Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json)
Hash identifier: tcUi/6YZU63lY5ka3tjfBinAf1yem9yB4EZ46Fycg4E=
Subject key identifier: 4C:72:D3:CA:3B:84:98:C0:50:DB:A7:79:B2:74:79:7B:47:A4:67:FC
Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Certificate serial: 01967FB42C19481F2FE232EEE6AE160F6909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
Manifest number: 0127
Signing time: Tue 29 Apr 2025 04:00:36 +0000
Manifest this update: Tue 29 Apr 2025 04:00:36 +0000
Manifest next update: Wed 30 Apr 2025 04:00:36 +0000
Files and hashes: 1: dZWIYeeWNbXNuMF0JZsgr8bqLZQ.roa (hash: jkH79btlNu7Vh1mNk5V4h+zv+b9+mvicQIK2SNJi8Ss=)
2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: mZb+T9WQ44wy+9XHgx4tEwOE1KXPxerHaixHOincWZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:2c:19:48:1f:2f:e2:32:ee:e6:ae:16:0f:69:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827
Validity
Not Before: Apr 29 04:00:36 2025 GMT
Not After : Apr 30 04:00:36 2025 GMT
Subject: CN=4c72d3ca3b8498c050dba779b274797b47a467fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cf:83:f4:87:66:2e:79:b5:95:12:38:2a:04:
31:6c:e8:02:9f:38:65:59:f6:df:30:27:93:25:2f:
9f:86:05:7a:4e:7d:15:39:96:51:f4:55:8c:ae:5a:
47:d8:c3:3c:95:9b:5e:a4:c2:70:26:bb:3d:1d:1e:
ec:28:e8:1e:87:f6:84:2a:8e:6d:30:94:3b:83:99:
52:12:6e:1f:c1:7f:5e:ea:08:ec:4a:3b:9a:91:6b:
4b:5f:8c:99:87:73:2a:2e:e2:a4:6f:5b:13:12:87:
54:9b:4d:53:71:60:30:6c:af:4a:57:fc:23:fc:fa:
ce:6e:37:29:33:74:23:e3:bf:bd:ed:98:74:f3:7e:
84:de:4a:65:d6:f2:d6:61:53:16:8e:98:17:97:18:
b0:f5:c1:59:ac:e7:ba:ae:d8:2c:80:e6:51:8e:5d:
01:cd:a4:ae:16:ac:2d:8f:44:bb:17:50:d5:a6:96:
c5:91:17:5c:05:d5:53:8a:25:67:2b:74:8d:16:bb:
f0:8e:14:07:74:bf:61:db:5e:c5:51:4a:4c:df:92:
8f:cc:56:85:90:1e:93:41:1d:0a:61:b8:04:08:75:
a4:37:7d:5d:32:2a:20:a1:e9:47:31:4f:62:95:9b:
9e:4d:98:97:8c:4e:6c:fc:0f:1d:c4:b2:cd:6c:15:
30:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:72:D3:CA:3B:84:98:C0:50:DB:A7:79:B2:74:79:7B:47:A4:67:FC
X509v3 Authority Key Identifier:
keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5c:b1:ba:81:7a:7b:62:37:9e:f7:ad:14:0e:4f:7f:e8:31:
b7:08:b7:ca:34:4c:4c:c8:8b:be:75:ab:2d:e1:45:0a:6d:48:
a6:67:07:cd:c4:fd:c3:4f:78:d0:fe:f5:af:13:0c:f6:7d:46:
88:67:0e:1c:01:21:1b:42:8c:b4:0b:85:69:ee:8d:70:a2:3f:
3c:06:7f:9f:6a:a6:56:2d:53:7c:6b:6e:b1:a2:d1:ab:50:85:
8d:97:41:d5:c0:6e:fb:82:d3:10:e6:6f:25:71:b1:92:15:18:
15:c3:81:34:14:a1:b5:e4:5a:bb:06:3c:f0:6f:06:8f:95:68:
ed:15:34:63:ea:29:c7:55:6d:ce:ac:1b:42:18:fd:9a:d5:ce:
d9:e8:b1:e5:3f:01:b1:b0:e1:36:b3:bd:ca:48:99:cf:64:f2:
48:e5:c7:7c:cf:4d:95:79:d9:43:2a:57:14:49:6a:7f:02:08:
07:19:18:d7:1a:7e:52:86:e7:36:fc:8a:f7:8d:a4:11:61:45:
44:66:3e:9c:9a:c0:60:bc:46:35:75:80:c6:ea:ce:b5:1a:d5:
77:f9:39:49:4d:92:70:81:40:62:d0:d4:09:17:26:c7:95:b3:
48:10:2d:a2:b3:d4:a4:b9:a7:d1:0d:75:82:99:50:bc:38:a9:
10:48:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:15:52 2025 by rpki-client