Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
File: zybJGvCrJmijYBstlX3EzgAtWYY.mft (raw, json)
Hash identifier: 7MllYlaO3XUyAX7qeb52lVktH7kIbbdJAP/vz8d+pZI=
Subject key identifier: DE:60:B8:4F:74:23:AC:1E:38:DC:83:A1:3B:9A:C0:58:7A:73:1B:0A
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01964DEC38C2D83B79DCC73CFA52F4DEB8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 12:00:48 +0000
Manifest this update: Sat 19 Apr 2025 12:00:48 +0000
Manifest next update: Sun 20 Apr 2025 12:00:48 +0000
Files and hashes: 1: JauXkuBrJ-Jj9T7iuekamPiA2KM.roa (hash: +JxWUzvZHawG/TTDHvvjcR4tNCgM0dBRjS+5hf64dGM=)
2: zybJGvCrJmijYBstlX3EzgAtWYY.crl (hash: Sj+eCgktqWIcIcdGO4ooXGFoh7F5iWmfHgpD2cwHAGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:38:c2:d8:3b:79:dc:c7:3c:fa:52:f4:de:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Apr 19 12:00:48 2025 GMT
Not After : Apr 20 12:00:48 2025 GMT
Subject: CN=de60b84f7423ac1e38dc83a13b9ac0587a731b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:02:1d:7b:4b:f6:17:93:df:21:e5:4f:d3:8b:
ac:12:7c:4d:7f:81:35:5f:8f:1d:a5:2f:df:68:86:
fb:ad:cf:98:c7:27:62:6a:15:05:62:2b:d1:83:93:
39:3b:5b:72:c3:f2:94:ff:98:c0:e1:ec:6f:f4:c3:
7a:8a:d9:5e:ac:eb:62:48:57:d5:1b:f9:85:a6:c6:
c2:4f:6d:7e:8c:a1:04:3b:3a:31:91:31:d0:43:ac:
f0:fc:3e:9f:42:30:e4:6a:b1:ba:8f:d0:e4:00:2d:
19:31:39:f0:88:3d:3a:65:eb:b3:24:8a:4a:cf:b9:
be:18:13:dd:64:d0:8e:45:7a:52:2c:ca:3b:44:06:
f6:3d:2c:fb:a9:4d:56:1f:f4:a6:1c:ad:da:d0:8b:
94:0d:31:b4:d7:64:1e:27:81:f4:61:ce:17:a8:4d:
13:cc:78:d3:b2:30:fe:75:70:1d:96:b6:13:4e:1e:
d5:1c:24:5c:8f:da:49:23:9c:8a:a2:6c:a6:b2:3e:
96:5d:e5:1a:41:b9:c8:59:bd:a3:1f:36:7e:2b:ff:
a0:6f:c1:84:31:83:a8:dd:10:39:7a:13:9c:cc:fe:
8f:02:34:6d:4c:3e:b6:80:28:86:1b:be:f4:31:1c:
60:fa:72:d7:7c:1d:c0:7b:2b:4d:92:a4:28:9a:32:
ae:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:60:B8:4F:74:23:AC:1E:38:DC:83:A1:3B:9A:C0:58:7A:73:1B:0A
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4e:41:fe:af:c6:d4:3c:5b:27:2b:62:f9:c8:ec:82:83:2e:
fa:01:31:f2:84:59:ca:60:7a:61:84:e4:b2:fa:f0:73:16:63:
28:3a:fc:0a:ef:63:8e:45:25:d0:a6:1d:27:b2:49:c4:9a:1d:
9c:6b:b4:be:c3:23:10:31:30:7f:cc:57:c3:43:f0:29:1d:ab:
12:90:c4:41:2c:ca:24:93:c8:8f:e0:6d:e3:b7:8e:c0:7b:e1:
a0:98:2f:8d:8a:a6:e2:37:a7:74:8f:3d:cd:2c:7f:50:ed:17:
89:91:17:0c:e4:39:28:72:53:f9:84:0e:b7:a2:84:20:65:18:
64:96:63:6e:62:97:ea:62:36:23:2e:75:92:9c:7a:4e:5f:07:
9e:42:76:bf:91:f0:43:7c:4d:4f:00:f2:fd:49:3a:ed:5b:14:
dd:c2:3b:77:d3:46:a0:54:c5:e0:55:67:66:50:a7:1a:c9:61:
1c:59:88:24:af:95:19:e7:25:e6:ed:c2:f5:27:59:9c:2c:31:
08:6f:36:30:12:7e:a6:e4:3e:34:ee:36:12:bd:c1:93:98:c9:
3e:ea:a3:fc:20:b0:1e:72:1e:f9:44:64:25:8b:ff:65:6f:eb:
e1:75:73:c9:22:53:08:b0:41:b3:e8:0d:65:b5:5e:d5:4b:3d:
57:70:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:28:35 2025 by rpki-client