Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json)
Hash identifier: +PGzgKNZH/pnBLIgp5/IuAznjD3ZmhHPpRfzoPT/c5E=
Subject key identifier: E8:88:88:12:B6:7D:27:F6:72:52:2B:25:5D:EF:D2:CB:01:02:9B:48
Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Certificate serial: 01964E2380FAC78D0B1AE240CED1E8CC1DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
Manifest number: 03F2
Signing time: Sat 19 Apr 2025 13:01:11 +0000
Manifest this update: Sat 19 Apr 2025 13:01:11 +0000
Manifest next update: Sun 20 Apr 2025 13:01:11 +0000
Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: M0YbNji1CjiVujAJk0kDCCo+NvdAfBIrRQ9zo2iu6II=)
2: qV1VADgnM-UwMyvnzX700wlOQrY.roa (hash: fchq7gmgdQ6iV6UqjjJyNU6Y7myn1bicxh9WArTx5O4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:80:fa:c7:8d:0b:1a:e2:40:ce:d1:e8:cc:1d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c
Validity
Not Before: Apr 19 13:01:11 2025 GMT
Not After : Apr 20 13:01:11 2025 GMT
Subject: CN=e8888812b67d27f672522b255defd2cb01029b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:b0:fe:a3:69:91:78:c2:bf:13:6b:21:22:
4a:49:83:69:a7:0d:97:2f:17:30:96:75:be:12:09:
d3:c6:e6:b8:1e:2a:34:b9:c1:1a:35:1f:13:07:76:
c2:91:f1:fb:c3:44:69:c1:2c:ab:50:34:41:c2:51:
cc:cb:af:0a:64:fe:2a:7d:5a:72:9d:de:6b:ee:77:
93:a3:6b:02:d9:72:9c:47:55:56:80:f2:47:82:4b:
31:cb:de:2d:34:2b:25:b8:72:56:28:a9:3d:05:ff:
c6:91:e1:80:e5:c3:a6:b4:7c:0a:ad:91:0b:87:23:
e0:23:85:6f:ad:2b:e8:fa:2f:c2:a4:a5:15:21:ed:
ff:56:da:82:64:d7:b8:64:fc:73:04:d7:5f:0f:9d:
d7:99:b4:cb:cc:d1:1e:cc:d5:a6:3b:62:78:66:f6:
fe:82:7b:6a:7b:8c:8c:8d:3c:ab:68:a5:a2:92:cd:
75:dd:2d:4f:56:77:c4:fd:3d:2a:e5:cc:b7:3f:f6:
f7:3c:2d:68:6f:37:dd:d5:a1:28:c1:f8:2f:18:5e:
5e:27:16:19:1d:fc:3f:b5:53:4f:8e:b7:db:60:e2:
b0:fb:31:82:54:e0:57:90:d0:40:c1:d5:e9:5b:5a:
30:ce:7a:9f:78:58:3a:cf:e4:d2:66:08:9f:bb:3c:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:88:12:B6:7D:27:F6:72:52:2B:25:5D:EF:D2:CB:01:02:9B:48
X509v3 Authority Key Identifier:
keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9f:dd:24:87:87:81:db:6e:78:27:40:df:95:a7:4c:f6:64:
26:4a:27:e3:79:17:42:d3:ba:1a:2e:9e:70:2b:0d:64:32:3d:
d0:ac:63:ef:61:00:0a:92:a1:1f:6d:66:10:42:1c:fa:36:86:
9f:3b:09:48:5a:7e:72:8f:e4:a1:e3:0a:fb:34:67:4d:fc:0d:
d7:ad:b0:cb:93:5e:51:a3:36:b7:b6:32:33:9e:3c:44:59:e8:
77:c4:1d:a6:ff:fb:73:b3:5d:ce:ec:b7:08:dc:90:51:2e:c3:
55:eb:b4:8d:2a:4b:b1:8d:bf:93:d0:f1:e4:52:a0:db:26:42:
69:e3:ad:ca:e8:96:57:f1:79:be:e9:2f:04:74:e0:9f:96:5b:
23:74:eb:6e:99:72:a1:28:8c:9a:8e:73:54:fe:a1:3f:29:71:
e9:0f:cf:bd:4b:32:01:e4:a4:f6:bd:00:ad:be:a2:4f:f1:6b:
80:35:b6:72:0d:03:68:20:38:44:eb:a2:b8:32:e8:1d:98:9f:
b3:be:26:92:dd:7f:7a:b2:89:b2:a5:62:97:ce:05:48:af:d9:
20:70:2e:39:cf:0c:e2:7c:76:44:48:cf:0b:6b:d0:a7:e9:06:
46:a3:1b:b0:91:cf:bd:26:27:44:3c:5f:0c:65:11:a4:a4:ef:
81:b1:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:08 2025 by rpki-client