Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json)
Hash identifier: Hxg1mO8X7DbKcKSc06ll725sv6yGeTcxK6N5QxEryGA=
Subject key identifier: EF:F3:55:5F:C0:9C:BD:36:67:22:AB:D8:FC:65:72:7E:D7:9B:9F:C0
Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Certificate serial: 01964F35D72F4DBF440832785430688340F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 18:00:50 +0000
Manifest this update: Sat 19 Apr 2025 18:00:50 +0000
Manifest next update: Sun 20 Apr 2025 18:00:50 +0000
Files and hashes: 1: ZLef86UZ8-ykPDzWWLmzoQSdgC4.roa (hash: 9D+NhHpbmJi6ZpbrwdmFqtG+bLkEiMEM9kjTpQm+k4M=)
2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: 6/PP9huqciY1+TMVQ1vhcO6O5xLKQwhXLXigQrat9K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:35:d7:2f:4d:bf:44:08:32:78:54:30:68:83:40:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f
Validity
Not Before: Apr 19 18:00:50 2025 GMT
Not After : Apr 20 18:00:50 2025 GMT
Subject: CN=eff3555fc09cbd366722abd8fc65727ed79b9fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:77:1e:62:5f:ad:2e:44:e8:f0:9d:66:40:
a7:4b:88:43:ac:14:75:8b:ff:95:9d:64:d6:a7:b6:
1e:60:84:0e:88:cf:31:e8:98:de:c3:c0:90:9b:ee:
64:86:69:4b:c5:4a:61:f3:40:3a:80:28:13:54:40:
30:10:90:2e:10:26:56:12:1b:bd:6a:f3:f7:8d:db:
f1:36:b4:4d:93:86:08:f0:e8:6f:89:b2:d4:38:32:
04:51:ef:94:15:d2:cf:88:50:7b:50:54:6d:8e:50:
c0:f6:64:b8:8b:45:18:77:6f:a2:0f:8d:d3:60:0d:
13:a7:87:9e:5a:ca:e3:5a:35:43:0c:0d:13:9e:07:
7a:a6:42:89:94:70:46:0f:77:f4:9f:b2:89:7a:b2:
13:cc:74:a9:c2:cd:cb:7a:2f:06:4e:c9:3f:76:db:
2f:67:79:aa:0c:53:08:3a:0d:42:13:37:30:b9:d4:
44:37:51:b5:0d:2b:d4:b2:8b:51:0f:dd:54:66:3b:
96:81:a6:86:95:52:b4:8f:79:2b:c4:1b:9c:7a:81:
fa:fc:8b:02:08:07:29:11:d8:9b:7d:9a:4f:68:10:
fd:0b:5a:2e:8a:24:f5:4a:11:37:b2:39:81:93:18:
19:92:3d:28:b2:66:51:61:11:23:55:ee:c3:18:54:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F3:55:5F:C0:9C:BD:36:67:22:AB:D8:FC:65:72:7E:D7:9B:9F:C0
X509v3 Authority Key Identifier:
keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:93:aa:8d:7a:73:26:33:ca:52:c3:e2:2c:77:08:44:8f:a0:
3c:86:0b:85:33:71:e7:bb:f2:49:7e:d4:dc:b6:6c:9d:62:35:
bc:4e:09:ff:6f:73:22:96:2f:89:01:c8:79:85:98:76:45:1a:
a9:4e:4c:5d:90:11:89:43:6d:c1:8d:47:ec:4b:29:3d:b2:b4:
46:9f:1a:85:4b:81:9c:13:ba:ac:a7:25:31:50:71:e3:0f:dc:
98:e5:ce:76:fc:34:1e:8f:b1:29:3e:9c:55:2f:9e:00:ae:56:
9b:89:b2:b4:c5:3b:8d:7c:35:d1:8d:5d:2e:1e:b0:60:97:25:
2e:da:e5:f0:68:97:bb:8f:86:b8:d2:2a:37:ad:52:f9:19:39:
9e:19:01:98:ca:cb:d3:cc:ab:e5:20:68:1d:25:a8:1e:f2:33:
5f:97:30:9d:ad:b4:92:44:83:b6:5f:04:17:9b:28:87:16:7c:
69:e6:80:54:bf:de:e8:ee:87:25:89:19:c9:c4:bf:02:b6:99:
02:6b:f4:ee:43:a7:20:5b:7c:5e:89:b8:4a:8a:8b:5b:55:a0:
5f:92:67:28:4d:fc:b1:60:7b:6f:47:5e:0f:89:bf:02:74:e3:
77:04:0b:14:70:24:50:7e:cf:b5:fd:9d:7f:cf:fe:02:5d:31:
4a:84:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:08 2025 by rpki-client