Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
File: z65GEYj_we8vOhR0VxqUOaVTdKw.mft (raw, json)
Hash identifier: zlm7YprA297NdDeB7q9H/W6PcjAdARDKjj0c5EkTJnM=
Subject key identifier: F3:7B:1F:53:AD:2A:ED:CA:3D:B5:53:7A:60:15:9A:76:75:12:6D:42
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 0196A2E4D0D4C12AAC4AF31B1ED8ECCF7EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
Manifest number: 023F
Signing time: Tue 06 May 2025 00:00:26 +0000
Manifest this update: Tue 06 May 2025 00:00:26 +0000
Manifest next update: Wed 07 May 2025 00:00:26 +0000
Files and hashes: 1: 1k7B6OZhB1CFcx64eFikJ90IArY.roa (hash: BObzQX0NmXL+SkwyifLtayjL5iVc0jp/QAmHV8ZAgNM=)
2: z65GEYj_we8vOhR0VxqUOaVTdKw.crl (hash: gOKRH3Fdf9l9TsBWHK372EcFLf2fqjnPJQcB6q+v55w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e4:d0:d4:c1:2a:ac:4a:f3:1b:1e:d8:ec:cf:7e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: May 6 00:00:26 2025 GMT
Not After : May 7 00:00:26 2025 GMT
Subject: CN=f37b1f53ad2aedca3db5537a60159a7675126d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:43:47:67:c9:2d:04:83:ff:fd:7e:09:ad:
3b:cd:b9:a9:c7:60:e8:29:c8:f1:42:60:35:b0:47:
f1:e0:33:21:6e:92:5c:ef:d1:75:05:0b:f1:aa:76:
8f:ec:8a:d9:ef:d4:27:6e:f8:62:20:f5:89:ce:87:
ba:9e:91:5f:45:39:4d:f2:92:09:38:de:3c:08:1e:
27:51:44:2c:7b:62:18:8a:4f:43:45:a3:b1:82:fb:
2b:e7:03:cb:18:21:db:2f:fc:31:8b:cf:d6:2a:27:
fa:af:43:91:06:59:3e:d3:46:32:c8:b8:98:35:6c:
5c:a2:ef:fe:ef:1a:04:f2:5c:ba:b4:5a:24:34:a4:
ea:62:4d:7a:04:ab:9f:1b:f8:cb:38:f0:f9:ed:b2:
43:67:5b:53:4d:12:cd:bc:18:2f:6b:e4:6f:d1:2f:
09:65:a4:41:6e:63:9c:f1:64:ac:b8:48:b8:23:55:
64:8a:08:9a:5c:a8:db:ea:73:6c:23:40:e7:42:fe:
96:f8:4b:d7:f5:93:dc:e3:36:0c:d1:8c:74:0e:eb:
2f:b0:8a:fa:7b:3b:1f:b2:73:23:1c:f3:7b:de:6a:
3c:33:84:ea:2d:95:7d:ab:e0:52:3e:b4:97:69:66:
6b:e1:9b:6b:ab:7a:24:83:08:f2:ae:7f:ad:25:7e:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7B:1F:53:AD:2A:ED:CA:3D:B5:53:7A:60:15:9A:76:75:12:6D:42
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:cb:09:b1:af:f0:1d:63:e4:ce:28:b5:1f:ad:fe:5c:f8:
31:fe:55:61:73:5a:6a:9c:66:56:34:59:97:37:84:ca:83:d3:
6d:43:72:f8:7e:9e:59:88:ee:63:64:8e:48:c5:bf:c9:da:b3:
74:68:45:b7:8d:ac:f5:1d:c3:9d:89:e5:1b:6f:25:7b:c6:3d:
75:0a:7c:79:38:a0:c8:69:fb:13:8b:1b:ee:65:61:de:b5:5f:
5f:41:2a:e6:48:d0:b4:64:e6:b3:ca:16:a9:cb:8d:af:b9:33:
23:a9:dd:91:33:51:d0:95:1e:46:60:df:a8:c9:5a:d5:7a:a8:
9a:15:2f:b3:09:26:cc:40:f1:a5:c5:98:a6:75:c4:b5:f9:32:
b1:7f:5a:b6:42:0a:fc:81:ab:99:2d:5b:07:5e:51:d5:4f:c9:
74:3b:bb:6f:25:e9:c8:db:ce:3d:d7:37:52:8d:41:03:b9:b1:
ae:0a:f4:7f:30:b7:b9:d7:7d:9b:b4:1f:e7:99:a2:22:97:f2:
49:70:b5:82:b9:c8:3d:14:aa:35:33:78:7a:02:0c:58:7c:ed:
39:83:9d:04:65:a7:b2:db:02:36:3c:92:d8:75:d0:6b:d9:a6:
8c:a7:7e:d5:cb:b9:11:c3:eb:be:cc:a8:1f:40:65:2b:d8:49:
e4:7c:48:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:55:57 2025 by rpki-client