Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
File: ZgPtTHhFQlARbxBetpYdwp4dvGw.mft (raw, json)
Hash identifier: gKlz+tFFHtPuaXkNjjP6cE7Z0oMznat7XkH1RDHjI20=
Subject key identifier: 3F:01:9A:31:29:BD:94:7C:BD:7A:7C:1C:EB:F3:A4:35:5F:09:33:A1
Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Certificate serial: 019645C530A98E6952C6EEA868F51E6CF586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
Manifest number: 11DC
Signing time: Thu 17 Apr 2025 22:01:12 +0000
Manifest this update: Thu 17 Apr 2025 22:01:12 +0000
Manifest next update: Fri 18 Apr 2025 22:01:12 +0000
Files and hashes: 1: ZgPtTHhFQlARbxBetpYdwp4dvGw.crl (hash: zYrkQhSG1/ml+sXLJUxa6n8WRE2yieJ6o3s/pAN6FYo=)
2: pFNbbolKWdf6lVoEITxkPbtrK0c.roa (hash: dWVbBEqjRH9tmJFYTVH116/QjtCieVc2dcQg6GxblXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c5:30:a9:8e:69:52:c6:ee:a8:68:f5:1e:6c:f5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c
Validity
Not Before: Apr 17 22:01:12 2025 GMT
Not After : Apr 18 22:01:12 2025 GMT
Subject: CN=3f019a3129bd947cbd7a7c1cebf3a4355f0933a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:86:d1:ab:36:aa:b9:23:00:11:67:42:15:
d5:1f:e9:91:38:67:c3:20:bf:18:d3:dd:1e:dd:3b:
e5:ac:e4:df:c7:81:00:4f:bf:2f:da:c1:ae:7a:29:
4f:0d:3b:38:28:a0:1a:cd:3c:68:d8:4a:1b:51:e0:
3c:27:48:6d:7b:9e:90:71:5a:68:86:cb:19:5b:74:
65:ac:a5:e3:4d:80:06:f3:f5:e9:22:0a:fc:ec:f5:
70:2e:0e:5c:e8:73:48:ff:e8:27:39:92:aa:6e:df:
07:81:d7:43:56:b8:4d:bf:5c:3b:4b:00:14:a5:b4:
b1:a2:4d:1d:ab:ae:dc:f1:85:74:ab:ed:db:8c:da:
b2:11:11:90:1a:e8:8d:42:81:35:b1:61:1c:a2:77:
dc:aa:3f:8c:27:18:de:89:e7:71:ae:f4:51:a8:e6:
6e:a6:3a:50:ed:7e:66:28:bc:e2:2e:86:cc:e4:cc:
fb:48:e7:b5:93:03:55:51:99:14:86:87:3f:62:2b:
c3:1f:3e:bc:d8:f9:6d:ab:81:f5:e0:e5:4e:2b:0d:
86:1e:51:90:0e:c8:be:e5:64:d3:50:e8:22:a5:08:
d6:be:dd:fc:c8:5f:19:d1:bd:db:fd:bf:a7:78:21:
aa:39:6c:04:6b:77:fb:17:4d:c3:b1:33:e1:08:6d:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:01:9A:31:29:BD:94:7C:BD:7A:7C:1C:EB:F3:A4:35:5F:09:33:A1
X509v3 Authority Key Identifier:
keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2f:48:70:9c:0a:86:14:cb:5d:bf:bf:37:99:5b:9a:88:18:
bb:8a:98:a9:e4:f7:29:b2:df:67:ca:78:29:48:93:f3:e5:37:
05:54:6c:d5:2a:12:ab:8b:59:7f:37:c9:56:4c:a1:5b:fe:dc:
6d:a9:78:83:96:33:d5:69:6c:d8:7b:77:14:07:a1:de:f7:5f:
ee:9e:7d:ac:62:b7:fa:68:62:c0:fa:85:e2:bb:e7:80:95:85:
a5:54:e7:7f:ba:17:d1:d6:84:df:00:3e:4e:ee:4a:39:14:d5:
33:b3:49:7a:24:0e:bd:1b:09:51:76:a5:e1:23:44:b9:f7:04:
d2:ca:b3:f4:76:5c:34:cf:b6:bd:00:9b:d4:ba:fe:18:2f:08:
6e:b0:18:53:80:9e:24:5e:22:4a:a6:84:a6:ca:8c:fb:a9:65:
91:f8:1b:0d:7a:b8:25:cd:86:79:c1:a5:35:cb:26:0f:a5:a7:
43:31:09:13:61:a2:f1:27:2b:2d:47:ee:a4:ad:12:a5:b7:e8:
be:dd:5a:38:0b:a6:f4:4b:a6:0d:a1:26:c3:4f:ba:94:0b:fe:
0d:0d:f1:52:35:5d:65:32:7b:8a:a3:5c:03:be:58:00:75:c2:
21:ad:b3:20:d0:3f:f9:11:0f:13:32:b2:42:05:aa:32:f2:04:
a1:a6:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:42:04 2025 by rpki-client