Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
File: zbFQJ29VuuRVmI06E-WTQQdNzQo.mft (raw, json)
Hash identifier: GkfmRXAMRqCz8YPZYgcBrzkgJcMZs+chXwkD4iUy3xg=
Subject key identifier: 9B:D2:F1:2E:C6:7F:38:E4:A7:52:31:DE:F1:DE:F1:65:F5:8C:6A:67
Authority key identifier: CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
Certificate issuer: /CN=cdb150276f55bae455988d3a13e59341074dcd0a
Certificate serial: 019674FA0856DE4265A13B51335CFE5C4080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 02:01:05 +0000
Manifest this update: Sun 27 Apr 2025 02:01:05 +0000
Manifest next update: Mon 28 Apr 2025 02:01:05 +0000
Files and hashes: 1: 1-6mnh_WrGshq4BGNMcahIgl1tdM.roa (hash: cq1xI/14AhL1drVD8g+gpqIgK6YTCibBOfeJtp72SrQ=)
2: zbFQJ29VuuRVmI06E-WTQQdNzQo.crl (hash: LiPswqI7tRxQE1OyDf4BJrGpQbHV/V69pZW/hY1GVNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:08:56:de:42:65:a1:3b:51:33:5c:fe:5c:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb150276f55bae455988d3a13e59341074dcd0a
Validity
Not Before: Apr 27 02:01:05 2025 GMT
Not After : Apr 28 02:01:05 2025 GMT
Subject: CN=9bd2f12ec67f38e4a75231def1def165f58c6a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:22:09:00:0f:12:3d:2f:c1:c1:35:d1:46:
a4:b9:51:07:00:da:47:e2:18:f3:1f:ae:b4:9b:7b:
ac:f3:92:1b:09:6a:f6:b3:f7:2f:db:59:46:fc:98:
ee:51:ce:92:35:9a:0c:cd:88:3d:6d:1f:20:e8:38:
7c:23:37:58:c6:5e:26:ea:a5:af:d2:79:58:88:cb:
4a:c9:84:4c:ee:60:b0:fe:86:1a:b7:10:e9:74:a2:
57:88:0c:6e:4e:61:05:75:9a:9f:71:9b:ca:a0:aa:
8f:ff:70:f7:eb:ed:44:76:4b:48:32:5e:cc:dd:64:
2f:77:f4:98:8d:fa:73:90:df:ee:1f:46:94:2b:43:
f5:a6:4c:e8:5a:b7:a0:06:05:fa:46:90:7d:5a:19:
e5:7b:87:c3:e2:b6:df:8d:3a:fb:d1:1d:0a:60:a6:
1e:3b:c8:f2:a6:f2:dd:0d:c9:0e:49:13:1a:f8:2b:
be:2b:5d:2a:bf:10:49:98:dd:45:3f:ff:57:4b:cb:
f8:bc:fd:b8:09:26:5f:2a:80:98:d0:ed:21:0b:34:
28:8f:9f:dd:9b:a9:90:e5:df:34:1b:6b:df:c3:54:
27:5f:ff:d1:61:e2:bf:d5:df:e8:1d:01:fb:f4:5c:
48:b5:20:05:40:52:b6:40:c0:1e:97:fe:ed:3c:65:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D2:F1:2E:C6:7F:38:E4:A7:52:31:DE:F1:DE:F1:65:F5:8C:6A:67
X509v3 Authority Key Identifier:
keyid:CD:B1:50:27:6F:55:BA:E4:55:98:8D:3A:13:E5:93:41:07:4D:CD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbFQJ29VuuRVmI06E-WTQQdNzQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/be6337-662e-4c3b-812a-3407fca12267/1/zbFQJ29VuuRVmI06E-WTQQdNzQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:c3:48:48:f2:52:17:68:3a:61:44:fe:9c:b9:cb:a5:3b:
95:ce:26:ad:54:b5:c8:d8:8f:d8:19:06:3b:51:27:1c:ea:82:
6a:c1:f6:d4:ed:81:4d:78:2f:0e:95:5d:9f:24:ad:5a:5c:e1:
9e:15:12:de:a0:49:c4:51:13:0e:1f:b2:35:53:89:99:62:1f:
d1:01:9a:15:0c:e0:1d:4a:5d:fd:83:76:36:cb:9c:86:33:16:
c2:ac:bc:48:70:50:65:7d:24:38:c0:34:82:32:3d:a4:fc:0c:
52:d9:b2:1d:2b:ea:a6:78:7e:62:de:84:46:f0:7f:5e:0e:aa:
b3:61:ec:45:e8:ff:26:8f:85:b6:1d:32:5d:13:ae:a5:c5:ee:
86:03:31:55:ca:10:72:7f:c5:8f:b8:79:9d:7e:ca:84:79:2e:
4d:27:c3:af:ec:0d:18:8b:45:09:6d:66:7a:8a:36:c1:71:f9:
41:58:a0:b5:91:c1:a1:f2:36:de:81:49:31:de:98:d7:0f:a2:
1f:c3:11:d5:84:e9:92:3e:0f:94:3f:6b:74:ce:12:c9:d6:e4:
d0:9f:2f:b7:80:bd:72:ae:4d:d3:09:fb:5c:39:bf:25:e8:81:
e5:22:cd:4b:fa:67:a1:76:cf:23:21:f9:45:87:b3:92:40:b0:
ea:1a:63:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:51:36 2025 by rpki-client