0b:9a:db:58:5c:60:0f:1d:57:
b4:e0:3c:3f:3e:f6:aa:d5:41:99:63:f7:3d:db:ac:61:78:f3:
a6:09:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:34:17 2025 by rpki-client