Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json)
Hash identifier: lsUinm4DfbBPIw//U5gF/Mstiw3NuZM9K47A9HT/SsM=
Subject key identifier: 80:41:FB:B3:17:93:8C:FE:6A:DC:FB:FD:3A:59:32:1A:BB:7A:8B:B0
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 01969E9A2169E11C326A9A4B173F7D320A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
Manifest number: 1528
Signing time: Mon 05 May 2025 04:00:23 +0000
Manifest this update: Mon 05 May 2025 04:00:23 +0000
Manifest next update: Tue 06 May 2025 04:00:23 +0000
Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=)
2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: yVE1/1lUa6tFZ+u0YLFD09eB+4TPYgeQht/eEqUnvi0=)
3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:21:69:e1:1c:32:6a:9a:4b:17:3f:7d:32:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: May 5 04:00:23 2025 GMT
Not After : May 6 04:00:23 2025 GMT
Subject: CN=8041fbb317938cfe6adcfbfd3a59321abb7a8bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fc:6a:5e:af:f8:83:97:9f:cd:46:ec:8a:9c:
ba:c7:e8:2c:f7:99:01:8d:01:27:13:c3:3a:9b:94:
98:2f:f0:c1:a0:3e:3d:e9:37:bb:c3:d9:2d:48:ab:
60:19:d3:d7:86:95:df:43:e4:f4:99:a9:43:5c:80:
71:50:cf:75:51:ad:38:49:7b:c3:91:2a:d3:4b:c5:
62:34:5c:ff:8d:b4:bd:dc:96:72:c8:b9:4d:6a:f5:
26:f5:af:be:a3:f7:cc:39:f0:04:12:af:fa:25:c9:
f2:dd:ad:6a:7d:ca:7e:02:f7:fe:20:12:67:e6:47:
f3:d3:ec:3b:22:71:ef:fd:44:ac:e5:0c:fa:a9:22:
6f:e9:ca:3c:f9:9f:c4:22:01:c5:fa:c6:81:1e:76:
e2:2d:00:d6:c9:92:d3:d2:8f:92:b3:91:fb:6a:ec:
a6:d2:90:b3:ea:c0:13:d6:d9:e1:f6:ab:aa:8b:91:
ac:39:b8:6c:bc:e3:60:fe:88:9f:98:fb:b0:84:dd:
80:d1:da:46:4b:d9:5e:7f:7a:07:fd:a6:4d:96:db:
7f:f0:7a:e3:7f:5d:53:1d:56:7d:85:b1:27:48:9f:
c9:1c:9d:0b:ad:ce:94:99:1c:d9:30:c9:76:6b:72:
d9:13:01:65:6f:7d:51:ed:c1:df:d4:1c:12:61:5b:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:FB:B3:17:93:8C:FE:6A:DC:FB:FD:3A:59:32:1A:BB:7A:8B:B0
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:06:c3:7d:1b:20:8a:a6:07:55:99:96:5e:a6:6d:fc:cd:18:
8e:66:9d:c6:d0:24:d3:2c:1e:97:2b:cf:7d:b1:35:c0:b2:c5:
69:75:29:8d:f8:7f:1c:4d:92:2b:c7:76:75:e6:45:af:15:49:
f9:61:a4:f4:31:26:98:55:9a:c8:e3:ae:68:24:e6:57:e2:33:
c5:cd:5f:ef:2a:25:be:ba:39:15:dc:0c:5d:4f:d1:53:4a:8d:
7a:64:c2:30:f2:bb:76:a3:7e:7a:a3:70:9f:b6:56:7d:d6:73:
17:02:fb:06:63:37:ae:1b:bc:d3:01:cd:0d:77:6d:35:ad:dd:
1b:62:24:5d:07:02:ba:cf:84:98:fe:0a:d2:5e:cb:dc:43:78:
f9:1e:ae:30:be:77:9c:13:cd:cd:9e:a9:eb:c3:98:86:7b:bc:
fd:53:fa:1b:fb:ba:d6:92:a7:17:1f:10:d9:31:85:9c:3c:3c:
46:43:53:d8:83:13:49:e5:93:79:b0:50:fd:d0:85:77:03:c8:
14:2e:51:2a:35:dd:77:a1:28:25:ca:f2:57:5e:8d:a0:44:03:
87:72:28:b6:0d:06:0e:b1:2a:cb:a6:a0:e6:85:1d:b8:e7:fe:
3f:85:75:9c:1b:c6:83:ba:d6:6c:6c:63:62:c2:a5:a3:47:32:
15:d5:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:10 2025 by rpki-client