Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
File: zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft (raw, json)
Hash identifier: TDfNTLhEU24CkyryAd5NbLy9U737+AiVxMBbzySZW5Y=
Subject key identifier: 4E:C0:4E:E6:F3:EB:1F:E5:85:1C:41:DA:69:1B:E4:AE:17:5D:3A:BA
Authority key identifier: CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
Certificate issuer: /CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Certificate serial: 0196A98BC15D3809AA4AE66E169824018176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 07:00:30 +0000
Manifest this update: Wed 07 May 2025 07:00:30 +0000
Manifest next update: Thu 08 May 2025 07:00:30 +0000
Files and hashes: 1: SEgDWEU92zAnfdKKSLnIVh9oR0w.roa (hash: GA6e5Om3W8hxoIZHlBedjOBv7v6eWZGQfFv5Miq1TxA=)
2: zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl (hash: bUppjYKzB/0MdUZpANZFnbeJuXhGEQWILT5d2QxB6GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:c1:5d:38:09:aa:4a:e6:6e:16:98:24:01:81:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd57ec4c4025adab88b92074ad46056e9f93099f
Validity
Not Before: May 7 07:00:30 2025 GMT
Not After : May 8 07:00:30 2025 GMT
Subject: CN=4ec04ee6f3eb1fe5851c41da691be4ae175d3aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:cd:1d:6e:90:f6:d7:e2:49:5f:91:98:e9:
2b:69:48:0e:34:3f:bd:40:07:65:09:14:08:02:d2:
f8:7d:ac:93:65:02:8a:0d:61:d7:b7:50:e5:23:1f:
70:cd:f6:06:85:1f:ca:8c:4d:ea:22:f2:73:e3:0c:
60:b5:75:fe:db:b8:b2:72:a3:41:0f:35:b3:59:84:
e7:5c:d7:65:f0:04:97:39:c2:3f:01:36:66:14:a3:
e3:97:07:8c:2f:0a:dc:bb:43:ae:ce:f5:de:08:b5:
67:4c:da:58:6f:2f:c7:42:e8:a3:ad:1d:81:fa:23:
ea:dd:ec:d8:f0:3b:78:b5:81:ad:19:55:31:ef:7b:
51:6b:15:9a:e2:58:ea:71:3e:26:a4:e0:f5:86:a0:
fb:8a:e1:2d:e8:eb:63:c6:66:f2:da:8a:00:85:1d:
1f:d6:ce:d5:52:b9:0d:c7:75:7a:66:75:50:7b:2f:
19:1e:ce:17:9a:36:dc:e4:00:fc:d6:6c:91:b9:b5:
ff:a7:5e:c8:37:9a:26:e3:37:e6:d3:f1:7c:f0:05:
d0:d9:59:53:12:c9:f2:9b:c7:dd:d2:4b:b2:fd:39:
cf:4d:4c:da:58:6f:a8:70:eb:1f:75:4d:14:75:23:
51:86:9f:09:e3:7b:77:9b:bd:ba:a5:e8:a6:47:06:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C0:4E:E6:F3:EB:1F:E5:85:1C:41:DA:69:1B:E4:AE:17:5D:3A:BA
X509v3 Authority Key Identifier:
keyid:CD:57:EC:4C:40:25:AD:AB:88:B9:20:74:AD:46:05:6E:9F:93:09:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVfsTEAlrauIuSB0rUYFbp-TCZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/02f354-98cd-4325-9fbe-762432fdd4dd/1/zVfsTEAlrauIuSB0rUYFbp-TCZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:15:49:70:21:73:6a:1c:e5:cc:59:8f:46:1e:75:72:f2:38:
3e:20:42:c0:f6:37:73:35:45:8e:75:8e:b4:93:4b:ca:80:43:
9b:3c:c9:b2:a8:92:39:4d:d8:3f:ed:70:2b:46:56:40:92:5b:
17:9d:c7:d2:e9:a8:1f:53:3c:e5:e5:11:9f:98:82:25:15:90:
7b:42:4a:65:a3:3c:10:90:52:42:c0:58:f5:10:80:f7:03:d1:
fc:77:e1:8e:a1:42:1e:0a:a1:99:8e:3d:eb:03:27:ec:c2:de:
99:f6:6d:e4:2e:80:0e:42:df:46:bc:e4:29:ed:1c:ed:be:83:
fb:13:0d:a4:ee:4e:77:d4:45:dd:84:9e:80:9c:a2:37:1c:58:
e6:a6:e5:cd:bb:b4:15:c9:5d:42:23:c8:e6:0b:22:d5:7a:ed:
d6:ab:e5:3f:1f:80:e8:dc:b7:fc:15:3d:6a:63:13:ad:9f:79:
a6:47:26:1d:50:17:8d:93:96:26:83:01:85:f2:14:db:18:3d:
b1:11:9e:c7:bc:2d:bd:95:4d:8a:14:07:bd:ec:0b:ef:a6:82:
cd:a2:74:28:e3:e9:8c:c9:bd:1f:fe:97:95:64:1f:2e:9c:bd:
5e:f3:e4:92:d1:d7:f6:c4:a2:02:6c:f1:c8:41:d9:c8:d1:9f:
66:7e:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:26:59 2025 by rpki-client