Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
File: RZsv0AU73X53dTmNsWO-6HckeKU.mft (raw, json)
Hash identifier: vqbOVqU6X47qobHbHuSNX99Xr7FPhCKmtMMjEGDXf9w=
Subject key identifier: C8:16:8B:5C:A1:9C:E8:97:E8:45:BA:E3:03:1B:9F:0D:4C:6F:F8:CD
Authority key identifier: 45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
Certificate issuer: /CN=459b2fd0053bdd7e7775398db163bee8772478a5
Certificate serial: 0196BDB739173D436141102F3ABD5371823C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 05:00:23 +0000
Manifest this update: Sun 11 May 2025 05:00:23 +0000
Manifest next update: Mon 12 May 2025 05:00:23 +0000
Files and hashes: 1: RZsv0AU73X53dTmNsWO-6HckeKU.crl (hash: dDoFj5IHCGZmKwU57bMwYj1Hr35CdLjIYJrvlktN1zg=)
2: eAt9IZ5Or6_84ZpcOgPvrhj1MJ4.roa (hash: 8mDJ4vba1XUdtAM7cN3synGzI+MOb3y37SdyPC9kyko=)
3: th1AZy9QK2palvP0AKvJBy2Af8Q.roa (hash: FpTL5Ku6Rr2TCOg2sfzl47CbI6p+SfKzspnxsD1s3c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:39:17:3d:43:61:41:10:2f:3a:bd:53:71:82:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459b2fd0053bdd7e7775398db163bee8772478a5
Validity
Not Before: May 11 05:00:23 2025 GMT
Not After : May 12 05:00:23 2025 GMT
Subject: CN=c8168b5ca19ce897e845bae3031b9f0d4c6ff8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:61:c2:bf:cf:fb:28:e9:58:21:ff:5c:4d:
b3:b0:e5:fd:90:d1:7a:6c:49:e8:fb:c8:c2:9b:07:
3c:8e:cf:a8:75:14:55:94:6c:42:01:a8:5b:a7:f4:
fb:4e:80:8a:e6:8c:d6:53:11:10:22:9a:29:ca:b1:
26:d2:8f:ec:f2:49:c5:da:f3:8c:1f:ba:81:6c:ad:
df:23:e2:ba:9d:c2:c6:85:2b:07:72:97:bc:3e:5f:
b4:22:90:b9:d9:30:79:76:34:f9:8a:b1:c4:d7:17:
79:54:ce:ec:6c:c0:2c:2b:2f:04:46:f5:b3:cb:eb:
4c:83:ce:33:79:a0:f6:9a:85:1b:2f:e0:db:6c:61:
6a:f2:cb:2b:95:de:72:90:f5:b0:20:cc:e7:f7:85:
9f:3f:d0:c9:fe:7c:21:e8:0e:37:06:f5:17:dd:9c:
ad:b4:c7:0b:f4:03:4e:f6:eb:fb:54:2a:5b:d3:d5:
e0:e3:fd:a2:b8:35:31:fa:98:3c:0f:e4:20:4c:4a:
1b:5f:69:06:70:a0:cd:6a:9c:db:41:bc:f8:e3:78:
54:12:21:a4:69:af:a0:7f:9b:a2:82:2d:a4:c8:fb:
91:49:59:75:70:5e:9b:8a:62:f9:29:2b:ab:77:ef:
91:e0:97:c3:32:ab:91:aa:e5:22:1a:3a:c6:45:7e:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:8B:5C:A1:9C:E8:97:E8:45:BA:E3:03:1B:9F:0D:4C:6F:F8:CD
X509v3 Authority Key Identifier:
keyid:45:9B:2F:D0:05:3B:DD:7E:77:75:39:8D:B1:63:BE:E8:77:24:78:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZsv0AU73X53dTmNsWO-6HckeKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2ddd58-6037-494b-992f-ab8e97d855cc/1/RZsv0AU73X53dTmNsWO-6HckeKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:88:9b:b9:d0:3e:fc:61:ee:fb:b8:f6:ed:6c:ce:fb:a2:a2:
cb:ef:87:c5:61:f8:11:0c:55:06:d1:29:5c:e4:06:9c:dc:ff:
7d:f4:c4:69:bd:0c:db:f0:75:37:6a:32:64:73:65:4b:d0:c0:
8d:0f:f4:88:c2:95:cf:03:dc:42:c8:09:89:8a:ad:cd:17:e3:
35:ce:ef:00:97:3a:ff:9e:e9:3d:36:22:be:e5:af:dc:75:9d:
a1:fd:1b:4f:2f:7e:2d:a5:cb:87:d3:82:9e:b5:e6:d6:a3:6d:
0a:f7:25:8f:81:39:2b:cf:ef:59:89:c9:11:ea:c1:88:5d:67:
cb:53:db:9c:70:0f:1d:03:2c:65:c9:79:c8:b9:d0:83:1f:43:
96:b0:7d:5d:37:f3:12:41:39:b5:4f:23:d8:a8:ff:26:b6:a9:
3a:5d:28:35:9e:fa:af:ae:92:6e:9e:ce:dd:62:6d:5d:c4:43:
50:2a:0a:dd:d5:86:5c:89:89:ab:1e:b5:f1:d6:8f:74:2d:70:
a5:df:4c:0b:f7:9b:db:f9:12:7b:19:5a:31:43:9b:b6:cd:10:
42:aa:84:98:cd:26:c2:ba:2c:5a:ab:59:7b:2f:10:eb:62:85:
7f:cf:db:d5:f7:d3:5f:0a:04:72:cf:5b:70:4f:3e:13:ab:45:
0a:ff:c8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:40:26 2025 by rpki-client