Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
File: cZSbR98xPLq5RS2pj8xjdgipCb0.mft (raw, json)
Hash identifier: VFvqg4Y7ellmbtn1v3hx2Q2NvTSnJbrS/II/9XZJjK4=
Subject key identifier: AD:38:95:0B:AE:16:AE:A4:94:5F:62:64:B6:3A:50:B0:4F:16:B5:4E
Authority key identifier: 71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
Certificate issuer: /CN=71949b47df313cbab9452da98fcc637608a909bd
Certificate serial: 019677FB1F150CB8C537688D3809AA793302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
Manifest number: 152A
Signing time: Sun 27 Apr 2025 16:01:08 +0000
Manifest this update: Sun 27 Apr 2025 16:01:08 +0000
Manifest next update: Mon 28 Apr 2025 16:01:08 +0000
Files and hashes: 1: 1-jpvgOGBb4tSAAlC9WZiXCKoWAM.roa (hash: B3C32+APojLLpoq0P/3+v4OioF2SbZXBsRXy/mWXSxY=)
2: Vop34f9L_n8rpM0_CGkk_KMC-6Q.roa (hash: TSajoVwTdFw0W0qNKtPZSIVDAOMpo0QmWl1JLckGW4A=)
3: aCgy_alXVm5fhWtUpRo7QNEISHE.roa (hash: k8KIN9/snXjGTZ3SmfqZoJEWYTGsTGXkU29Y3c+sGXE=)
4: cZSbR98xPLq5RS2pj8xjdgipCb0.crl (hash: OLRxZdZKTYrFwomizoG9+brlZUcZC83kssfqeQ6mFYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:1f:15:0c:b8:c5:37:68:8d:38:09:aa:79:33:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71949b47df313cbab9452da98fcc637608a909bd
Validity
Not Before: Apr 27 16:01:08 2025 GMT
Not After : Apr 28 16:01:08 2025 GMT
Subject: CN=ad38950bae16aea4945f6264b63a50b04f16b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1e:b9:66:c4:80:3f:a7:15:25:c7:b4:db:e3:
bf:c5:88:24:e9:58:98:2e:b5:72:32:e3:05:d2:b4:
06:2a:a4:56:6c:b6:cc:0b:73:2d:82:45:e6:3c:cd:
bc:37:08:7e:2e:3a:a6:9f:6f:e5:be:6b:97:1e:38:
aa:7c:11:ac:21:c8:36:78:41:81:6d:5d:6d:19:4f:
ae:51:62:f5:ea:ca:ca:47:bf:49:d2:b4:c5:ab:ae:
6d:29:c2:26:08:c8:80:ca:52:a1:8b:b6:1c:1f:67:
11:de:f0:49:c4:c3:bf:b7:01:6e:c9:01:6c:6c:96:
d8:20:92:bd:00:27:26:83:87:ae:7f:c0:be:6d:8a:
48:af:37:e7:8e:d7:32:ac:0c:0d:91:db:bc:c1:5a:
81:31:7e:89:be:5f:7d:c9:cf:1b:2c:18:d2:bf:dc:
35:c4:4b:02:11:ab:6a:90:d9:e5:74:fd:2b:47:77:
98:1e:cd:6c:f8:ca:e5:6e:f0:b8:da:14:08:bb:27:
64:bd:14:ce:9d:1c:98:4a:22:a4:5f:59:fa:b5:b8:
61:34:96:65:3b:f5:98:66:66:fd:ad:d2:63:01:ea:
93:03:50:ea:32:f7:99:41:42:ad:06:d7:40:c1:02:
41:3d:31:8f:bb:fc:ae:06:0c:50:74:02:7d:1b:85:
b4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:38:95:0B:AE:16:AE:A4:94:5F:62:64:B6:3A:50:B0:4F:16:B5:4E
X509v3 Authority Key Identifier:
keyid:71:94:9B:47:DF:31:3C:BA:B9:45:2D:A9:8F:CC:63:76:08:A9:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZSbR98xPLq5RS2pj8xjdgipCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/cZSbR98xPLq5RS2pj8xjdgipCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:51:84:ba:58:8c:0d:92:04:4d:f4:da:e9:a3:b0:db:5c:5b:
42:4d:04:17:de:3a:e9:2b:d5:33:c5:d9:80:1b:d7:fc:6a:20:
b1:90:e5:8f:91:05:b0:4c:bd:1e:3f:1d:05:f1:db:c8:8e:1c:
30:7c:07:99:7c:12:e0:3d:68:b0:79:8f:4e:27:28:32:14:ef:
f6:2d:ee:12:c1:d7:0e:d2:53:e1:cd:7f:dc:0e:03:fb:17:1d:
33:59:fe:41:cf:12:db:25:ed:cd:f1:6a:46:5c:3a:e2:14:38:
53:1f:df:c5:95:d4:da:33:2d:4c:4a:8e:62:08:7c:1d:ea:f9:
0f:e4:9d:ce:6d:09:3f:96:a6:0c:5d:18:34:76:5c:27:1d:f9:
12:0b:3b:35:bc:31:1b:c3:56:16:2b:80:25:1c:d5:81:db:c6:
dd:f5:a2:f2:3a:6e:c9:83:d4:69:fb:d6:fb:9b:7e:f6:e3:b2:
df:0c:4c:95:3a:6b:b8:de:74:e5:9d:c0:f0:ad:da:ac:f6:e2:
c3:81:e3:c1:bd:88:ab:5e:ae:f0:da:7f:f5:59:ad:55:bf:48:
46:dc:2f:a3:a7:10:cf:85:52:9c:6f:ca:d1:cb:af:4c:08:24:
fb:60:23:93:82:4e:2e:68:ce:be:5e:c8:32:fd:8a:a7:f1:fb:
04:17:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:55:40 2025 by rpki-client