Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json)
Hash identifier: HZXCSwHC84uEHm4aToRb2zU3d0bCbY/G/VN0ld1zwh0=
Subject key identifier: 3B:22:38:1D:98:BF:42:ED:34:F1:5F:7C:54:FB:EA:DD:A9:58:17:8C
Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Certificate serial: 0196A8433570BC028D5FE9EF3238122BF709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
Manifest number: 0B16
Signing time: Wed 07 May 2025 01:01:38 +0000
Manifest this update: Wed 07 May 2025 01:01:38 +0000
Manifest next update: Thu 08 May 2025 01:01:38 +0000
Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: 03mmMYwMMw2TWznJYc2GcvqPZvJlRq/tHWB+DRq0u1I=)
2: dQBlElXfO8pSdNwEKXjKZ-O9USg.roa (hash: S1t1SaIMwKXjVRHsk1Cwo0eWHwRLwztBGFQg3vgYpOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:43:35:70:bc:02:8d:5f:e9:ef:32:38:12:2b:f7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a
Validity
Not Before: May 7 01:01:38 2025 GMT
Not After : May 8 01:01:38 2025 GMT
Subject: CN=3b22381d98bf42ed34f15f7c54fbeadda958178c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:41:51:3c:0d:ba:bf:ee:39:13:d2:c1:18:0d:
fd:9a:d1:8d:37:ea:8e:51:2e:c5:47:f9:bf:b1:31:
e1:a9:b8:dc:86:f7:8f:08:3e:f6:ae:ca:65:ff:c0:
01:91:0c:52:cb:5d:c2:47:0e:c3:89:87:b6:13:44:
91:8b:f5:88:84:81:f8:6c:5a:b0:d7:c5:71:3b:8c:
b3:5a:58:fe:81:21:cf:3f:7b:06:21:0d:c5:98:01:
2f:c7:f6:96:21:e0:61:92:22:35:3d:74:18:62:df:
91:1a:b4:10:91:4b:33:17:14:7f:bb:ee:2c:ca:58:
70:15:65:e7:86:2f:51:85:b2:e2:10:47:9d:66:6f:
94:ac:b6:28:b1:e4:39:0c:40:f6:9c:db:17:8c:39:
c2:02:98:7f:7c:bc:55:c0:90:f1:3d:61:26:d7:ac:
07:ed:13:74:64:d8:a2:30:5e:1d:00:28:93:dc:3d:
49:d8:d2:39:ca:86:3b:1f:58:27:3a:73:80:59:91:
38:18:1e:a5:a3:9c:74:2d:b5:0a:38:0d:f6:98:ab:
fc:2b:65:7c:6a:61:fc:4c:2e:7f:9b:1a:87:83:0c:
63:99:f8:05:f1:3f:12:f1:af:43:d3:a7:3e:67:e1:
0e:b3:20:08:c5:ee:10:1e:77:68:f8:71:db:7f:1b:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:38:1D:98:BF:42:ED:34:F1:5F:7C:54:FB:EA:DD:A9:58:17:8C
X509v3 Authority Key Identifier:
keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:29:1e:8e:88:81:76:e8:1f:46:07:a2:58:f2:a6:4f:c6:75:
fa:af:fe:a3:72:98:2d:b7:48:f0:31:5a:fc:19:25:35:44:d4:
58:cf:73:2e:09:14:be:ea:18:bd:6f:23:3f:b1:47:5a:1f:24:
ca:8a:45:e2:e2:96:5f:79:87:88:c8:5a:d3:c2:bd:48:a4:95:
89:ed:01:14:15:1e:71:6d:4b:56:02:0a:76:02:82:5d:81:c8:
c0:07:31:e9:e1:68:25:6c:65:a2:2c:fc:0d:e0:9e:fd:04:0c:
18:5e:36:03:21:38:77:72:fd:30:ff:43:18:7f:e7:95:a0:15:
0e:cf:8d:87:43:c7:99:b6:95:00:c3:b9:f0:9b:c4:0f:04:67:
13:da:72:2c:d9:f2:15:e8:ea:4a:3c:b2:cf:ae:90:34:c7:53:
83:d7:dc:1d:50:4c:9b:00:3c:54:8d:2a:81:eb:4a:42:a6:61:
01:39:49:25:c4:02:56:ea:b6:ac:61:78:db:62:1f:ad:d3:cd:
7c:81:3c:c2:96:dd:f0:c0:53:bc:88:91:13:11:ce:06:e6:2d:
c2:e5:84:75:7f:17:bf:51:69:54:be:00:58:f8:56:b7:63:6d:
2e:b6:0e:3b:08:ef:a8:ce:fe:3e:56:1c:fd:be:67:59:1f:61:
5c:57:ee:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 11:39:10 2025 by rpki-client