Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
File: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft (raw, json)
Hash identifier: 8ANmivs9HukOrbix1nRHCnmudvUFpov4Juds5K+HvP0=
Subject key identifier: 06:A9:DD:5B:14:19:2D:B0:68:59:0A:C3:4E:A2:F1:86:44:F7:0B:D3
Authority key identifier: D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
Certificate issuer: /CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Certificate serial: 01967A20209A8579097A2536808C4EB7148A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
Manifest number: 0DE6
Signing time: Mon 28 Apr 2025 02:00:47 +0000
Manifest this update: Mon 28 Apr 2025 02:00:47 +0000
Manifest next update: Tue 29 Apr 2025 02:00:47 +0000
Files and hashes: 1: 1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl (hash: X01ERdR5BCx+uZFzlOY8xWEhid21nPL52JOp0Ja//vs=)
2: ZX4X6T20C-qsi1y3PTVJQfvjwic.roa (hash: Akw76KHY7x+jSERaftUQrqC3DO2BIHUJ2YNJNix3DxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:20:9a:85:79:09:7a:25:36:80:8c:4e:b7:14:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7faf3a3f2140cb7c6ff0cd6a7f5614a05e4e467
Validity
Not Before: Apr 28 02:00:47 2025 GMT
Not After : Apr 29 02:00:47 2025 GMT
Subject: CN=06a9dd5b14192db068590ac34ea2f18644f70bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:43:1f:1d:52:29:3d:74:dd:a8:5d:2b:1b:60:
18:07:37:5f:31:82:f4:53:84:99:83:93:0d:0f:39:
f6:13:35:b6:a2:06:aa:f6:fe:fc:33:e0:d5:b4:a1:
e0:01:b0:8f:19:db:cd:9a:89:c4:f8:b6:65:16:5c:
3d:e2:5d:e7:3e:f4:7e:ef:e5:63:30:3f:a8:d7:bd:
61:ad:6d:92:7f:e2:87:7f:21:88:00:ca:c8:16:23:
3d:e3:8a:b5:ae:6e:46:bd:f0:8c:3f:df:21:a5:1e:
b5:9a:09:8b:c5:d1:7e:be:b7:92:bd:69:f6:0c:fa:
3b:4b:15:d0:c8:ce:1f:1f:22:f0:9e:0e:b8:72:75:
31:5a:59:a8:60:b9:20:ad:8b:09:b6:22:49:a6:a6:
2d:95:f7:78:5c:48:32:d7:b9:b5:03:fd:e2:2f:c3:
64:8a:dd:d5:94:e7:b1:17:89:39:e5:45:d7:de:8b:
a9:d4:38:27:10:62:2e:ca:fa:a5:90:6f:10:73:0a:
3c:da:d7:33:a1:4d:be:13:ba:4a:28:ff:d6:dd:70:
5e:d8:6c:be:35:d3:2d:b0:ff:90:ba:e1:3c:6a:21:
07:54:6c:2a:1e:e5:c0:1f:5d:fc:5d:03:0c:a9:0d:
b1:70:b6:bc:c4:0c:3f:8d:0e:20:18:b9:bf:01:13:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A9:DD:5B:14:19:2D:B0:68:59:0A:C3:4E:A2:F1:86:44:F7:0B:D3
X509v3 Authority Key Identifier:
keyid:D7:FA:F3:A3:F2:14:0C:B7:C6:FF:0C:D6:A7:F5:61:4A:05:E4:E4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/df94e2-7cc9-41a1-952f-f3797cfd65ae/1/1_rzo_IUDLfG_wzWp_VhSgXk5Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ca:f3:5f:c4:24:90:5b:ba:82:30:87:87:22:98:36:88:63:
d2:0c:30:f8:8d:b7:f7:a7:1b:91:1e:67:ea:fa:3e:9a:32:00:
01:00:54:98:f7:d5:f8:7d:77:e3:20:67:72:9c:19:7e:a8:fa:
06:1b:e0:8d:d9:7f:f6:a9:c0:33:c4:35:8d:a2:17:e5:37:f0:
fc:8e:30:42:3c:e2:42:4a:84:c5:09:3b:ce:59:bd:33:49:73:
cc:fd:7e:57:e2:54:8a:b0:87:68:00:f8:cd:ef:bc:cb:c9:df:
32:e4:d2:5e:53:40:8e:db:20:02:92:bf:5e:e1:5c:17:03:08:
83:4d:59:bb:89:97:12:d4:10:f5:a3:e1:4f:34:20:a6:05:ef:
af:d7:74:7f:a7:20:79:a1:36:e9:a0:db:e2:1c:2d:d3:47:ce:
5f:21:3a:1b:c2:78:c1:77:3a:02:d2:0c:32:a8:9a:ca:63:32:
a4:86:b6:d1:6b:3f:56:4c:2c:65:2a:0c:8a:46:f0:92:13:7c:
1c:1e:cf:49:94:c7:70:1e:6b:0e:fc:05:36:8e:4c:83:37:2a:
a2:70:23:48:12:b1:37:29:cf:8e:8d:f9:5f:1f:7f:49:dc:a9:
74:2c:2f:ca:8e:c6:c0:16:d6:df:57:46:2a:9e:0c:97:8e:c7:
4c:37:cb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:15:43 2025 by rpki-client