Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: Nnh9kBR696CRCVikxbYCTqyQbVXRBY7Mo/RvxD2V7DE=
Subject key identifier: A2:5F:13:09:0B:44:CF:67:D5:87:BB:B6:FF:02:C0:AE:72:B0:B1:BB
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 0196C34C78071F13A15AED04AA9883C11F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 0E26
Signing time: Mon 12 May 2025 07:01:30 +0000
Manifest this update: Mon 12 May 2025 07:01:30 +0000
Manifest next update: Tue 13 May 2025 07:01:30 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: fS1QQVCk8nEsDB6IqrtKQtV+Q7PbZotuzDxtn+V9RgA=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:78:07:1f:13:a1:5a:ed:04:aa:98:83:c1:1f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: May 12 07:01:30 2025 GMT
Not After : May 13 07:01:30 2025 GMT
Subject: CN=a25f13090b44cf67d587bbb6ff02c0ae72b0b1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:6e:26:69:4b:92:0a:bc:19:26:2f:ae:90:
96:c9:13:8a:b6:3d:9b:b2:cf:73:e7:72:e6:42:d2:
1c:ba:6a:37:2d:4a:40:ed:ce:5d:32:16:46:fc:a4:
18:c8:67:c9:58:f3:68:d4:67:1d:6b:a8:8a:92:d9:
4b:03:82:10:1e:c1:3a:98:69:82:71:dc:bc:5d:f0:
64:56:f7:5c:49:b5:21:95:63:34:15:d6:0f:ed:af:
90:81:10:d9:33:2f:c5:2b:20:d2:7c:1f:48:79:61:
60:92:8d:9c:b3:20:26:26:4f:ce:ac:f0:61:f2:f2:
94:33:e9:39:a0:c5:55:b2:31:bf:b4:84:e2:3f:04:
7f:0a:d5:7b:12:07:fb:eb:34:cc:be:dc:42:bc:6e:
19:3d:c6:58:71:60:cd:d6:22:2b:fd:6a:9a:bf:73:
58:15:5f:9a:9e:57:56:f6:65:96:24:be:58:fb:dd:
c9:76:ff:38:9d:3d:b2:6c:8f:f5:b1:03:6a:e4:09:
59:74:81:a3:80:1e:00:54:75:72:5e:6d:36:1d:8b:
d5:68:e2:27:cc:d0:01:12:37:15:19:df:c7:2b:70:
67:e7:bc:a1:de:71:df:b7:20:94:55:ea:65:b7:39:
ba:0f:86:ea:b2:00:77:7a:19:e5:80:22:91:55:8f:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:13:09:0B:44:CF:67:D5:87:BB:B6:FF:02:C0:AE:72:B0:B1:BB
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b3:8b:1a:b2:68:46:e8:a4:76:7e:68:71:ab:a9:44:63:ae:
7b:be:5d:84:17:30:f9:65:f8:77:77:97:f5:81:4d:40:7c:1e:
26:0a:03:66:0d:92:61:60:c3:31:1b:2a:34:15:8b:b1:45:3a:
6c:15:68:0c:af:6a:09:02:1f:5a:7a:f6:31:e6:5b:07:88:77:
1e:96:28:7b:50:f4:1c:df:64:07:69:36:28:29:f9:14:ae:52:
51:ae:5d:9d:83:4c:0f:05:8b:fb:d1:f9:a2:ac:68:d0:d0:06:
ec:0b:dc:f5:a7:da:9e:76:a8:42:b7:c2:71:d9:e3:94:50:c8:
18:75:70:20:d7:ef:e2:76:bb:31:a0:76:9c:04:85:d0:48:07:
9d:b3:98:df:53:f1:61:0c:51:9a:c4:59:f1:65:d9:76:b5:9e:
88:7e:23:57:07:c2:e0:9d:a5:9e:fe:02:bd:8b:86:0a:c1:2f:
ad:44:8c:e6:b8:e2:96:3b:19:f2:01:f8:34:cc:91:9f:f0:95:
d8:4c:0a:dc:e0:e5:fd:6e:ff:70:fe:13:b6:5b:25:be:7f:2c:
aa:eb:0c:87:c7:77:63:03:86:b4:13:29:e6:3a:77:71:23:8d:
4c:c1:1e:c7:5b:79:b2:1a:7e:87:38:2b:d3:6a:7c:26:5f:b9:
57:12:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:02:53 2025 by rpki-client