Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft (raw, json)
Hash identifier: wXfc0lVu2YyNzBUsGwe3wv3KIE6wj8JFK1WIRx8BASw=
Subject key identifier: 92:63:8B:72:42:90:5C:51:26:F9:3E:EA:C5:DA:8F:37:7E:1B:5A:96
Authority key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Certificate issuer: /CN=66689087e787990916878db20d555684c22cd9d5
Certificate serial: 0196605FF40B7C5C40256443ED9A5BB66D1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
Manifest number: 043F
Signing time: Wed 23 Apr 2025 02:00:23 +0000
Manifest this update: Wed 23 Apr 2025 02:00:23 +0000
Manifest next update: Thu 24 Apr 2025 02:00:23 +0000
Files and hashes: 1: ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl (hash: P/sqXhxTvERLt3I0Qe5UvdM4k1oOMUtHsLL2SqSDR24=)
2: zMpvAV73BjDw8Fl29P7VCpuHc2c.roa (hash: wiQnFLVW7DG+EEkhJa3uDDbdHjfjWqUFceE8Iwhf9f4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:60:5f:f4:0b:7c:5c:40:25:64:43:ed:9a:5b:b6:6d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66689087e787990916878db20d555684c22cd9d5
Validity
Not Before: Apr 23 02:00:23 2025 GMT
Not After : Apr 24 02:00:23 2025 GMT
Subject: CN=92638b7242905c5126f93eeac5da8f377e1b5a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:15:22:58:05:82:6f:dc:ae:e7:2f:73:e7:
a3:d8:24:43:53:28:26:da:44:e4:a8:d1:28:c4:76:
44:a5:03:1e:e9:48:9b:4b:76:33:f8:cf:f4:ea:e6:
a3:ff:ee:6e:ef:3e:08:95:3c:5f:f4:fa:a5:a7:18:
29:ee:43:cb:99:02:69:e9:c8:d7:ee:6a:36:6f:67:
3e:c3:5f:fe:37:aa:60:f3:8f:a5:af:16:05:a8:97:
e4:1c:3f:42:29:43:82:db:44:04:51:b0:3c:56:3c:
0e:d0:47:43:b6:50:b8:ef:5f:8f:54:40:a0:3f:0c:
66:04:fd:bb:5e:df:c7:0b:96:9b:8c:33:fb:0c:84:
11:ee:18:42:07:c9:4b:c1:bc:22:4a:6f:98:e2:8f:
95:32:47:1b:06:08:c0:79:04:3e:ea:8d:4f:8e:d4:
71:18:e8:91:57:44:15:21:9c:a7:22:d5:17:e0:de:
a8:0f:0c:6e:ee:c1:6f:fe:d8:81:63:49:dd:92:f5:
34:c7:d7:c8:12:93:e4:03:b9:fb:38:97:89:80:4d:
73:1b:11:ee:59:8b:2c:c3:fa:6d:97:96:1c:1c:87:
dc:c7:e6:56:3a:7f:4d:e6:64:b2:b1:07:b3:89:be:
f2:ba:aa:21:3d:6f:d7:8f:b1:87:ec:56:5a:0c:1e:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:63:8B:72:42:90:5C:51:26:F9:3E:EA:C5:DA:8F:37:7E:1B:5A:96
X509v3 Authority Key Identifier:
keyid:66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:28:78:68:dc:3a:5a:b6:df:af:57:01:a2:6c:dd:33:8c:62:
6f:88:77:86:84:14:b0:7a:0d:97:8a:d8:bb:93:06:df:3e:ce:
fc:8f:bb:ef:ac:4b:10:49:ac:34:39:8f:0a:f1:e2:bf:2c:62:
4d:01:96:b1:74:8b:05:4a:39:f3:ad:b9:03:25:33:ac:9e:86:
87:95:a6:f7:ea:3f:5c:bf:2d:d2:91:14:67:34:ed:39:e1:f0:
1a:62:b3:0a:19:51:8f:a7:d0:0d:58:85:fb:e2:99:c0:31:e2:
2b:5e:d0:c9:1b:10:7f:2e:59:a0:94:29:18:3f:ce:46:01:48:
e6:eb:be:ea:49:e7:bd:75:53:33:b7:e4:34:b1:ab:43:54:fb:
85:4a:02:7a:a6:0d:4d:37:e3:ac:66:b1:2f:34:24:86:d8:c4:
c6:cc:80:b0:03:df:68:ed:8d:a4:7c:20:7d:37:44:31:38:76:
d9:82:b4:ac:8a:ae:63:0b:10:50:5f:47:d9:ac:d6:86:de:1e:
ba:01:81:ab:b3:fe:0a:77:8e:d0:56:5a:b6:7d:ee:f2:ea:17:
23:88:df:d9:82:49:32:8f:9b:a8:5b:09:9f:49:bb:cd:c2:bf:
d2:68:8a:60:ab:bb:f3:d1:25:04:5b:ed:67:6f:32:e8:d9:b3:
87:f2:7b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 08:01:49 2025 by rpki-client