Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json)
Hash identifier: pdJNmxuI7SR89HQfy3xsECJp9vFKSk4rxXxEM1fDkBM=
Subject key identifier: DE:76:D0:A6:BC:A6:15:E0:15:8C:E5:D4:F1:4C:99:3C:91:0A:C9:D5
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 019675D5154C197E7D544CE6581CE71BE8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
Manifest number: 09D4
Signing time: Sun 27 Apr 2025 06:00:20 +0000
Manifest this update: Sun 27 Apr 2025 06:00:20 +0000
Manifest next update: Mon 28 Apr 2025 06:00:20 +0000
Files and hashes: 1: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (hash: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=)
2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: mHUbxGqm83JBSQ6XTVyUohY28zvK1VTco+AMutDx+SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:15:4c:19:7e:7d:54:4c:e6:58:1c:e7:1b:e8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Apr 27 06:00:20 2025 GMT
Not After : Apr 28 06:00:20 2025 GMT
Subject: CN=de76d0a6bca615e0158ce5d4f14c993c910ac9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:75:68:17:be:cd:70:f7:1e:27:6b:66:f5:5a:
ee:03:f1:a7:82:7a:2d:cc:d5:cc:44:44:11:0b:89:
44:d1:3f:0b:65:72:89:92:66:fa:c8:4b:a3:a3:b4:
f9:a3:ac:55:fd:9c:ce:a4:57:7c:80:59:6e:bc:03:
d8:d1:c6:62:95:50:84:69:0c:aa:39:f8:05:4b:b6:
85:28:10:d1:64:b4:0b:d2:b8:81:f5:eb:2f:31:19:
8b:bc:98:1b:4e:53:0b:df:49:a0:bf:28:48:a4:d0:
f2:8e:fa:0c:a6:53:f7:d0:f6:11:66:3a:4d:a1:c0:
41:b9:ae:0b:d9:28:d6:1c:20:b5:c7:d1:83:da:eb:
7d:e3:2a:a6:65:5a:49:31:cc:c5:25:39:8c:06:27:
19:c6:1e:e7:54:c2:76:8d:b4:7b:ab:ec:51:7c:17:
da:96:48:05:c7:5d:93:ae:82:00:ae:39:f1:eb:46:
d4:3c:e0:e8:ed:dd:ef:bc:c3:99:7c:5a:2e:81:28:
07:c7:be:13:88:49:d3:75:7b:24:46:04:c3:81:1a:
c8:a8:4b:81:1f:8d:7f:48:d7:76:36:b0:4a:88:db:
dd:09:94:f3:78:26:d8:e6:7e:f6:04:a9:ed:13:86:
18:97:37:ab:26:c7:4a:e7:82:c0:50:6e:1f:89:2d:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:76:D0:A6:BC:A6:15:E0:15:8C:E5:D4:F1:4C:99:3C:91:0A:C9:D5
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f8:36:67:65:a9:a2:9d:91:eb:5e:3d:e2:ee:5f:c7:0d:26:
27:6d:27:cf:01:15:76:bd:a5:6f:bf:5d:91:ff:80:80:9e:53:
dc:55:cf:a5:8b:b7:7e:42:41:74:11:be:33:86:4f:c8:7d:72:
62:22:78:59:41:85:8a:f8:26:ec:89:fb:af:6a:49:dc:1e:97:
11:02:be:17:46:96:24:6a:20:a2:37:87:6d:0b:e0:53:1d:0a:
92:14:f1:2c:c1:23:e5:40:21:71:14:77:e7:86:cc:81:69:09:
d3:ba:36:e9:46:88:a4:4b:aa:26:97:9e:50:0b:f5:87:ef:50:
26:e5:f8:1a:64:ac:31:e1:ab:c0:89:69:3f:50:ca:e8:49:d3:
4e:8b:d2:6a:4b:63:d3:0c:57:54:04:23:a5:1e:7e:9b:9f:d9:
31:f5:17:e8:5d:3d:23:f7:cf:63:9d:97:7c:62:9b:3a:13:66:
93:12:44:09:ec:a6:f5:df:87:11:dd:dc:0f:c2:14:6a:18:c3:
d0:ee:8d:30:64:b9:e6:54:c2:2a:75:7d:11:da:d6:42:1a:b9:
57:41:fc:14:84:9e:04:5d:e8:28:fb:ca:c7:73:f1:9e:31:15:
9a:3c:ac:49:44:1d:b8:80:cc:60:d4:7a:fd:b5:17:f5:b7:c3:
d9:64:67:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:52:53 2025 by rpki-client