Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
File: znGAxLrTz0JaUGcuHLep0qx44gw.mft (raw, json)
Hash identifier: VbzF0BSK2wSmnNO3G0Frt1g4xz6qGU5+tkedbLxj5FM=
Subject key identifier: 6F:10:F1:CB:13:81:9A:27:7B:AF:15:AD:13:35:5F:40:FE:19:DC:31
Authority key identifier: CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
Certificate issuer: /CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Certificate serial: 01967E34199B5B00EF6D3DDF828FBDF5F862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
Manifest number: 11BA
Signing time: Mon 28 Apr 2025 21:01:05 +0000
Manifest this update: Mon 28 Apr 2025 21:01:05 +0000
Manifest next update: Tue 29 Apr 2025 21:01:05 +0000
Files and hashes: 1: GeqUCcFpQ21Ke1I_WIJvk2jePiQ.roa (hash: 26yR+VCk/Hf4BfoJU9xGk7UFdbLVpFDxyv4u/gu5wGA=)
2: wbMPRaPeBCBjr_X1gpDO7WwYRg0.roa (hash: GEEk7uH2XTiN16zpAji2ekHgUSjOP6/rQg31rkY0wKE=)
3: xG8mhMV87H4zrHIWKqzuRUqeQPg.roa (hash: urIMILztFQN60p/ZQRBKUgWXG4HvMI/s4ku0GaXCltA=)
4: znGAxLrTz0JaUGcuHLep0qx44gw.crl (hash: bx59WC8oStqIXXOTIFxRD2Lxgd8RRevBR1cmWVYrvHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:19:9b:5b:00:ef:6d:3d:df:82:8f:bd:f5:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7180c4bad3cf425a50672e1cb7a9d2ac78e20c
Validity
Not Before: Apr 28 21:01:05 2025 GMT
Not After : Apr 29 21:01:05 2025 GMT
Subject: CN=6f10f1cb13819a277baf15ad13355f40fe19dc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:86:6d:47:6a:8b:34:83:90:13:ae:7b:c5:
aa:04:3c:79:3d:4a:ce:50:70:4d:ba:02:e3:45:51:
12:94:ca:b2:9a:a5:35:7a:0e:1c:0b:97:13:cf:ba:
d8:5f:56:40:f0:2b:ac:9e:72:7c:02:d3:3a:f2:6d:
85:41:37:49:0c:d8:6d:85:ef:fa:e3:0f:c9:f2:01:
4c:ee:e1:50:cd:66:40:9c:4a:58:c7:43:e7:3a:2d:
51:3c:75:46:14:72:c8:4e:08:dc:07:f1:8d:ad:bc:
be:3a:89:04:c9:41:5f:d7:58:af:d5:d6:ff:09:ad:
d3:dd:9c:72:95:70:45:9d:43:1a:e0:b5:a5:76:4b:
b5:81:ce:af:c7:c0:65:7f:c7:dc:ce:ea:f6:a7:f3:
66:aa:bb:cb:dd:ad:f9:08:8c:1c:54:ee:eb:30:55:
05:0f:94:c2:9f:85:f9:83:40:2f:2f:ea:d5:b8:fd:
ab:43:21:e1:21:37:16:28:5b:dc:66:ba:f5:30:56:
cb:e0:d9:26:5e:86:54:4c:f3:f0:56:2e:ee:2d:14:
44:dd:db:3e:bd:15:9c:34:4f:8b:8b:d2:34:14:05:
dc:82:c1:57:96:6d:ec:4f:f2:bb:c3:ae:a2:b8:87:
00:85:e7:a6:3c:bf:96:81:0b:cc:75:25:93:47:c2:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:10:F1:CB:13:81:9A:27:7B:AF:15:AD:13:35:5F:40:FE:19:DC:31
X509v3 Authority Key Identifier:
keyid:CE:71:80:C4:BA:D3:CF:42:5A:50:67:2E:1C:B7:A9:D2:AC:78:E2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znGAxLrTz0JaUGcuHLep0qx44gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d5cd-79a9-4c82-8fc4-046d2e2adcd5/1/znGAxLrTz0JaUGcuHLep0qx44gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ce:ee:36:2e:0d:2f:d9:e3:f8:89:cb:1d:a7:f2:e9:a4:40:
22:44:1d:1f:f2:d7:91:95:a0:6a:1e:0b:71:e3:0e:11:d5:2c:
93:4e:ea:a9:1d:5e:30:bc:0b:88:a6:11:da:ab:f1:ad:99:08:
c6:eb:4b:63:4a:68:5b:ce:8a:80:8d:a0:e0:33:2b:2f:1d:1b:
ea:35:42:bf:b6:b4:04:66:09:19:c9:b4:61:e4:7e:6c:c4:8a:
32:26:39:73:3a:0d:56:fc:76:d2:f9:87:0c:3e:8d:c7:96:b2:
b0:94:58:3f:c2:f3:18:ce:67:96:16:cc:c9:5a:94:49:f0:bb:
07:9b:16:dc:66:55:00:70:3e:f2:9e:c8:bb:8b:69:e1:76:38:
48:94:29:59:2e:f7:0f:20:1c:e3:97:b2:e2:7c:6b:74:36:6f:
fa:93:6c:ae:e9:ac:b4:2d:68:82:db:6d:c0:e1:4f:0f:cb:f8:
ba:c2:ca:5f:ba:3c:eb:8c:a3:fc:20:36:26:8c:cf:3a:56:74:
a6:ff:13:da:e4:82:b0:3d:ba:e8:e7:cf:37:c8:9d:6e:5a:7b:
5b:10:ff:63:61:6c:58:09:f9:32:ab:0e:85:a1:45:1b:1a:3a:
aa:5f:a6:b9:9d:47:85:08:82:26:0f:92:7b:2f:b1:5c:9d:19:
b7:41:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:57:47 2025 by rpki-client