Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
File: ZrB43tN1kjDKLho76QZjjRMGuQg.mft (raw, json)
Hash identifier: N0jLsByUNUVKxR1KmMH4mVz7WZ289rAGPsK4EhBktok=
Subject key identifier: 87:90:72:EE:EC:3D:CB:08:69:A1:15:01:9E:18:7D:5B:08:C8:E1:DF
Authority key identifier: 66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
Certificate issuer: /CN=66b078ded3759230ca2e1a3be906638d1306b908
Certificate serial: 01965838CB5AA7ACAE18954338F7E4EF3545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
Manifest number: 0846
Signing time: Mon 21 Apr 2025 12:00:39 +0000
Manifest this update: Mon 21 Apr 2025 12:00:39 +0000
Manifest next update: Tue 22 Apr 2025 12:00:39 +0000
Files and hashes: 1: ZrB43tN1kjDKLho76QZjjRMGuQg.crl (hash: SbZloIplW1Q2sirnY2gJnvz/thSawIeYf/rVG6Z/5ZM=)
2: mHxy9rJdZpH5hrd46ZQbudzuLF8.roa (hash: xwokQPLLEdy+DbSgYqJ8Dht6nsu849d5eiNxGGm9TUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:cb:5a:a7:ac:ae:18:95:43:38:f7:e4:ef:35:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66b078ded3759230ca2e1a3be906638d1306b908
Validity
Not Before: Apr 21 12:00:39 2025 GMT
Not After : Apr 22 12:00:39 2025 GMT
Subject: CN=879072eeec3dcb0869a115019e187d5b08c8e1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:af:25:da:2c:43:90:ad:5e:59:db:68:09:
bf:cb:fc:d9:14:04:36:72:21:ba:a4:f3:78:e8:67:
6f:41:f4:fa:b7:36:21:02:06:66:3f:2e:6f:a8:24:
39:64:4c:95:34:14:f4:8e:c0:6e:92:ba:21:2e:ce:
32:c3:d7:53:c2:d1:85:90:9c:5d:ff:a1:24:a8:da:
6c:39:00:1c:d3:db:c6:fc:8f:04:e6:8f:d9:cf:15:
de:c2:e5:2b:49:b5:10:85:31:7e:61:0a:d3:6b:e3:
bf:cc:6a:27:5d:13:e4:80:f6:1c:04:2d:cf:a1:59:
42:0c:21:35:05:9c:1d:bb:04:3a:9a:b1:13:a2:4a:
a7:dc:43:38:34:c5:7f:ad:34:62:48:bb:37:f4:25:
19:5d:37:c9:c5:56:5b:8d:40:d0:56:ed:12:b9:8c:
78:80:55:c1:c3:f8:2f:e7:fd:b8:c0:6c:6e:97:5b:
63:96:ce:e6:8c:e7:b7:50:0f:a0:5b:df:bd:d9:73:
ee:41:b4:32:ad:14:eb:58:10:e9:77:bc:19:96:84:
1a:c9:80:86:07:7f:3d:ba:af:c4:c7:49:b9:3d:b8:
be:be:1b:fe:a9:c8:64:e1:f3:2f:e6:41:ac:f9:65:
8f:a6:45:c5:db:fc:bc:fd:c5:72:04:50:17:0d:77:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:72:EE:EC:3D:CB:08:69:A1:15:01:9E:18:7D:5B:08:C8:E1:DF
X509v3 Authority Key Identifier:
keyid:66:B0:78:DE:D3:75:92:30:CA:2E:1A:3B:E9:06:63:8D:13:06:B9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZrB43tN1kjDKLho76QZjjRMGuQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/763592-a480-444f-a881-402e62c54d32/1/ZrB43tN1kjDKLho76QZjjRMGuQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:99:47:d5:17:dc:d1:af:b0:91:63:22:75:dd:55:00:41:1e:
a0:d6:b0:aa:f1:a5:f1:11:3f:16:92:e6:0a:35:b8:ed:6e:8f:
95:cf:de:b8:b5:bc:3f:04:61:25:9e:8d:5d:ef:2e:c6:c3:9a:
d1:b3:99:d3:cc:9b:8d:5e:2c:23:8e:44:38:f7:34:5e:4b:6a:
f3:e4:73:b3:95:9f:a7:36:22:e0:4b:43:e6:3f:fd:76:de:a0:
58:6c:a9:36:19:3a:d5:03:21:c9:d0:08:3f:04:f5:51:bd:5e:
da:7b:fb:e1:29:4f:51:15:0c:b8:01:32:8a:18:be:14:a7:36:
1a:9c:fa:db:17:8c:67:b3:26:9c:63:a2:81:32:e3:a9:c7:94:
9c:18:5b:53:23:bc:78:67:55:79:96:9c:fa:06:3f:8a:ce:a0:
ff:c2:b7:e3:25:ae:73:48:9d:d1:98:ae:a9:63:75:1b:05:0c:
0f:cd:42:91:4d:0b:b2:6f:5a:ef:f9:69:55:a7:04:1f:f2:0e:
df:a2:17:53:e5:28:3e:0e:45:3e:78:95:72:b0:6c:ad:94:d9:
8f:c6:dc:36:56:96:81:6c:86:7c:4e:0b:78:64:01:e7:a7:9c:
2a:55:f8:e0:c6:e2:f7:ed:38:e5:19:3e:cf:7b:0b:d7:48:d4:
d6:bb:8d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:10:29 2025 by rpki-client