Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: SWLaZ3GiK8S+KNA64f2epkltFyGhyRdtQ0salpUtUDM=
Subject key identifier: B2:A1:0F:F2:66:99:21:60:93:CD:D3:6F:63:01:AE:04:4C:8E:27:59
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 01967DC57959A7B2D7351B5BD54E0084F294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 19:00:15 +0000
Manifest this update: Mon 28 Apr 2025 19:00:15 +0000
Manifest next update: Tue 29 Apr 2025 19:00:15 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: tZRz1CQaBDVo0vdsH3qZf2CL9cc0tBdiazGk5cLKOog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:79:59:a7:b2:d7:35:1b:5b:d5:4e:00:84:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Apr 28 19:00:15 2025 GMT
Not After : Apr 29 19:00:15 2025 GMT
Subject: CN=b2a10ff26699216093cdd36f6301ae044c8e2759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:ce:0b:bc:18:c3:95:9f:8e:98:78:a2:5e:
24:2d:f5:e9:a1:0a:c7:b0:2f:73:37:7d:d3:ea:a3:
f7:19:1f:86:71:e2:6c:62:ea:f8:b2:bd:50:51:b3:
0d:b2:6a:98:0b:96:22:54:18:5e:b6:95:16:25:76:
ba:40:7a:ee:ed:d2:f6:b3:ca:80:6b:fb:a2:b4:87:
4a:71:ba:44:04:c0:a6:4b:68:40:76:68:1e:52:a1:
0e:6c:71:b1:68:da:c6:f6:d8:a6:e0:15:28:4c:02:
1d:0b:76:84:e5:35:bd:d2:c8:1b:43:61:b3:e6:12:
1a:fe:c7:2f:ee:8a:35:b1:8b:32:1b:95:0a:55:09:
72:0a:89:62:37:3d:76:5e:e7:62:2a:ab:e4:a8:75:
e6:25:98:21:a8:02:3b:26:bc:8b:41:8e:66:0c:8a:
66:8a:cd:98:3f:b0:93:78:1d:86:97:de:13:67:d1:
84:94:e3:f7:09:0c:f4:1a:00:ba:5d:c6:a2:e3:84:
d9:ed:9d:1b:29:b0:4b:d3:03:ed:f4:b6:b4:7a:b1:
b8:1f:6a:00:a6:f3:17:19:07:de:43:9a:f9:73:4c:
77:bf:87:16:60:d4:76:f9:f1:65:e4:3a:ac:40:0a:
ad:39:88:02:c3:39:20:61:e8:f1:60:eb:20:67:76:
77:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:0F:F2:66:99:21:60:93:CD:D3:6F:63:01:AE:04:4C:8E:27:59
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:52:e2:f0:8c:65:42:b2:b9:9e:86:cf:b2:b1:e7:9d:be:38:
c8:40:98:06:3c:56:d1:25:1d:b3:3f:5f:07:ae:c2:78:1c:03:
b7:12:10:5b:b2:44:76:4c:d6:b5:dc:c0:3f:b6:f6:c2:92:36:
6e:c5:37:56:5e:1c:e6:68:d0:41:15:38:c4:cb:1a:d4:4a:2e:
98:10:45:7a:9e:f4:71:ec:02:e0:b2:8d:90:75:4c:be:89:fc:
57:ff:9c:4f:b1:22:28:ea:f9:66:6f:fa:96:30:8b:3f:12:e1:
7b:32:6b:da:cc:4e:4c:06:74:c0:33:38:1f:53:b3:6b:b5:67:
50:7a:cb:5a:4d:8e:19:d2:cb:1a:e0:c7:f9:5a:eb:0c:2b:77:
d1:97:75:d5:21:77:fc:71:8b:a5:99:02:81:54:4e:35:96:d3:
f9:41:6c:bb:b6:aa:a9:48:17:1b:bd:cf:df:9e:16:5e:e6:92:
06:8d:5b:ee:9c:2e:79:2c:bd:7e:2b:7f:1d:e6:5c:7e:8f:59:
e0:7b:5c:c6:5a:65:62:0b:87:d2:f1:a8:40:44:9c:97:eb:ac:
81:18:e7:67:a3:10:e8:c8:28:b8:66:63:9e:d2:2f:6f:9a:98:
63:c3:17:d0:11:19:e4:74:4d:29:29:b5:72:a6:ef:7b:64:64:
53:c3:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:40:02 2025 by rpki-client