Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: zdQC0BkR8AwTz+DuerfiBbfuB/pfjcABnwNvUcxJAVY=
Subject key identifier: 0D:B8:95:9E:09:E2:C1:BE:30:B4:22:A8:BA:8E:FE:6F:9F:84:50:0C
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 0196876D7422FAF32AC05A1B54685C8A96C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 0E07
Signing time: Wed 30 Apr 2025 16:00:19 +0000
Manifest this update: Wed 30 Apr 2025 16:00:19 +0000
Manifest next update: Thu 01 May 2025 16:00:19 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: 6yhbLpbW8H0kwUDimi/cwnDYSoUbXhIixnfU4J8bByM=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:74:22:fa:f3:2a:c0:5a:1b:54:68:5c:8a:96:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Apr 30 16:00:19 2025 GMT
Not After : May 1 16:00:19 2025 GMT
Subject: CN=0db8959e09e2c1be30b422a8ba8efe6f9f84500c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:91:2b:46:4d:96:32:50:84:f1:6f:f5:a8:
f2:97:41:b0:43:56:b5:76:22:8d:7d:97:74:29:18:
19:6b:5c:fe:61:de:ac:33:52:08:27:3c:cb:71:c1:
e1:76:db:03:a9:c2:93:62:3d:86:c8:2f:ee:f7:ca:
f3:37:90:e5:d2:fc:22:10:02:41:54:56:95:d2:90:
f3:dd:4a:69:35:29:a2:53:17:b6:26:d9:77:76:06:
1b:e6:bb:b5:51:84:7c:15:75:5f:93:9f:01:d0:6b:
35:79:f1:42:c9:bd:d9:8a:be:16:45:12:39:2e:ae:
63:06:b9:ec:3c:1f:52:6e:5d:19:0c:4c:4c:9c:c7:
62:cb:78:a3:59:1e:0e:de:15:ac:f8:ec:c8:22:2d:
9f:10:09:a2:f4:4b:3b:6e:ac:94:20:dc:f2:bc:e4:
e0:c5:da:8f:a9:f7:a2:af:2f:47:98:69:b4:f5:2f:
ce:20:dd:ec:88:e6:61:cc:4f:48:47:50:4e:e6:cf:
95:9e:12:88:f3:1f:44:90:ed:b3:81:fc:e6:f2:ff:
6f:ee:65:65:35:63:b4:c1:6d:8e:e5:87:e3:b3:cc:
3a:6a:76:a4:88:aa:e1:48:14:1e:68:c1:9f:e3:a7:
e8:56:c6:4e:3b:7d:63:1d:26:0f:31:b8:8f:44:1c:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B8:95:9E:09:E2:C1:BE:30:B4:22:A8:BA:8E:FE:6F:9F:84:50:0C
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:89:c2:47:5c:d4:32:26:8d:ae:1e:91:34:18:13:5a:f3:9e:
56:9e:6b:d7:18:46:98:6a:fe:39:6e:4a:7d:83:a3:25:01:5a:
f4:26:ff:9e:fb:c9:87:00:ff:31:c4:fb:3c:a9:88:cf:40:b2:
7d:a0:35:23:42:8a:04:65:8c:90:c4:f7:90:03:ec:81:6c:53:
f3:61:dc:04:9d:7e:46:f8:b5:db:34:b3:e6:3a:dc:30:f6:d3:
b7:dd:02:e9:b6:2a:d6:18:4a:4c:7f:5d:72:c3:78:1d:c4:a6:
3e:c3:42:16:b8:5e:5a:ff:04:f3:8d:bd:32:0d:29:c1:c8:61:
e5:53:ce:60:c5:1d:0c:83:fd:d0:0f:ea:24:c3:68:2b:00:44:
2d:76:c6:e4:6c:2f:ba:42:e6:d7:af:ff:00:66:0c:ba:23:79:
78:58:a2:9a:bb:ef:be:5b:e1:92:44:63:5f:c6:9e:d5:e3:8b:
2b:4d:77:1e:15:94:a7:c7:74:ae:e2:43:87:22:73:b9:77:96:
a0:e4:99:c7:74:5f:f8:66:42:87:d8:e1:b5:67:b1:f9:a5:93:
dc:0b:bd:15:5b:7c:71:5b:61:e1:7f:93:42:06:19:27:8f:e2:
65:24:20:1c:ab:51:e7:b1:a3:46:57:98:dc:01:e8:fb:15:56:
14:4b:39:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:13:37 2025 by rpki-client