Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json)
Hash identifier: I37JrH368q8XwxygXe2pkQ5VLGZpW/NLEdMHXQERDoc=
Subject key identifier: 7A:DC:8A:19:15:69:C0:9E:70:6D:39:DA:3A:92:07:39:4A:1F:12:23
Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Certificate serial: 0196730BA0C26B8D46ABC33D73D839547138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
Manifest number: 0C3D
Signing time: Sat 26 Apr 2025 17:01:03 +0000
Manifest this update: Sat 26 Apr 2025 17:01:03 +0000
Manifest next update: Sun 27 Apr 2025 17:01:03 +0000
Files and hashes: 1: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=)
2: Nss2kO7vwED_lH6zuq8RSrb2rfE.roa (hash: 1BGYAn5SxYs9ABF+oBM6hfDnitlaPkyQv+8E/VsOmZ4=)
3: XsLjp43XqVLOf-UiZTsjZx3E54g.roa (hash: xErYg38+N/tFwn9w696LSX/zjDpD0mxUiTuXvg0H92I=)
4: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: 7XuRwdBbwwIFl9MOFYiQBSLs/vAvSwdp6iF+GlBm6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:a0:c2:6b:8d:46:ab:c3:3d:73:d8:39:54:71:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f
Validity
Not Before: Apr 26 17:01:03 2025 GMT
Not After : Apr 27 17:01:03 2025 GMT
Subject: CN=7adc8a191569c09e706d39da3a9207394a1f1223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:ed:c4:7b:ff:8a:20:61:9b:bd:0f:4b:b8:
bc:9d:4f:c4:6d:9c:dc:76:a3:49:e6:e9:ca:8d:2f:
9e:6d:ba:ad:e2:dd:a5:2d:9d:99:3d:25:5b:5f:c5:
c5:2a:3e:27:d9:46:ad:d1:9c:b3:3b:58:e2:f1:e2:
78:73:42:e2:23:77:56:49:80:9b:8a:75:10:f1:07:
95:4a:76:c7:f4:c3:ba:52:09:1d:a9:97:c6:03:0a:
02:74:ff:f0:af:f8:6f:75:13:6e:87:46:e0:a2:d2:
30:eb:d4:cf:eb:fc:8c:b3:ce:99:e5:91:23:4b:c7:
80:78:39:bf:e2:5d:de:ac:ca:cb:21:2b:3d:a4:f4:
a6:45:1f:2b:6e:73:21:9f:1c:2a:dc:ad:3f:0e:7e:
5c:4e:c8:06:87:e5:99:c4:31:75:cf:c8:9a:8a:4d:
3c:86:9d:11:3e:4d:6f:a8:55:08:f7:f5:31:a3:29:
d1:bf:1e:40:1e:de:4b:21:45:e6:b0:77:d8:c1:3f:
26:b6:c1:88:58:d6:85:be:d9:d6:65:f8:2a:0c:70:
e9:b8:27:3f:e0:64:fc:49:fe:5b:6c:1b:a1:9e:72:
31:d9:0e:65:02:77:21:de:61:c1:77:5a:01:d4:e1:
c9:e7:ac:d1:b2:79:8f:f7:ec:f6:4b:49:a2:2c:25:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:8A:19:15:69:C0:9E:70:6D:39:DA:3A:92:07:39:4A:1F:12:23
X509v3 Authority Key Identifier:
keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b1:64:8c:98:a2:a4:b3:0b:e4:40:ca:f8:ee:c1:5e:4b:f6:
e1:da:e4:e2:0f:36:09:b2:21:e0:4a:75:8a:67:ff:85:c4:7b:
fb:a5:e9:22:c9:d9:c5:b2:13:6a:f9:2b:94:d6:c1:c7:38:38:
ba:b5:ff:6c:1c:77:b7:0c:84:85:03:bd:25:30:26:7a:78:65:
94:b2:40:72:09:a5:4c:42:e2:87:c5:2b:92:df:60:22:85:0f:
fb:71:98:96:0b:d7:f7:cf:f0:ee:1b:a3:50:0e:64:08:f7:ee:
24:03:24:49:c3:cb:fc:fc:77:6a:c1:27:47:ca:cc:7c:9a:37:
d4:95:93:4e:ef:c1:ff:05:1c:76:e5:43:fd:d6:f0:dc:43:f0:
2d:6a:a9:ee:92:fb:49:c7:24:6e:11:37:e2:09:51:32:b2:db:
0d:2d:42:f1:02:c7:cd:dd:b4:8e:6e:b9:03:f8:11:b2:e8:75:
5c:f8:8c:f3:f2:0c:f9:92:0b:8c:53:b8:07:f3:c4:d4:bf:04:
90:d7:46:7e:48:cd:0c:8a:b2:b9:02:e6:21:54:b5:86:11:f2:
23:20:d3:9a:ae:ac:ae:ed:dc:e9:06:b7:7a:c0:af:d1:2e:d2:
a9:a7:5c:06:2e:10:e7:c1:49:cd:4e:ef:41:5d:d5:77:b9:52:
7a:e7:b4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:29:14 2025 by rpki-client