Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json)
Hash identifier: Ao8jfamF4b3rZUoKvu6bOJDLczxg/ZEXK/ucn65d2Fc=
Subject key identifier: 69:D1:F5:99:DE:53:6A:71:CD:E4:EC:72:5D:3A:C7:92:C9:01:2D:C9
Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Certificate serial: 01967D2144D3E202B2043D0EDB2E81F7FC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
Manifest number: 124A
Signing time: Mon 28 Apr 2025 16:00:54 +0000
Manifest this update: Mon 28 Apr 2025 16:00:54 +0000
Manifest next update: Tue 29 Apr 2025 16:00:54 +0000
Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=)
2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=)
3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: CTQRsqvmSGxW9SDbHW/ICXfh7QdZxdmBJpKJBsppZok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:44:d3:e2:02:b2:04:3d:0e:db:2e:81:f7:fc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4
Validity
Not Before: Apr 28 16:00:54 2025 GMT
Not After : Apr 29 16:00:54 2025 GMT
Subject: CN=69d1f599de536a71cde4ec725d3ac792c9012dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:af:f1:bc:06:bc:59:ed:2f:99:69:04:8d:
98:c5:c7:f6:f5:2a:97:c2:7a:bd:0c:0f:fe:24:33:
51:7a:39:8a:dd:85:13:bd:45:d9:c7:d7:3f:59:57:
d3:48:53:f7:3d:bf:93:2c:cd:3b:d8:35:cf:2f:48:
04:d8:1c:f0:33:ac:db:aa:d6:74:49:93:fd:2e:99:
14:40:3f:99:1e:dd:e3:40:07:7a:36:08:ed:c1:83:
cd:7d:cc:dd:65:93:60:4f:ef:46:4e:b6:30:80:91:
37:3f:ed:b8:c9:67:d3:c1:c5:5e:1e:4d:36:71:98:
43:04:13:63:a8:64:3b:cb:41:ab:53:7e:9b:0b:f2:
0f:83:1c:01:de:ac:c0:ba:c1:1e:08:8d:cc:d4:76:
75:fd:55:2b:15:ae:f3:07:6d:51:d8:a3:b9:86:2a:
6c:b1:56:a7:29:d7:50:51:22:d3:fa:32:c0:2b:ab:
93:84:38:29:ee:b9:33:25:7b:6e:0f:ac:f1:f9:0f:
8c:d0:2f:84:72:bf:ac:dd:7d:fc:fe:18:3f:6c:15:
cf:bc:c7:b2:71:d7:f9:c8:9a:a8:c3:e6:79:8d:d9:
44:c1:cc:86:0a:89:ce:ea:8d:54:88:ff:57:82:5b:
5b:d3:99:40:2c:fe:91:c2:bd:5a:5c:6f:24:5c:95:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D1:F5:99:DE:53:6A:71:CD:E4:EC:72:5D:3A:C7:92:C9:01:2D:C9
X509v3 Authority Key Identifier:
keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7e:6c:ac:19:0f:d3:cb:6a:9c:56:b4:b1:11:6f:26:cc:75:
d4:07:62:9f:4a:3c:ce:20:85:6c:34:52:f2:86:2d:a5:1a:4c:
53:a3:f1:d8:b9:a5:30:2d:81:35:40:b5:79:7e:3d:b2:93:dc:
f8:be:f9:85:c8:a2:9b:77:7e:ea:0e:37:96:2d:5f:15:e8:85:
8c:1c:3a:33:dc:4c:1d:41:74:5b:9f:72:b3:48:8a:79:cd:80:
49:f4:47:01:35:41:a9:a8:95:db:89:e1:ab:9b:15:54:3d:2b:
24:4a:20:db:06:20:ef:43:f3:cb:c4:bd:b4:cf:34:50:39:d7:
39:9c:c9:5e:d1:73:c9:93:64:45:14:a6:e0:3b:a4:d5:10:11:
b2:50:f5:94:53:9a:76:94:81:15:4c:a6:ad:35:ac:85:e7:54:
fc:8c:32:ce:13:a6:bf:a3:79:1f:ec:55:32:54:6d:56:df:e2:
be:37:6b:3d:08:0d:87:0f:d9:f8:31:3d:13:9b:83:6e:13:c5:
f9:a5:01:21:f7:ea:f3:f1:ce:1e:8b:f1:e9:9b:50:30:b3:17:
bf:c8:08:52:82:b7:c9:73:3d:a5:dd:d0:c4:21:0a:4f:4e:41:
35:98:ae:d6:62:e5:5e:14:27:8f:91:75:55:06:0c:50:82:f6:
33:b1:89:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:58:38 2025 by rpki-client