Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
File: fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft (raw, json)
Hash identifier: ws/3OBdultt0+dkOuSyvGjZLCiRtQearoQxZh+MYpFI=
Subject key identifier: FA:86:A6:88:1C:92:45:29:33:E0:16:06:53:AC:3A:AB:14:36:E0:86
Authority key identifier: 7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
Certificate issuer: /CN=7d9656d5867b43ce506445290bba705722260586
Certificate serial: 019609B083D1CB90A2738D084203F19A9A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
Manifest number: 0A38
Signing time: Sun 06 Apr 2025 06:01:25 +0000
Manifest this update: Sun 06 Apr 2025 06:01:25 +0000
Manifest next update: Mon 07 Apr 2025 06:01:25 +0000
Files and hashes: 1: fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl (hash: ZTg5v0VmZB1UKP+BBbsx/2KzjmNWfvGaKhmoGG9DTwM=)
2: mXWmJZwIRdfowUzFV6EabzHZO1M.roa (hash: k+dckJef8uAl2tggOKFrpt5ypzOEodrfcc+zZEAtNyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:b0:83:d1:cb:90:a2:73:8d:08:42:03:f1:9a:9a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9656d5867b43ce506445290bba705722260586
Validity
Not Before: Apr 6 06:01:25 2025 GMT
Not After : Apr 7 06:01:25 2025 GMT
Subject: CN=fa86a6881c92452933e0160653ac3aab1436e086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:4f:39:fa:a2:f5:a1:b4:9d:f1:21:02:41:
65:e9:95:91:50:7a:c0:53:69:e5:15:91:e9:b7:63:
50:ec:50:4c:5c:12:c4:54:71:47:29:2c:b3:a2:95:
2a:ac:f3:aa:ea:01:4a:b8:22:08:2a:71:ae:4f:36:
d3:51:58:83:6d:5a:db:f0:e8:48:cc:d5:08:44:50:
38:a1:a7:89:c3:a6:3e:57:9b:fc:42:c8:d3:61:fe:
bc:85:50:5c:c4:c4:13:b5:db:1a:ea:0c:59:b0:8e:
d3:fd:e3:78:8b:90:ca:c9:fb:69:6c:8c:92:06:bf:
82:33:6c:57:98:57:91:cb:1d:df:44:75:d2:d3:1a:
ca:0e:b3:9f:20:2f:c8:9b:39:93:ad:3b:a7:33:af:
f1:9c:cb:7e:be:9f:0b:7c:52:af:d2:8d:15:b5:66:
8a:60:fc:11:e8:91:d2:a0:33:39:0a:9f:f6:25:96:
9b:50:b2:f2:b6:d4:24:6f:f3:af:7c:92:c3:fc:fa:
1e:b9:28:6b:b9:34:c1:10:84:9b:fe:9c:68:82:47:
d9:70:08:84:e4:ee:e0:49:d0:56:55:e9:0f:fb:06:
79:10:25:4b:8b:e0:cc:91:df:47:b0:1e:c6:fb:83:
cf:7f:ec:8e:d9:c8:08:e5:75:57:f1:c3:00:1e:30:
48:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:86:A6:88:1C:92:45:29:33:E0:16:06:53:AC:3A:AB:14:36:E0:86
X509v3 Authority Key Identifier:
keyid:7D:96:56:D5:86:7B:43:CE:50:64:45:29:0B:BA:70:57:22:26:05:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZW1YZ7Q85QZEUpC7pwVyImBYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0f31d-b4bf-450d-9acd-0a6b536c4394/1/fZZW1YZ7Q85QZEUpC7pwVyImBYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:22:86:0e:e8:0e:f6:9a:b3:86:97:35:74:7b:ee:2c:e0:36:
8d:de:68:b0:eb:2d:60:8a:8b:d5:70:7d:2b:36:f2:0e:08:a7:
66:5d:a0:03:3d:11:f0:53:ba:77:e8:54:12:eb:2c:6a:05:a4:
92:59:89:cf:d0:da:4a:74:33:ea:54:75:db:13:7b:4d:88:82:
9d:20:50:de:9d:f1:d5:d6:93:fd:a3:e0:88:e9:dd:26:b8:4a:
35:35:78:ee:2d:4e:31:f5:35:94:2a:37:e7:9b:ae:d4:e8:25:
c3:3b:62:60:af:22:5d:37:1c:71:ce:a6:e3:45:93:fc:03:91:
5b:0e:33:59:41:5e:00:2a:47:d1:e2:81:76:65:96:3c:a8:49:
d3:1e:38:78:82:d4:9f:b4:51:49:20:65:a3:0a:f6:28:3b:e5:
ca:b1:73:a2:5e:e8:14:43:1b:9b:8b:5c:44:f7:40:31:35:28:
ec:6e:ba:05:88:a4:a1:03:a4:79:e8:4b:01:8e:70:c7:f0:c3:
4f:70:71:ee:45:56:a7:f5:6d:75:bb:b6:28:33:a2:ae:85:87:
08:36:dc:d6:1b:ca:46:22:e7:8a:a3:ac:13:f6:69:79:22:97:
53:b9:48:92:6a:80:f5:e6:5b:03:d3:eb:50:b4:63:e1:47:f6:
1d:3f:4e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:07 2025 by rpki-client