Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: fxXxdcPNbvaczV3rQR0eC+9aOpyvfzgZlHAhskz/cY0=
Subject key identifier: E9:A9:99:B1:00:21:5B:36:79:89:E9:6C:D8:E8:04:D4:67:55:9C:68
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 01967831472FA713520E7537CAAFA973CF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 17:00:17 +0000
Manifest this update: Sun 27 Apr 2025 17:00:17 +0000
Manifest next update: Mon 28 Apr 2025 17:00:17 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: 4aRyAV+/3IHT52GEVnfRs0foDMYKyNW6XqE5bXL4l38=)
2: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (hash: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:47:2f:a7:13:52:0e:75:37:ca:af:a9:73:cf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: Apr 27 17:00:17 2025 GMT
Not After : Apr 28 17:00:17 2025 GMT
Subject: CN=e9a999b100215b367989e96cd8e804d467559c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:33:b7:06:9b:6f:30:a3:f7:7e:05:20:00:
3a:7a:c7:5b:90:ab:7c:40:6b:31:ca:33:f2:8f:1b:
ad:73:1c:bc:91:a1:2f:3c:55:c8:07:0c:35:17:30:
6c:18:88:5e:1f:8c:41:4e:b4:d4:a7:76:07:03:9e:
69:36:cb:1a:b1:f6:ff:77:ee:a2:c8:3b:ee:fd:a9:
73:96:cf:9d:a4:e8:24:2f:74:9d:d9:79:1b:27:34:
e0:89:36:94:7c:15:f6:e0:ea:e0:d0:59:17:51:6a:
47:21:69:4a:e8:ad:20:d4:73:57:d8:0e:2d:12:0d:
76:f3:0d:b5:c2:5d:68:c8:65:05:a0:2e:e3:61:00:
f0:a9:b3:c4:0d:73:12:12:b6:13:07:39:3f:fb:6d:
4f:3e:24:46:3f:39:5d:0f:01:f4:53:b4:a2:ae:2b:
6e:b5:e3:69:6d:2f:8d:7c:a3:4f:39:22:3d:7e:45:
17:5e:8d:b2:21:71:21:b4:ca:4a:c2:33:93:83:b8:
d3:4f:b4:cf:bb:e0:61:b5:17:13:6a:6d:36:96:52:
1c:5e:0e:9f:7c:18:a8:84:15:2d:bb:c3:c0:72:9e:
c5:b4:d5:8e:c4:bf:ee:de:85:32:30:a7:74:18:58:
04:3e:aa:3c:cf:f7:8c:0c:94:a1:00:49:47:75:0b:
50:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A9:99:B1:00:21:5B:36:79:89:E9:6C:D8:E8:04:D4:67:55:9C:68
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d8:33:0e:b3:fb:77:cb:4a:eb:ef:33:ca:86:e2:ae:dc:a2:
84:1e:f3:60:59:ef:05:12:06:81:c1:ca:6b:41:30:eb:72:b2:
e1:48:eb:28:1d:4c:66:8c:f8:ab:6d:cf:9a:45:29:e9:0e:13:
fe:e3:d5:32:6c:8b:9c:41:62:46:e0:de:e2:d1:43:6b:2a:62:
40:94:fe:05:31:c7:a8:a1:4e:b1:25:8d:d1:ee:fe:37:92:89:
ba:63:58:99:63:83:cb:bb:1b:55:92:70:f7:cd:fd:d4:dd:2f:
4e:00:ea:00:2b:80:dd:71:bf:a5:47:8d:51:95:f0:35:85:a4:
f2:81:fa:92:fd:1f:15:95:40:18:02:2c:63:00:c1:38:08:90:
18:50:ed:87:11:aa:8e:a5:5c:30:67:21:bd:ee:1a:32:be:41:
42:a0:9b:fd:3a:d3:2a:48:42:71:99:99:f5:52:88:57:56:28:
eb:4f:b7:9a:30:2d:c7:0f:b2:17:7c:a1:59:fa:a0:b3:aa:46:
e3:d7:3b:e6:cb:71:ce:a8:45:56:ba:d8:ac:ca:d1:f9:33:39:
98:ec:10:72:64:62:7e:17:24:e6:bd:15:1d:a5:d1:f1:91:04:
82:27:a2:ae:ac:ce:52:81:74:a8:56:31:74:88:2c:fc:d9:dc:
ad:4d:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:01:16 2025 by rpki-client