Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: bEoTPcKq3m99ljVJMFhj0IGcf0Iy0UEzDuwVKySGPks=
Subject key identifier: D2:EC:F3:13:F2:86:C5:98:E6:A8:F1:A0:64:35:3C:70:48:D7:54:39
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019675308E7DD7D4CE015BED9F2537A562E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 03:00:38 +0000
Manifest this update: Sun 27 Apr 2025 03:00:38 +0000
Manifest next update: Mon 28 Apr 2025 03:00:38 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: iSFCJM0u4HaIgKZ5hBHEhQyc4dlidpNz/9jvQhCZx5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:8e:7d:d7:d4:ce:01:5b:ed:9f:25:37:a5:62:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Apr 27 03:00:38 2025 GMT
Not After : Apr 28 03:00:38 2025 GMT
Subject: CN=d2ecf313f286c598e6a8f1a064353c7048d75439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c0:ce:b0:e5:24:f8:dc:89:a3:69:ed:41:45:
9d:ef:5b:c5:84:1e:00:64:f3:d1:14:58:f6:ce:e7:
96:cf:69:fa:85:cc:ef:15:d6:4d:e4:e6:29:1c:ba:
f8:35:0b:fc:f3:6a:43:aa:ec:0e:61:61:9e:0e:0f:
10:4a:4a:ef:f1:13:9f:e3:a2:ee:ff:29:1c:99:10:
37:a8:e5:b4:a5:4f:cc:7a:e0:34:a9:83:be:6c:2e:
5f:1b:58:1b:eb:0c:46:0d:2f:3b:d7:92:b7:38:93:
0f:18:4e:32:90:b6:e8:e6:0e:f8:f1:06:7d:ba:1f:
e4:5a:02:4b:27:8c:1a:64:2c:09:d5:2a:41:44:fe:
28:aa:89:ea:37:1a:d1:d7:93:b9:1a:fe:4e:d9:11:
88:a0:9f:f4:fb:74:98:58:90:ab:f6:d7:90:ab:ba:
00:0f:72:f8:53:a9:f3:ce:54:71:9a:cc:80:8c:08:
ba:a4:e8:64:69:34:1e:07:a4:4a:cd:e1:27:0b:7b:
bc:ba:bf:c5:a7:19:a7:6a:8f:ad:62:7a:f8:41:ce:
17:d9:52:3c:cf:ff:c9:19:88:8d:8f:c5:ff:26:ca:
64:f4:6d:4d:11:9f:c1:9d:6d:c7:52:b1:17:4b:0d:
bb:9d:e4:0d:bc:5b:ae:b1:01:ef:09:56:d4:18:4a:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EC:F3:13:F2:86:C5:98:E6:A8:F1:A0:64:35:3C:70:48:D7:54:39
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c8:40:a3:bd:6f:b8:00:b5:e1:7b:79:0a:73:d3:ed:52:10:
f2:75:fc:eb:a3:04:ce:c1:c5:4c:51:b9:39:74:39:51:59:06:
37:6c:4f:de:75:9a:1b:77:22:e5:c0:a9:9b:44:63:51:ad:90:
f0:21:8a:6e:87:ac:5d:08:3a:5e:da:61:15:62:5b:e2:dd:d1:
e1:00:26:13:41:c4:eb:a3:6d:6d:1b:38:29:a7:55:c5:03:7a:
9c:8e:61:cb:39:6b:c3:8c:a2:eb:50:8e:4e:8a:dd:a7:84:3f:
9d:12:74:9a:17:67:52:c5:fc:22:01:c1:4e:a8:8b:d9:9f:d4:
74:75:b4:cc:c1:7b:13:5d:03:01:cd:4c:cb:e6:5f:50:e1:1e:
6d:62:ea:0f:ab:29:44:7a:b9:f5:5e:df:39:cb:97:27:a8:e4:
40:38:44:b1:a1:23:ae:fb:46:de:73:ec:48:59:51:f7:ae:4d:
be:cc:c4:d1:94:c4:68:bc:8e:d7:6a:fb:5a:60:aa:3b:ce:0a:
c7:fc:31:79:68:db:ba:49:3d:8e:d4:52:3f:76:dc:3c:58:b9:
65:38:ca:99:50:e0:b6:ff:bc:26:ff:26:6f:5f:5d:84:6a:9c:
ff:68:95:17:dc:61:5e:f7:0f:27:4f:93:79:c2:f1:ae:44:fe:
d9:93:89:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:38:38 2025 by rpki-client