Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
File: fZZeprOcIq7CrS1NTAo6MT3x3vo.mft (raw, json)
Hash identifier: 4hiIU3RH/BrIMrJWr0mFZUNDycpQrwtBlGU5aJnlXzA=
Subject key identifier: D2:E3:5A:53:1C:72:5E:7F:FA:82:23:3E:88:FE:6E:FC:A3:48:2B:9B
Authority key identifier: 7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
Certificate issuer: /CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Certificate serial: 019675D51C79DDB01CB862ADFA7E36E40C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
Manifest number: 090E
Signing time: Sun 27 Apr 2025 06:00:22 +0000
Manifest this update: Sun 27 Apr 2025 06:00:22 +0000
Manifest next update: Mon 28 Apr 2025 06:00:22 +0000
Files and hashes: 1: 5jihEGuQ4yw7LrN-GxhKRXWzO7o.roa (hash: i+yfzR8jSMTDKBjs/TXoC5+0uTvIRes38f4P8v9dk/U=)
2: S0vegGpuiCercYtclM_VH2iVx7s.roa (hash: ei9rkB9FlPql94JwrTYWOFRSXcUG8H3/4pXhvmG/1Ts=)
3: fZZeprOcIq7CrS1NTAo6MT3x3vo.crl (hash: /h442OYqTKFN44GALNqwyzcru9O82884Ie4nUjnXaBw=)
4: gZAbXdKIIXZyGHDR512yiOhKrvc.roa (hash: 4+QF/lBUbocOIUtLLdqUYJCroIpokm/YAFfvzHG47+I=)
5: mj4UpOOYclM_JjTHAP2KswbbaQE.roa (hash: fAJCCsd04w67kSJn49D770vpfkErruO7UmQMEWCwKcE=)
6: z9wFFZP_zA_tDeAiN8JtnO6v01o.roa (hash: i8cRhIUjXH5IXxi+AFlUMsquHQWq5em4btklWiJYWAQ=)
7: zQfM-JDEyYtnlHUMMTArONbOmM8.roa (hash: BsV8fCwOGo+p3hz5+JexWR4GrgumAGIe4ztslYYq+fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:1c:79:dd:b0:1c:b8:62:ad:fa:7e:36:e4:0c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d965ea6b39c22aec2ad2d4d4c0a3a313df1defa
Validity
Not Before: Apr 27 06:00:22 2025 GMT
Not After : Apr 28 06:00:22 2025 GMT
Subject: CN=d2e35a531c725e7ffa82233e88fe6efca3482b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:a7:24:53:25:6a:c4:7f:ab:b7:e2:59:54:
08:9c:21:6a:4e:6b:20:a3:fc:a1:a0:6a:fa:29:a7:
d0:55:c9:fb:7d:99:39:b9:5f:b9:48:7e:35:45:88:
5f:55:b2:4f:53:4d:a3:15:d8:71:74:21:59:0a:31:
29:86:f4:77:42:80:09:5a:54:22:d9:a2:81:8c:97:
af:0d:02:55:2e:85:f0:d7:f0:8b:98:f1:54:33:93:
7d:2e:4e:4f:44:ed:66:4e:53:ce:7c:b8:ab:af:65:
29:8c:f5:0c:36:5c:fa:4e:44:b2:64:8e:a9:25:32:
10:5d:e2:23:2b:7a:4c:71:6f:d4:f5:e1:7d:a4:7a:
4c:e7:0f:da:7d:6a:7d:98:16:d2:93:cf:2d:56:6d:
2b:7c:1c:91:9e:d3:c1:25:02:4d:24:24:cd:b5:89:
48:3b:5c:bd:70:c9:3f:ed:11:97:48:5d:17:63:e5:
69:1e:6a:33:5d:6d:91:4d:93:d9:ac:a0:88:6d:45:
7a:45:7f:d1:d3:dd:b0:02:0f:a2:fa:60:e0:02:0d:
33:dd:f3:71:89:0e:a2:31:3d:1c:c3:d9:34:8c:10:
ba:ce:3f:73:1b:c9:d9:a1:4c:8e:8d:6a:ed:57:9c:
07:2f:a6:ef:93:aa:40:e8:1d:6a:0c:95:09:a0:1b:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E3:5A:53:1C:72:5E:7F:FA:82:23:3E:88:FE:6E:FC:A3:48:2B:9B
X509v3 Authority Key Identifier:
keyid:7D:96:5E:A6:B3:9C:22:AE:C2:AD:2D:4D:4C:0A:3A:31:3D:F1:DE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZZeprOcIq7CrS1NTAo6MT3x3vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dbb22b-2a1a-4762-a0f7-32f5a9507731/1/fZZeprOcIq7CrS1NTAo6MT3x3vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d2:65:24:0d:9d:e4:b8:f6:42:06:65:fe:de:dd:f8:ba:22:
87:c7:f1:5b:3e:df:18:ac:c4:28:8a:af:9b:1d:4c:95:a3:c2:
1d:9e:32:23:ff:ca:30:d8:c3:e6:fa:d7:66:50:5f:ea:2c:0f:
20:57:8d:e3:7f:0e:70:c5:eb:f4:bf:04:cf:3a:49:2b:3a:14:
d4:b2:6f:b6:f0:cc:91:f2:e3:05:48:20:9d:25:c6:d8:eb:f2:
c7:e1:80:6a:1d:8b:1a:b0:33:84:06:70:e7:b4:10:1a:f1:87:
6d:b3:a6:a2:e6:b7:5c:20:a9:99:19:0f:3f:e3:c9:e2:df:d9:
5b:fc:ef:d6:52:06:fe:a3:fa:80:d9:60:ba:77:43:9c:f6:23:
53:5e:aa:0f:72:e7:10:75:7d:e3:f3:37:bf:0e:f9:39:27:3e:
dc:89:0a:f1:0c:01:f1:48:15:da:24:47:d0:18:4a:fa:85:a7:
63:64:ab:2a:6d:c6:a0:92:8b:44:36:1d:a1:76:da:5d:4c:92:
82:70:e1:5d:9e:1d:a1:ac:ad:31:da:bf:4a:a0:e8:0a:50:14:
03:2e:6e:a2:c0:22:f3:86:ab:bd:08:ec:54:05:e6:16:8d:24:
f3:79:8c:19:b0:d4:c8:67:92:27:9f:88:7e:52:d8:a7:cb:9f:
6b:15:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:12:04 2025 by rpki-client