Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
File: ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft (raw, json)
Hash identifier: v5sD1GTRsXkFS0KHC3g76ENzUwL5OD98jdwlULFvjNM=
Subject key identifier: 31:EF:6A:DF:E8:54:E7:7A:4A:94:FE:A8:0E:60:12:E1:55:EC:E2:9E
Authority key identifier: 64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
Certificate issuer: /CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Certificate serial: 019673B00A7F3E3F574B1B492F12B105196F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
Manifest number: 079B
Signing time: Sat 26 Apr 2025 20:00:38 +0000
Manifest this update: Sat 26 Apr 2025 20:00:38 +0000
Manifest next update: Sun 27 Apr 2025 20:00:38 +0000
Files and hashes: 1: K5gJRaPdUKn9XKhzO7AibxY9CA0.roa (hash: qUxgMl4Hgu/d5oBnuOvT0GW4I1N7zX5/ljI5wWQ4TLY=)
2: ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl (hash: wH21unLuQ3gyeiyXkgl+LwoFo3PlgsT4iUHXlZcsNp8=)
3: _U7TKaQkv0gDvtMnKrNnbIWERmc.roa (hash: FZz1mY5/p4ukf0qO7zFoKrsIjV3lp2u1Lai3o16W3qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:0a:7f:3e:3f:57:4b:1b:49:2f:12:b1:05:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644c50d1dadf8b84b174fdb0587afb5f42df8a5f
Validity
Not Before: Apr 26 20:00:38 2025 GMT
Not After : Apr 27 20:00:38 2025 GMT
Subject: CN=31ef6adfe854e77a4a94fea80e6012e155ece29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:f4:71:ce:12:52:bb:00:cb:50:72:8f:d1:
57:eb:d9:33:42:af:6a:cf:f8:13:5a:c4:31:d1:b5:
de:cd:5a:0a:0e:c0:ab:dc:fc:4d:0f:fd:76:e1:eb:
67:81:38:2a:e4:3c:af:11:51:30:16:fe:35:dc:7b:
2b:4f:2e:94:59:8d:17:5e:60:17:b2:00:5c:ea:57:
cc:c0:ab:c7:07:9b:f6:70:1c:cf:e3:aa:5d:0a:4d:
d7:e0:2c:d5:8f:a6:22:fa:08:ed:19:4d:f2:06:30:
04:41:71:29:b6:d6:d4:36:5e:90:eb:e9:fe:10:8d:
eb:59:49:df:5c:f7:6b:e9:54:7e:50:0b:cb:57:37:
fb:b0:a6:1d:65:98:ce:94:2a:dc:e2:1c:0d:03:a3:
dd:cf:63:fe:43:8d:6e:2e:cb:76:28:c5:8c:37:44:
23:c3:2d:74:74:6d:d8:d5:54:1d:24:5e:c9:76:15:
4b:81:86:c2:e3:73:31:ac:97:82:a3:c9:23:98:7e:
f3:ed:7b:71:ea:d3:91:47:f2:2c:7f:d2:4d:b2:c2:
75:d5:7a:93:25:ad:4d:16:26:08:a5:42:93:f9:4f:
4b:63:d0:96:0d:60:16:1a:c4:30:6d:a2:49:75:ae:
eb:a5:0a:dc:5d:23:13:1c:e5:0b:f3:bc:64:05:f7:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EF:6A:DF:E8:54:E7:7A:4A:94:FE:A8:0E:60:12:E1:55:EC:E2:9E
X509v3 Authority Key Identifier:
keyid:64:4C:50:D1:DA:DF:8B:84:B1:74:FD:B0:58:7A:FB:5F:42:DF:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZExQ0drfi4SxdP2wWHr7X0Lfil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/28bde3-a4ca-488d-8061-d38d843bfa1d/1/ZExQ0drfi4SxdP2wWHr7X0Lfil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:35:fd:b5:b7:6b:28:c0:b3:24:c1:be:02:fb:5c:de:fd:69:
88:52:49:4a:65:be:bd:ea:0b:53:b3:4e:88:e9:69:af:eb:95:
c3:fb:36:94:3c:21:fd:15:53:9e:aa:fb:5b:b8:11:e8:99:04:
ec:91:dd:e4:31:d9:c9:a2:04:13:2b:d3:81:c5:8f:d9:8a:14:
63:6e:17:55:99:05:12:f9:8c:b3:08:e9:68:ca:bb:44:f6:92:
f2:3d:a2:96:6c:89:eb:ff:b3:25:95:d0:ae:00:c1:7f:da:8a:
64:b1:bc:82:6b:e4:4d:e8:ff:7c:49:bf:05:46:10:f5:8a:58:
c5:1e:1f:c1:48:ca:a5:0c:3d:b7:91:81:16:82:8c:ea:59:ea:
42:86:fc:61:e0:0d:70:cd:d8:18:50:d2:d2:56:79:b9:b7:60:
f3:e7:c9:fb:e5:14:a9:50:56:9f:f7:e0:00:39:0a:1d:ab:2c:
6a:ce:c1:d7:2a:90:9c:83:45:fc:3e:38:95:1d:64:0d:d7:df:
d8:d7:8c:9d:d1:15:8f:fb:9e:65:2a:f9:e6:06:7c:22:8a:cb:
1d:a1:b2:99:37:18:3b:ad:92:82:b4:30:74:11:1c:22:bf:06:
f1:0b:ee:e2:83:ce:90:c1:36:49:49:5c:96:e9:0b:0c:f7:1d:
ea:48:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:33 2025 by rpki-client