Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
File: znys-nNc7q_dKiFMCe5yRpQlJQ4.mft (raw, json)
Hash identifier: Ubz3iX885Z7d/qtXwfSWSE42qYwqywWSmCiqsur+eZI=
Subject key identifier: C0:A3:C4:62:40:A5:F3:51:A4:0C:F0:05:00:7C:74:D4:DB:71:19:01
Authority key identifier: CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
Certificate issuer: /CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Certificate serial: 0196767AA1EE80E61EB1DFAB49B43B70D7A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
Manifest number: 0553
Signing time: Sun 27 Apr 2025 09:01:10 +0000
Manifest this update: Sun 27 Apr 2025 09:01:10 +0000
Manifest next update: Mon 28 Apr 2025 09:01:10 +0000
Files and hashes: 1: M-hl5kfxem0FvK73oMF7geibFPw.roa (hash: kiasuv7TGgsqASbNQOaoav2Adv17JAVzsKrjP2y4W90=)
2: MR2SpvAg6EKH9P9IdFI47Bp2qbY.roa (hash: bCpvV1/uI5x/Oj1Nb1ZTA1IC/FEWUDBDGVun6QLD8Vw=)
3: cFotkS6ux0_MLeGzyK_DeWIUeaM.roa (hash: 4CuT/CFbyV2w8Qh8mF53vlpw9DoBWeAo/yfxDDSS1VE=)
4: znys-nNc7q_dKiFMCe5yRpQlJQ4.crl (hash: 8c02STxTye1ctpc+xBYRsJBW1L73/bbu4L52hgEZQc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:a1:ee:80:e6:1e:b1:df:ab:49:b4:3b:70:d7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7cacfa735ceeafdd2a214c09ee72469425250e
Validity
Not Before: Apr 27 09:01:10 2025 GMT
Not After : Apr 28 09:01:10 2025 GMT
Subject: CN=c0a3c46240a5f351a40cf005007c74d4db711901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:4e:1b:96:df:dd:00:eb:75:4f:99:85:af:
92:2e:04:57:71:81:86:4b:ae:7c:15:5a:b9:6c:5c:
10:f3:0b:d5:32:1e:aa:e8:64:3a:3d:f1:94:ec:25:
75:a0:69:4c:1d:76:d4:fb:37:d6:69:1c:6c:80:83:
b4:0b:bc:39:89:0f:86:fb:61:90:f5:7c:b8:c3:25:
4d:bd:0b:48:5f:8f:2f:3e:3b:c5:fe:de:1e:e2:b3:
02:81:c2:a3:ea:a5:b2:c6:e9:45:44:d6:25:04:e9:
e1:bd:df:dc:e2:36:fc:ff:be:01:2b:ca:19:4f:ac:
a7:81:1c:af:47:d0:c2:9b:b6:06:c2:8e:a0:21:12:
a2:07:5e:31:d1:d0:55:0b:15:c6:c4:4b:c6:f1:85:
b1:86:5c:99:9a:53:60:3b:e7:e3:da:e8:15:29:38:
db:26:c4:af:61:e6:a5:29:8d:60:ad:18:f1:ce:e0:
37:93:9f:38:44:2c:63:cf:9e:5c:f1:b0:cd:94:af:
ad:f3:32:7d:ed:d6:95:5c:07:ce:74:78:21:48:b2:
6c:0e:19:ca:c7:a9:fa:4f:c4:f0:e8:72:47:54:e1:
01:54:4d:89:9b:dd:50:da:7e:09:58:59:23:aa:c6:
b3:16:06:8f:83:5c:9c:5a:3f:a7:83:07:66:a7:51:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A3:C4:62:40:A5:F3:51:A4:0C:F0:05:00:7C:74:D4:DB:71:19:01
X509v3 Authority Key Identifier:
keyid:CE:7C:AC:FA:73:5C:EE:AF:DD:2A:21:4C:09:EE:72:46:94:25:25:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znys-nNc7q_dKiFMCe5yRpQlJQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a636ed-d20f-4802-9286-b84eda2e846a/1/znys-nNc7q_dKiFMCe5yRpQlJQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:77:d2:0c:80:6d:8e:cc:29:5b:58:d7:ef:74:31:4f:f0:77:
9b:98:f3:d2:3d:b5:74:c1:04:b9:d8:d0:c9:de:63:ad:61:07:
de:e9:a6:5f:34:ae:82:63:15:2a:3b:d5:e1:23:e2:a7:a3:13:
bc:52:18:ef:d3:02:b3:2a:27:24:0d:ec:dc:5d:d8:53:0a:3d:
c1:0f:31:b9:ce:37:02:8b:25:6d:f8:4b:bc:d5:a0:df:bd:a2:
a2:7d:1f:85:fe:2c:5c:e7:59:ac:33:17:42:fd:75:a5:af:12:
b7:e8:fd:35:3c:8f:fb:fd:96:19:74:ab:36:b5:ae:12:17:46:
1a:6a:70:94:7a:c0:48:f2:57:46:33:06:4e:ce:cd:e3:6f:65:
6e:69:b1:43:7b:6b:e3:1b:5a:9e:4d:e0:40:65:b6:6c:56:df:
38:2f:ef:cb:64:74:69:0e:49:09:0b:d6:72:45:a8:dd:6b:09:
84:4b:fe:77:5f:ee:0f:76:d1:ad:2e:0a:39:ab:f9:23:dd:61:
be:4b:ed:6c:7e:e0:e5:d3:7b:60:e1:8a:6c:40:31:fb:dd:2c:
79:d8:df:83:eb:6d:3e:63:97:d5:3e:f0:d9:87:f3:6d:0a:dd:
41:b3:d8:7d:c8:9d:91:87:f7:88:f0:8b:7c:32:40:a7:78:f0:
8e:48:22:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:34 2025 by rpki-client