Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
File: ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft (raw, json)
Hash identifier: bFGtv/vXzhcZoi6UCySqOdPnIxPFkmqtYLfTp+mBRL0=
Subject key identifier: 21:42:34:00:2D:43:E3:CE:C6:40:A4:1D:17:7B:91:41:DB:36:55:BC
Authority key identifier: 66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
Certificate issuer: /CN=66a1d1a017802e5c57da5978544fc537403da73a
Certificate serial: 01967F0F77991B85CDFDB6CA1BD08D68D150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
Manifest number: 0827
Signing time: Tue 29 Apr 2025 01:00:42 +0000
Manifest this update: Tue 29 Apr 2025 01:00:42 +0000
Manifest next update: Wed 30 Apr 2025 01:00:42 +0000
Files and hashes: 1: ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl (hash: ly+MUpTATmSsHxVsVEksvPdFJqwuSIFWjRVpyDf4q3o=)
2: hJbdYVF-sB2ARWcr3wLM-Bolskc.roa (hash: p8HLFjhLNYXJBjvp0Ydq3UNKZlQk3vcyaOZBKxCq5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:77:99:1b:85:cd:fd:b6:ca:1b:d0:8d:68:d1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a1d1a017802e5c57da5978544fc537403da73a
Validity
Not Before: Apr 29 01:00:42 2025 GMT
Not After : Apr 30 01:00:42 2025 GMT
Subject: CN=214234002d43e3cec640a41d177b9141db3655bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:79:c3:ee:32:b9:e4:0e:3a:7f:c0:63:8b:86:
3f:44:d9:7d:fe:69:0b:c1:4c:3e:72:d3:01:f3:24:
51:80:da:1e:59:8e:de:0c:6e:8c:12:60:59:d5:0b:
ab:9b:b1:76:b4:6f:fe:6c:fc:18:b7:f5:5c:30:36:
b9:7c:02:5f:0a:8a:a4:be:87:46:a5:b1:e4:87:97:
d3:67:08:f1:af:10:4e:7d:ee:80:32:cf:84:b1:f8:
aa:71:f4:1a:ba:32:7c:b5:a5:8a:a3:e0:77:4d:e9:
0e:9c:ac:09:be:5c:27:9f:62:c1:5d:ea:b0:91:5d:
71:16:c4:98:34:6c:71:7d:49:65:c8:b0:50:91:fc:
5d:d9:aa:f9:c2:33:0c:0f:79:0c:3e:5b:dc:b3:10:
ac:ea:aa:9d:6c:87:5c:8f:4f:b7:48:6c:27:7d:87:
7e:b4:8f:f1:f4:f2:5f:51:1b:7e:89:ec:f0:5b:c1:
89:c5:9e:80:0d:0c:cd:c2:29:52:11:b0:5a:60:7e:
ca:33:0f:06:bd:c4:5c:3e:62:20:17:f7:0e:d6:6a:
61:a6:ca:c0:e4:0d:c1:af:84:71:20:21:2f:f8:66:
58:d1:21:f0:0a:d1:48:ff:26:d8:be:94:7a:81:cb:
99:d6:38:f0:86:ec:df:53:a1:3d:3d:c2:f1:16:6e:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:42:34:00:2D:43:E3:CE:C6:40:A4:1D:17:7B:91:41:DB:36:55:BC
X509v3 Authority Key Identifier:
keyid:66:A1:D1:A0:17:80:2E:5C:57:DA:59:78:54:4F:C5:37:40:3D:A7:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqHRoBeALlxX2ll4VE_FN0A9pzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/91548b-bab5-454c-b60b-19f2a1d16033/1/ZqHRoBeALlxX2ll4VE_FN0A9pzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:eb:5d:bc:89:57:fe:32:6e:41:ac:d0:d7:bb:ee:02:c1:bf:
3e:90:42:b5:00:b9:ed:f1:4b:02:9c:52:e4:a7:d2:83:c1:5c:
e3:1e:62:f8:70:70:db:bb:40:f0:12:ff:2d:79:73:b1:98:ac:
9c:0f:97:e6:a4:9e:8c:78:93:6e:a6:0c:d9:71:b2:26:ce:36:
1a:7f:c8:d5:70:00:ca:3a:48:1b:a4:6d:04:41:61:50:64:ba:
5d:f2:ca:d7:77:89:90:e8:c1:e1:96:40:7a:43:38:49:92:46:
47:5b:fb:70:5c:db:c6:a5:cf:84:cb:a5:bf:dc:e0:1c:b0:9c:
c9:f5:50:79:4b:9f:f2:00:68:e0:ea:2b:f6:5d:e1:4b:37:68:
1a:ce:37:54:73:cd:4a:83:ff:db:d6:0c:4f:b5:03:c5:d5:ad:
8a:f4:5d:be:c0:e6:cf:db:e5:bf:d3:dc:40:1a:3f:e1:b0:99:
26:bb:2d:a1:c0:4e:02:0f:4a:df:1f:7f:aa:02:a6:c4:ed:fb:
3a:77:4b:7d:95:53:1f:3a:41:96:2e:5e:50:c8:96:aa:21:d0:
b0:37:47:d0:f7:4d:3d:1d:73:29:70:82:7f:7e:c8:2c:71:e6:
71:00:cf:a2:2c:a1:4e:8b:cf:a3:74:fe:2c:ef:40:08:1f:bf:
4d:83:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:57:31 2025 by rpki-client