Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: hIcV/OrW0YLB+nvOAdlw6RN5tn21A/N6vbLOEa7UmQI=
Subject key identifier: EB:E0:3A:A2:5A:AF:D3:B5:E9:32:29:35:1F:DC:2A:FD:1B:28:B2:DB
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01958C6024627975F1762B988C64B7993349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 22:01:05 +0000
Manifest this update: Wed 12 Mar 2025 22:01:05 +0000
Manifest next update: Thu 13 Mar 2025 22:01:05 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: ay6eIy1pxvzKsMgUY2UtGGy20WzSR3jDZPAAKCArebo=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:24:62:79:75:f1:76:2b:98:8c:64:b7:99:33:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Mar 12 22:01:05 2025 GMT
Not After : Mar 13 22:01:05 2025 GMT
Subject: CN=ebe03aa25aafd3b5e93229351fdc2afd1b28b2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:8e:64:77:fe:f1:02:b4:0d:08:62:98:97:
65:74:87:d2:16:be:9f:20:40:bf:e8:5a:19:a1:13:
80:92:51:99:a8:e0:9e:b0:a4:e5:56:77:ae:1a:91:
68:03:f8:89:b1:d1:0b:22:6a:d4:7d:6a:31:57:d4:
3a:88:50:2a:14:b4:ac:37:84:1f:af:90:22:df:87:
15:8f:5a:1f:e9:9c:4f:c9:29:bb:da:b0:ad:b1:47:
61:12:b8:b1:00:00:1c:8e:2e:6d:91:df:0b:b2:46:
c4:50:8b:3f:b5:18:e7:7d:5d:f7:4d:69:0b:26:20:
97:c7:9d:22:ed:ac:95:20:6e:a0:8e:02:e8:94:f2:
7f:14:99:e3:62:53:fb:cf:68:0a:9c:1a:a3:f0:12:
8f:b1:d0:4c:c7:86:67:37:9a:73:a6:a5:bb:59:97:
58:45:a3:5c:a5:03:ea:c9:bc:ca:3e:74:fa:a3:9d:
83:be:6f:6c:68:44:cd:72:42:55:27:a0:9c:99:1d:
16:1a:f3:85:50:a3:d1:46:eb:b2:16:07:98:7f:ea:
f3:71:77:37:9a:22:2b:3c:a4:d1:f6:df:3f:7e:9d:
44:5b:51:5f:94:c1:6f:d0:52:9e:45:76:3a:1a:3d:
8e:06:a2:38:c4:19:18:fa:5d:71:ee:6c:62:75:64:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E0:3A:A2:5A:AF:D3:B5:E9:32:29:35:1F:DC:2A:FD:1B:28:B2:DB
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:ee:1e:7f:db:5c:23:ff:71:bd:a4:23:cc:30:d7:45:fd:
30:7b:b5:4b:e4:9e:c8:40:d9:53:3b:85:4d:87:ed:fd:ee:ff:
ad:df:0f:eb:0e:54:78:5a:f2:12:ce:2b:cd:eb:43:2a:59:d3:
d5:d5:06:79:99:2b:95:9e:be:90:67:11:38:20:7c:5c:3b:ab:
41:d6:25:75:d6:a9:e4:c8:f7:43:ed:69:f6:e5:4b:45:9e:91:
c2:c1:8a:45:81:01:6f:f8:ad:26:9c:44:54:15:32:ad:e7:96:
9f:93:ae:6d:b8:6c:d8:35:05:b3:bb:58:82:48:f4:fe:98:37:
db:30:15:a4:e3:3c:31:2e:b9:f5:02:20:26:31:1e:45:f8:b8:
3c:1a:ea:78:3e:4a:9a:09:1f:96:2b:e0:9b:cc:3f:3d:f8:ca:
c7:5a:52:63:6b:75:65:f4:6b:b9:da:bb:92:d1:f5:e4:b3:df:
25:4d:0c:c2:c2:ca:55:33:f0:d9:28:04:7b:95:6e:7a:9c:ae:
28:65:34:75:fa:68:c2:fd:aa:7f:9a:f0:ac:42:ce:7a:13:e6:
f6:ed:a7:da:36:f7:5e:04:79:8a:72:3d:7a:23:bb:df:03:4f:
2c:9f:4c:ec:5f:64:3a:36:e9:74:b3:5c:87:51:5d:24:c9:a0:
44:68:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:28 2025 by rpki-client