Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: znvwrEPP+gJPXV6UKCEt8Hnby1slprI3sN4VVjM5KqI=
Subject key identifier: 73:BD:58:68:05:F0:A3:07:9D:59:8C:37:2C:EE:72:BB:E7:94:99:72
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 0196A051DB292C135397180ABFFFD5827867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 12:00:41 +0000
Manifest this update: Mon 05 May 2025 12:00:41 +0000
Manifest next update: Tue 06 May 2025 12:00:41 +0000
Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: qWxQQCXQaeTEoku5GLhvckzD8LT8mYjQBVf+jerRhBA=)
2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:51:db:29:2c:13:53:97:18:0a:bf:ff:d5:82:78:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: May 5 12:00:41 2025 GMT
Not After : May 6 12:00:41 2025 GMT
Subject: CN=73bd586805f0a3079d598c372cee72bbe7949972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:6c:c9:dd:3e:9d:6c:ce:38:af:41:3c:2c:
4f:c6:13:06:7b:b5:12:38:8c:8f:43:d9:c9:52:8d:
29:e4:ae:48:c1:2b:e7:6a:fe:e1:f4:81:17:89:25:
be:ee:9d:75:3a:20:60:dd:bb:a5:da:6f:93:52:5d:
a4:dd:af:a2:19:72:01:2c:0c:6c:55:54:a8:76:db:
45:f9:ac:b8:18:a5:bf:75:fb:7e:ce:08:64:c2:3b:
50:64:e2:3b:d2:67:09:11:9a:bf:63:3e:0d:3b:52:
7b:a4:b6:5d:0e:e8:30:7b:58:09:23:10:21:46:03:
ec:c4:6b:c5:b3:c1:7e:ab:47:6e:fe:5c:5f:c7:e9:
21:b5:6d:bc:09:15:02:80:91:b1:9d:9b:6a:2c:5f:
80:ad:5f:01:2b:fb:8f:58:c4:58:31:76:90:37:48:
44:78:43:f8:1a:43:09:5a:65:58:49:aa:6c:b0:02:
5e:b9:c3:c7:1d:c5:d0:3b:46:ee:fc:b2:a2:75:1f:
5a:8b:c7:77:53:fe:ce:bf:7a:34:3f:e1:d2:c7:6e:
cd:04:f8:47:86:ec:de:4b:a8:b5:05:1f:80:87:bb:
d4:97:d5:b3:1b:be:38:b8:fc:29:ac:f0:8b:51:33:
64:4a:df:b2:03:6e:f4:c1:58:7c:0a:ba:58:25:4a:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BD:58:68:05:F0:A3:07:9D:59:8C:37:2C:EE:72:BB:E7:94:99:72
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:89:eb:58:a9:20:6f:4b:37:9a:e0:30:d8:24:ad:c2:ff:e7:
af:47:e9:47:f7:70:01:1e:f5:e6:31:80:ae:19:63:b0:b2:c7:
32:de:c1:1e:7c:f9:b0:39:4c:5d:32:a1:89:58:fe:43:73:44:
5e:b3:11:bf:95:a6:3a:9a:33:88:05:b0:22:a6:ca:8a:2c:4c:
d9:61:97:58:f0:b7:08:5d:1e:43:d1:e0:ed:a9:d7:92:ec:76:
85:f7:60:af:be:78:6e:ce:a8:98:96:d9:63:4e:b7:e2:bb:98:
9e:12:c8:b6:5f:4e:e2:72:07:45:24:4a:62:95:95:90:8a:f8:
e2:d2:7e:71:f4:0e:3f:ae:b1:b2:53:99:46:4f:6e:a1:77:55:
34:00:d0:f1:ca:1b:e8:e5:0e:9b:be:e2:15:78:35:61:54:fc:
f3:b0:77:07:96:00:65:96:fe:aa:e7:10:de:0f:e8:64:0e:70:
82:55:dd:00:12:48:4a:e1:2c:2b:67:fe:ff:05:22:cb:1e:23:
3f:9e:2b:4a:8e:5d:79:de:21:c5:c6:ce:0e:59:d1:40:46:76:
42:9e:e6:c0:80:e5:0a:66:da:bf:63:ba:dd:1a:7a:f1:60:5b:
08:22:b3:88:68:dc:f6:90:fb:9d:9c:24:11:49:9f:90:90:76:
e3:f9:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:32:17 2025 by rpki-client