Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
File: zT29X8b5G4B7e8TPbmRuNFhirz4.mft (raw, json)
Hash identifier: aeQ19tX1Jv+8Lxy9gEdAPo0qihmUY96Rdh/hXj6GTww=
Subject key identifier: D0:A2:FA:F1:E9:31:41:EC:FA:51:67:70:80:9A:6E:31:8B:B5:06:EC
Authority key identifier: CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
Certificate issuer: /CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Certificate serial: 01967454F7F32E61FDDC76B1B3AC26EB8753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
Manifest number: 04B4
Signing time: Sat 26 Apr 2025 23:00:47 +0000
Manifest this update: Sat 26 Apr 2025 23:00:47 +0000
Manifest next update: Sun 27 Apr 2025 23:00:47 +0000
Files and hashes: 1: slxDmCt2L7uCGsUsrtR25UrWHG0.roa (hash: DyUu6++jqUZQV0Vf12twiu6zSmlHweojaxYVbm0ofdE=)
2: zT29X8b5G4B7e8TPbmRuNFhirz4.crl (hash: q5rt/uMx1mYbSeircwm74jGjVEExt23fIk0bCJ6/3fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:f7:f3:2e:61:fd:dc:76:b1:b3:ac:26:eb:87:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd3dbd5fc6f91b807b7bc4cf6e646e345862af3e
Validity
Not Before: Apr 26 23:00:47 2025 GMT
Not After : Apr 27 23:00:47 2025 GMT
Subject: CN=d0a2faf1e93141ecfa516770809a6e318bb506ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:cc:0e:d8:14:55:fb:d1:c7:29:ad:c9:32:
9e:79:6b:95:79:47:3a:cc:cd:24:a4:58:ce:ce:e2:
13:3b:7e:77:94:cf:aa:2f:c3:1c:11:7e:e9:44:f0:
9c:c5:a6:0f:11:87:2c:af:df:d7:00:c2:cc:c6:3f:
2f:28:a4:ef:0d:18:40:c5:df:1f:68:9b:42:19:79:
c9:58:8d:3f:6d:0e:3d:a3:5a:6e:ea:88:b8:6d:e2:
cb:0a:07:ad:dc:d7:b1:2d:9d:72:c2:e4:6c:83:28:
40:d5:54:39:fc:b5:64:eb:79:ca:5b:a6:96:5d:7c:
2b:0f:a9:3d:13:1b:45:be:1f:59:73:1f:49:b8:6b:
e5:d3:a9:94:a9:91:8d:8e:7b:c3:09:ad:b7:8f:77:
28:86:fc:a3:79:e9:b2:96:5b:08:d6:64:e1:3a:ce:
3b:03:b4:41:09:06:a1:25:5f:7b:fb:10:14:88:9b:
95:42:23:03:0c:95:6d:5d:2b:3f:d4:91:d1:37:ba:
40:bd:9c:f2:7a:58:d9:4c:a0:c1:ec:6f:59:db:e7:
42:f5:e8:f9:c8:8c:fc:f6:df:b6:27:2e:6b:54:5c:
ac:75:dc:71:1a:00:80:d5:1a:c3:82:95:57:06:84:
59:61:16:a4:56:dd:d5:46:08:95:35:7f:66:e9:cd:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A2:FA:F1:E9:31:41:EC:FA:51:67:70:80:9A:6E:31:8B:B5:06:EC
X509v3 Authority Key Identifier:
keyid:CD:3D:BD:5F:C6:F9:1B:80:7B:7B:C4:CF:6E:64:6E:34:58:62:AF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zT29X8b5G4B7e8TPbmRuNFhirz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/14b933-7e34-4a87-b215-8caad3e31adc/1/zT29X8b5G4B7e8TPbmRuNFhirz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:64:c1:fb:bf:da:4f:54:ba:d4:6a:55:53:e9:05:48:43:54:
65:6b:07:89:fc:bc:2a:3f:ab:01:82:65:41:6c:24:90:34:1c:
44:75:b2:33:cd:0c:6d:71:b8:88:37:bc:bf:90:6f:da:38:fe:
ce:f1:0a:a7:ee:b7:03:37:d7:68:6d:58:32:01:7e:1a:c9:ad:
8a:d4:94:bf:6f:8b:9d:8e:f6:8e:f7:b7:92:9b:2a:9b:e3:3d:
b4:c3:b2:76:48:57:88:71:17:74:41:8b:ba:be:a0:ae:c5:84:
53:e6:fa:20:e8:e5:f8:3e:dd:0f:25:bb:70:89:4e:80:a6:aa:
3e:e8:75:ba:60:59:1f:e8:e1:0d:1c:25:df:49:51:a3:5a:db:
99:81:3a:6e:e0:36:65:5d:b9:4e:03:f8:17:4a:6e:b3:b3:4e:
fe:b3:e5:32:9d:3d:80:11:fc:fa:00:0e:5a:e9:ab:be:9c:57:
9a:9d:17:26:b0:f2:6a:74:6a:a8:2d:ca:a7:77:dc:5c:35:e3:
0b:0c:bf:fb:73:de:1c:4a:01:e5:2c:26:5c:e2:57:de:9b:ba:
f0:42:a1:fc:aa:e5:b9:9f:4e:f1:0a:d7:46:fa:23:6c:e3:67:
7b:a0:b7:3d:4a:0f:66:63:67:41:9a:a7:b9:da:c0:bb:4e:1c:
c8:9d:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:19 2025 by rpki-client