Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
File: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft (raw, json)
Hash identifier: Sk4qG7tLS99V2+vdE8O127riin2gGBnO1U/V2vESiT0=
Subject key identifier: A7:DE:A2:E0:C9:DA:91:E7:EC:FA:6F:D0:1F:E5:46:23:83:0D:8B:90
Authority key identifier: 47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
Certificate issuer: /CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Certificate serial: 019684DA35FD82B55B58E4A3741C9E56D45A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
Manifest number: 0B56
Signing time: Wed 30 Apr 2025 04:00:15 +0000
Manifest this update: Wed 30 Apr 2025 04:00:15 +0000
Manifest next update: Thu 01 May 2025 04:00:15 +0000
Files and hashes: 1: LX0lDVhKXnxLv0r9aLXJhJHu_E0.roa (hash: 7TRQZhECen5sQILgMQ/YVGL/75Sg6nbZxTLOGOZ3zSk=)
2: RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl (hash: ueVybmJ5sMTiSGi2oeL1QDGo05a2+Klb//MO1PJAODA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:35:fd:82:b5:5b:58:e4:a3:74:1c:9e:56:d4:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732d0fce83fb67382ceace3756c8b13c0a95c98
Validity
Not Before: Apr 30 04:00:15 2025 GMT
Not After : May 1 04:00:15 2025 GMT
Subject: CN=a7dea2e0c9da91e7ecfa6fd01fe54623830d8b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:7b:90:00:1e:d0:26:50:80:a6:da:e7:41:
45:91:84:53:54:a9:de:af:1a:7a:94:fe:7f:7e:05:
ee:8c:c2:49:19:7b:5c:2a:08:ae:f5:e5:91:75:2f:
37:b9:f3:08:46:86:25:8c:af:23:23:ce:b1:37:3c:
4b:b6:54:fa:1d:24:76:94:a3:1d:9b:74:81:70:4b:
6b:ff:b5:f9:56:f1:08:03:85:06:62:4c:05:d1:12:
29:c6:90:89:70:6a:07:95:12:43:e6:f9:8a:9c:69:
d2:0b:60:bc:a2:2a:32:64:bc:42:70:9d:fd:65:24:
d7:53:bd:4c:6e:e4:b8:1e:0c:9d:95:13:38:e6:3a:
4e:7c:47:64:6d:0e:a6:d4:a1:13:d5:66:73:38:54:
2d:a8:02:ea:91:58:c8:8b:9f:4e:16:8b:a8:53:7c:
0a:76:e4:ea:4f:a2:29:27:44:88:9c:16:44:2a:ee:
a9:04:14:48:69:26:b8:2d:77:f0:b4:f6:72:22:6f:
88:4e:94:e3:50:f9:e6:ca:58:94:f3:07:c3:e4:af:
c9:5c:a6:8b:35:93:f6:3c:57:91:31:52:f0:08:cd:
eb:7f:75:61:78:cf:f3:97:8e:61:bb:19:29:75:7f:
91:74:ad:6e:11:a0:9f:62:ac:a8:18:b6:6f:a1:d4:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DE:A2:E0:C9:DA:91:E7:EC:FA:6F:D0:1F:E5:46:23:83:0D:8B:90
X509v3 Authority Key Identifier:
keyid:47:32:D0:FC:E8:3F:B6:73:82:CE:AC:E3:75:6C:8B:13:C0:A9:5C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/dcacd2-d780-46f7-a5b6-79cc7a14bf9a/1/RzLQ_Og_tnOCzqzjdWyLE8CpXJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e8:37:cb:7e:fa:7c:1a:9b:40:57:04:99:a5:7d:a5:72:9b:
1a:92:26:d9:3e:ae:e9:7c:c5:3b:22:ee:fd:5f:34:41:17:29:
fc:7d:cb:d8:fd:89:eb:a4:ec:80:21:7c:36:a2:85:35:28:c8:
fd:6d:5e:73:ad:72:a9:a9:b5:38:a4:ed:a3:3b:77:91:8a:ff:
52:15:b8:23:d7:cd:9a:87:45:96:d8:43:d8:dd:3f:86:ec:d7:
85:95:db:83:ea:9b:ac:57:b8:f3:21:81:e3:ab:8d:df:fd:da:
78:16:94:45:5e:c6:ed:d7:c4:a7:d0:88:54:fa:f9:ca:32:83:
ff:70:23:b2:91:d0:35:4d:d0:e5:28:d0:d7:b1:45:f2:26:5f:
90:66:cc:d3:34:73:0b:ca:93:53:3a:a4:d1:78:e1:7c:a9:5a:
8c:c6:a9:33:43:8a:8d:af:c7:87:cd:cd:bd:5a:ef:aa:6d:5b:
f1:ba:b9:ab:43:af:37:3b:d9:c9:c0:bd:b2:dd:9b:65:f8:e7:
1e:12:7f:7d:ce:76:c3:c2:57:3c:87:58:20:60:fe:22:df:ed:
8d:31:01:bd:d0:98:2e:45:2a:0f:c2:74:bc:da:e4:03:2c:0e:
ba:62:c0:ae:98:8b:be:f3:21:f0:8c:5a:2b:ac:76:98:af:13:
2f:a0:a4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:43:28 2025 by rpki-client