Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: VmSJUxd3mA4mfbBbzNt26puWfkmaTa7MifmBj3iMpx4=
Subject key identifier: 3F:5A:A6:CE:5F:EF:9F:25:C8:CB:B3:EF:03:47:36:E4:EF:DD:49:0A
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 0196789FB57F585C717FD85F558FDF41C7DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 05AF
Signing time: Sun 27 Apr 2025 19:00:54 +0000
Manifest this update: Sun 27 Apr 2025 19:00:54 +0000
Manifest next update: Mon 28 Apr 2025 19:00:54 +0000
Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: fTkN6Oy0YKPe5w4pwbNNgpesPpbvY5tDmZkpMz9oxrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:b5:7f:58:5c:71:7f:d8:5f:55:8f:df:41:c7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Apr 27 19:00:54 2025 GMT
Not After : Apr 28 19:00:54 2025 GMT
Subject: CN=3f5aa6ce5fef9f25c8cbb3ef034736e4efdd490a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:9e:6f:b8:24:a0:14:a6:6c:fe:47:ef:cb:
d2:40:a0:ca:2f:29:cc:6a:df:d5:92:ef:54:f0:e0:
56:3b:c0:20:9d:28:50:47:23:96:8a:95:6d:d9:07:
0f:ec:8f:65:c4:18:81:a1:29:0e:00:05:49:08:c4:
3b:2d:77:33:8b:0c:9b:6c:77:07:4d:85:a9:79:d2:
b5:30:e9:8e:16:d5:44:39:96:91:03:57:68:5f:d0:
4f:0d:f7:ea:9f:47:58:24:de:4a:cc:a4:8e:68:bb:
62:aa:ff:b8:f9:f0:8e:c3:6e:ed:92:dd:d9:76:00:
9a:37:22:bb:6e:c2:6c:ea:8c:56:6e:25:17:60:44:
a6:6c:78:bc:36:93:c2:23:7c:e7:80:d1:a6:22:62:
80:2c:d3:78:91:d3:fc:12:07:f4:79:00:2b:70:df:
1c:0a:c8:bd:dd:63:b7:a8:aa:cc:a0:57:ec:ce:f5:
9a:52:2f:8d:ea:ec:07:7b:9d:4f:82:fe:ef:55:14:
31:46:34:b2:7a:aa:06:6a:e8:7f:85:5f:09:15:51:
4f:9b:ae:04:64:30:ec:b8:32:1b:6b:30:b2:ac:5c:
85:5c:b9:f1:90:13:cf:c2:a6:e4:93:5a:33:f8:9f:
5c:83:1b:42:06:2f:39:d5:84:3a:4e:3c:df:0e:e4:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5A:A6:CE:5F:EF:9F:25:C8:CB:B3:EF:03:47:36:E4:EF:DD:49:0A
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:ae:ae:80:b5:d2:80:c6:39:2f:46:d8:40:a7:71:b6:ae:
78:96:30:16:41:ff:89:e9:8c:28:25:61:9f:fc:38:ce:2a:d9:
2f:68:db:a6:f0:75:78:53:81:05:4e:a6:ab:64:8f:cb:76:66:
19:3c:5d:a5:ff:40:aa:61:9e:a9:8c:b6:31:a1:a1:a8:5a:40:
95:2d:a5:c3:c1:26:71:d7:b0:bd:eb:be:50:82:9d:44:ab:b5:
fa:85:6f:cc:3e:0d:cf:2c:3b:d5:de:11:b8:e6:99:56:2a:dd:
13:da:30:16:7c:df:bb:51:0e:f9:d9:6c:fc:01:30:92:b6:6b:
7c:f7:54:dc:23:fa:8e:0b:93:76:c1:93:e8:e6:f1:c8:c8:6d:
47:be:d3:c8:68:0a:c6:fe:6c:49:8b:44:7f:77:ab:6e:b6:e7:
5f:e2:af:03:0b:b7:a6:03:04:a4:2e:75:f1:a9:2c:25:1a:1f:
6d:89:da:3f:29:fd:e8:be:45:8b:57:30:a6:0c:b3:76:41:d9:
2d:91:ab:a5:fb:45:4e:73:4b:bb:f7:27:25:6f:ce:a7:91:47:
46:63:d8:97:e8:74:7e:c8:96:04:b0:58:c1:fc:63:60:a2:f2:
f3:f1:96:ab:f9:68:98:d8:5a:1c:ff:dd:f5:34:55:4f:96:f2:
35:bf:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:17:33 2025 by rpki-client