Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
File: z0D92CoP3ztwvhgiHuumDYAe178.mft (raw, json)
Hash identifier: K6LzJ+N1WkxtjdcigE9gMYa41d84YcAFV17FhI/HWnc=
Subject key identifier: BB:DE:FD:29:81:82:26:3A:6B:25:04:C5:00:52:A7:5D:97:9D:2D:5B
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 019678D61A06E1DB485ACDD59B71985AC013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
Manifest number: 1524
Signing time: Sun 27 Apr 2025 20:00:19 +0000
Manifest this update: Sun 27 Apr 2025 20:00:19 +0000
Manifest next update: Mon 28 Apr 2025 20:00:19 +0000
Files and hashes: 1: 3CMB0mE1xTb-XY0wsKNGKjk0bFk.roa (hash: lQQ7mzHc9z9XCmBgSmyDJlA6JGPYMp41l5No4NnlwB0=)
2: bIWvsgV4TrBP7pw5O1uwj4fGsZQ.roa (hash: 9Cz0tiQS8/nDaglgPuFlELicHHSaEtfkwdT1X8AgbOU=)
3: z0D92CoP3ztwvhgiHuumDYAe178.crl (hash: kUvVHk6sj+MhTU3dVmGg9pgIP1XlRa7QnSe651dvoCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:1a:06:e1:db:48:5a:cd:d5:9b:71:98:5a:c0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Apr 27 20:00:19 2025 GMT
Not After : Apr 28 20:00:19 2025 GMT
Subject: CN=bbdefd298182263a6b2504c50052a75d979d2d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:5b:cf:5b:7c:97:bf:5c:2f:ba:99:4b:77:
62:1b:c1:f4:d3:8c:f9:c0:ed:43:d9:f9:3b:a5:37:
74:c7:6f:b0:45:33:47:4e:98:39:7d:0f:05:f1:a5:
52:70:9a:00:ca:46:1c:ad:cc:57:2e:99:b8:70:a8:
13:7b:6e:0d:51:38:d8:40:5f:19:f7:b7:73:8c:cc:
8a:83:23:af:47:e3:e0:48:ae:47:78:ed:dd:16:8b:
af:ae:07:ef:ee:d6:4f:cc:f1:e3:ab:db:39:44:db:
4a:e5:70:2c:6a:68:34:1a:d3:0f:75:a9:ac:dc:b4:
50:48:2c:95:9b:25:09:08:f1:74:a6:d7:27:4d:63:
a2:66:f1:9b:5d:ef:04:d7:20:49:11:f5:c1:95:d2:
27:9a:a4:de:bd:2a:a5:87:7f:70:34:99:b3:ac:25:
0b:26:7c:27:c0:72:40:9a:cd:a6:2c:41:58:e7:ca:
62:0d:76:b8:1d:42:c1:1a:60:79:77:8e:8b:ee:c5:
de:c9:48:ed:8a:15:af:fd:47:52:8e:2f:d1:54:31:
03:78:44:be:3a:ad:64:82:51:90:c6:36:59:d3:71:
ce:af:8d:f2:f7:33:4e:4e:16:3a:6d:69:6b:c3:1b:
7b:5c:e5:1e:25:a5:b4:18:ef:3d:01:de:51:f1:01:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:FD:29:81:82:26:3A:6B:25:04:C5:00:52:A7:5D:97:9D:2D:5B
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:80:37:3c:a4:bf:48:92:b5:6f:18:3c:98:1b:cb:73:7a:48:
da:d5:63:8d:12:3a:54:26:c8:ad:36:f3:65:4e:45:c8:f5:de:
83:7f:8b:da:e4:e8:d3:6a:8d:1c:79:de:9f:5f:74:8a:0e:88:
b5:1a:13:73:0a:a3:9d:16:85:fd:59:48:d0:ad:8a:b7:af:d3:
bc:64:3d:e6:63:96:9e:91:3c:36:15:1d:ad:2f:ae:66:af:70:
8a:11:10:0b:63:10:a8:81:12:b9:af:57:fa:ae:c7:5a:20:14:
c2:8a:4b:a3:c7:b7:22:b0:bc:9a:f3:0a:4d:74:66:3f:af:7c:
78:8c:03:cd:c9:d3:a8:5c:4a:7b:cc:45:8e:57:7e:44:b0:3e:
29:e2:11:a3:b5:3e:ba:b4:b5:25:90:3e:32:3e:14:a6:a4:2e:
bb:82:6a:12:1b:4e:8a:9f:03:01:30:33:c4:69:12:20:02:5e:
53:d5:25:ab:af:b7:19:20:55:2f:36:dc:a4:d2:59:02:a7:49:
e5:68:40:d0:e9:9b:60:f6:05:e5:25:81:7c:17:84:66:d3:f0:
51:cb:c2:05:76:0c:05:88:d2:48:08:aa:1b:9c:e9:af:ef:81:
2d:e2:94:03:e2:9c:f8:c7:33:42:22:ba:c8:48:f9:d0:56:bc:
5d:1a:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:30:06 2025 by rpki-client