Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File: pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier: jfF2bpAhO1LANkf9XwOPPXmmnzf1NmUV13s0LoQmDtY=
Subject key identifier: F9:67:87:86:0D:2C:39:48:F0:56:A9:84:94:26:C5:E2:D3:CE:AC:89
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 019678D67B6148F271EEB369A817A6CF0942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number: 1165
Signing time: Sun 27 Apr 2025 20:00:44 +0000
Manifest this update: Sun 27 Apr 2025 20:00:44 +0000
Manifest next update: Mon 28 Apr 2025 20:00:44 +0000
Files and hashes: 1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: keVwuKICyisDi4HhBPAkbm6eJgWBUf1MI4GzB26xilg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:7b:61:48:f2:71:ee:b3:69:a8:17:a6:cf:09:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Apr 27 20:00:44 2025 GMT
Not After : Apr 28 20:00:44 2025 GMT
Subject: CN=f96787860d2c3948f056a9849426c5e2d3ceac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:46:cd:9e:73:f1:98:7d:96:3c:4e:7b:9a:
91:55:a5:52:1b:e2:57:e6:56:7c:62:a5:d1:a3:a2:
3a:53:49:07:65:be:22:cf:4f:8b:dc:a9:96:c3:b3:
2d:1e:6f:e5:a0:25:5b:f0:52:c1:b3:51:3f:a3:fc:
17:55:a2:91:a8:01:b4:b2:68:06:e2:ff:0b:ed:34:
58:b3:df:d8:ae:87:1f:91:aa:74:2a:be:fe:45:2a:
ca:ec:a0:8e:9b:3e:59:d9:3f:41:16:03:32:76:97:
d4:b6:e5:2b:2a:9b:4a:bb:82:6e:ff:d6:a9:c0:1c:
7c:64:8c:5f:64:33:e4:82:e7:47:ca:ca:ef:19:02:
58:b7:34:8f:9c:7d:e2:1d:56:03:da:1a:14:cf:aa:
3a:4c:0f:21:20:e5:2b:37:80:67:06:a4:a6:dd:19:
4f:35:bd:f1:9e:a0:26:ad:d7:5d:45:9a:23:50:b4:
9d:a9:ea:1e:5e:cf:b0:1a:8a:3c:d9:fd:17:21:12:
1d:22:94:53:22:f8:c3:9c:c4:40:1b:9d:25:b2:ab:
86:39:97:73:d0:f5:a2:38:b5:de:54:0b:5a:8f:b5:
ce:0d:97:d3:33:9d:82:34:a4:1c:23:3b:c6:57:5e:
63:6a:f8:fb:1b:7a:12:72:11:fc:d8:d9:d3:17:80:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:87:86:0D:2C:39:48:F0:56:A9:84:94:26:C5:E2:D3:CE:AC:89
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9d:fe:05:6e:e3:2d:b4:c3:7c:0a:3c:d2:c1:d5:c6:7f:ab:
62:dd:d8:8e:a0:81:34:f1:69:db:9f:67:4b:45:da:e2:02:5b:
fc:68:bf:ba:4f:b1:59:fa:d7:3f:eb:b6:7e:6d:bc:0e:8e:d8:
6b:1c:69:d6:67:ce:42:12:8a:39:89:1b:35:49:9d:fb:fe:4c:
92:29:a2:b6:d5:99:b5:02:52:94:11:6b:3b:de:19:32:f1:71:
99:f0:87:bf:23:10:85:75:3c:07:57:38:cf:cf:79:0d:3e:de:
ec:d1:4d:b9:5e:31:20:c5:a7:d4:d8:58:8d:ba:46:7f:ee:b3:
a8:37:39:cb:81:a9:ce:9f:88:02:e4:41:1d:af:75:8d:64:72:
6f:0e:65:07:c7:9d:bf:2e:7d:c5:64:f8:22:49:8f:59:30:98:
15:72:61:12:d8:ed:35:93:45:4b:0e:83:ef:d4:7f:c4:4b:ab:
a7:0c:7b:6a:a6:b6:12:5a:f4:67:dd:fb:a9:25:85:77:f8:2a:
44:c2:3d:89:52:dd:30:e2:bf:a5:0e:35:2a:68:b6:29:e9:6f:
e9:df:5d:be:4a:dc:e8:21:71:05:87:1b:d9:62:76:0e:d1:f2:
17:dc:4a:26:68:75:5e:66:d0:11:a6:f4:78:08:0c:c1:a7:5c:
a6:dc:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:08:36 2025 by rpki-client