Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: 6FlR4jtU3+3DU8PvD0+mAZCC6urZZXPARM1qcPHHrhU=
Subject key identifier: 6F:74:56:2A:C9:82:D7:05:A3:D6:B9:05:21:2B:CE:79:90:33:55:FE
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 019675D54F462395FA30DE3BA21DC9F5EF89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 06:00:35 +0000
Manifest this update: Sun 27 Apr 2025 06:00:35 +0000
Manifest next update: Mon 28 Apr 2025 06:00:35 +0000
Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: FgbDX0IETVhn75Xwi1lCSoqhY1pVBbxYMYBEGwC2s9k=)
2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:4f:46:23:95:fa:30:de:3b:a2:1d:c9:f5:ef:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Apr 27 06:00:35 2025 GMT
Not After : Apr 28 06:00:35 2025 GMT
Subject: CN=6f74562ac982d705a3d6b905212bce79903355fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:11:81:a9:80:21:c7:52:80:cb:a5:8e:c6:c2:
2f:49:35:e9:d2:31:e0:4a:55:39:02:de:78:da:70:
9f:14:d7:a7:81:75:3e:32:36:2a:89:4c:38:43:8e:
8f:76:c6:f2:0d:12:f1:8f:06:a8:37:c9:f6:f8:44:
75:85:eb:46:b9:25:6e:3a:c8:42:13:dc:b0:0e:a9:
68:44:96:9b:2e:48:9b:e1:f4:8d:06:b1:e6:5a:fe:
dc:a3:a1:39:43:91:ec:8e:d1:00:0b:0f:86:f1:54:
c8:5f:69:e7:76:ea:07:a8:cf:91:11:3a:ad:ad:05:
27:b8:fb:12:a9:38:03:89:62:4d:92:a3:0e:be:5a:
d8:24:d3:b9:05:c1:86:e6:ea:58:a6:2a:3a:f6:29:
7c:34:61:7b:3a:ce:87:7c:e7:0c:ef:dd:50:8b:78:
92:50:17:44:cf:89:c3:bf:29:87:2d:4b:33:a8:23:
ea:88:cc:33:b3:09:69:d7:47:fb:f7:c3:ae:df:13:
41:97:f6:95:5c:34:22:51:26:c4:b9:fa:00:40:ea:
29:c9:d6:71:d9:5b:b9:4d:85:ff:f2:b8:71:95:63:
b3:cf:51:2e:6e:a9:b2:6a:24:3b:3b:60:05:af:d2:
43:6f:d3:18:bf:7a:8e:c1:14:ba:8d:9a:b1:86:57:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:74:56:2A:C9:82:D7:05:A3:D6:B9:05:21:2B:CE:79:90:33:55:FE
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5e:6d:e3:bf:1b:eb:c2:d0:bd:c9:0d:28:a5:41:6d:4a:9e:
bc:b2:03:be:aa:4b:0d:b4:4c:97:34:ed:06:13:b2:ac:5b:13:
b6:b5:16:4d:39:b8:8e:37:d3:fa:f7:6b:57:4e:85:bc:86:fc:
0c:e1:f1:d3:a9:2b:e8:d1:8a:53:9c:bf:4c:84:1d:3e:84:fd:
5a:f0:32:cb:f2:35:00:29:76:28:c7:da:a4:5e:24:20:39:ba:
26:ff:fb:f2:6d:23:39:ef:05:ce:61:fe:11:1b:bf:94:f0:74:
e7:a1:98:3f:e5:fe:9c:ed:d1:8c:22:7b:e3:02:87:37:fc:43:
97:df:7f:f1:d5:74:2f:b9:4b:f0:cb:b7:a7:a4:9b:07:3a:5f:
8f:44:b9:9d:17:82:9d:e5:02:80:d2:e2:f8:45:f8:ae:16:be:
28:20:4d:fa:b6:29:be:c0:ae:6f:3e:93:5c:da:44:88:01:f1:
4b:5d:6c:b9:55:7d:ed:e0:ac:6d:7b:14:51:af:5d:31:8b:e5:
ca:b7:89:b4:f8:0e:c9:3f:54:83:6f:30:52:d1:d9:d1:8e:80:
94:cb:60:6e:6d:f2:b1:14:7b:9a:7f:7f:93:99:60:5a:15:05:
35:17:eb:20:31:7b:53:f0:68:45:bb:05:0d:7b:3c:56:83:ea:
8f:dd:ad:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:50:38 2025 by rpki-client