Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
File: zJgWyv_6ViY90NdIGclNVALxu20.mft (raw, json)
Hash identifier: qdOd8iqpDHdV2P3hz8h+kfw4j/NLgpSiGN6QosYYc8E=
Subject key identifier: ED:D7:F3:72:11:1B:54:35:50:73:4C:1A:55:9B:27:17:05:29:A3:37
Authority key identifier: CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
Certificate issuer: /CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Certificate serial: 0196794407D2A87B6126AECF558B3BF93B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
Manifest number: C5
Signing time: Sun 27 Apr 2025 22:00:23 +0000
Manifest this update: Sun 27 Apr 2025 22:00:23 +0000
Manifest next update: Mon 28 Apr 2025 22:00:23 +0000
Files and hashes: 1: 8o5AYWh-4RXgT7Kh5e_5gWGFnZs.roa (hash: WhyrbQbNYw+ibwL1fIGjF77XjkxU2NCmWVAW1D5cDrM=)
2: zJgWyv_6ViY90NdIGclNVALxu20.crl (hash: xpPp2PBrIRMMmmKlbxh9EUjp3CD/59IM8Q1uEiSauC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:07:d2:a8:7b:61:26:ae:cf:55:8b:3b:f9:3b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc9816cafffa56263dd0d74819c94d5402f1bb6d
Validity
Not Before: Apr 27 22:00:23 2025 GMT
Not After : Apr 28 22:00:23 2025 GMT
Subject: CN=edd7f372111b543550734c1a559b27170529a337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9f:38:f1:71:26:89:f8:a1:4c:e1:ed:c5:eb:
5a:96:ef:f7:ff:7e:91:fc:7e:a8:11:fd:a9:6f:06:
86:7f:7e:fd:8c:df:a1:4a:39:c8:9a:8e:2d:c1:a4:
7c:bd:68:07:a0:a9:2b:12:af:c0:49:21:6e:91:52:
e0:ed:5d:02:53:2b:08:b1:18:0b:49:0e:cd:81:96:
f8:db:ee:a8:f1:25:c7:63:6e:7b:7b:0a:42:54:e7:
6a:77:15:53:88:8d:8d:be:f7:22:68:fa:7d:b5:63:
93:39:a8:a7:6c:d1:4b:0d:f0:25:f8:cb:78:e2:41:
ce:63:02:85:bb:41:52:8c:cd:1c:b9:f2:54:81:06:
cf:f5:10:39:95:0f:3a:c9:fd:96:6f:e3:8b:97:30:
3c:7c:04:c7:23:6e:86:0d:62:a9:a7:bc:3e:be:81:
57:17:b6:85:34:b5:2d:91:48:ea:e1:8a:6b:d5:4a:
69:94:b9:ee:aa:8a:b5:ac:e1:6a:35:86:e3:ac:bb:
c7:86:64:4f:00:8f:b2:08:03:ce:ff:fe:d8:60:fe:
57:03:64:ed:70:f4:04:21:3f:c2:a2:78:bd:a0:17:
34:5a:22:35:b0:ed:d2:43:25:a7:7f:ad:bd:c2:99:
88:88:40:3f:10:a3:b1:2a:e8:2a:5c:73:41:87:c0:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:F3:72:11:1B:54:35:50:73:4C:1A:55:9B:27:17:05:29:A3:37
X509v3 Authority Key Identifier:
keyid:CC:98:16:CA:FF:FA:56:26:3D:D0:D7:48:19:C9:4D:54:02:F1:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJgWyv_6ViY90NdIGclNVALxu20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/407a3f-66c0-4979-a725-09eb0013fc24/1/zJgWyv_6ViY90NdIGclNVALxu20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cf:a9:3e:ce:73:72:b0:c1:32:28:fe:ae:d8:6e:7d:fd:60:
f1:ed:85:80:bb:ff:23:f8:0b:a4:f5:1f:1c:b5:e5:5c:ee:12:
e8:02:e2:cb:bc:be:c2:bd:32:18:f3:f2:7a:a1:90:42:88:d2:
01:0a:5a:81:f6:27:f0:24:ed:3e:3d:18:25:d2:4a:b5:d6:14:
7e:90:02:4c:e3:9b:d2:4d:5e:5e:fc:f0:fe:9f:40:d5:39:e1:
01:33:66:b7:f6:5c:0e:99:15:e5:0e:96:1b:65:37:96:04:e6:
1b:06:6e:3f:23:ff:2d:56:e7:b4:f5:28:85:1d:3d:fd:fd:da:
8b:35:9f:8f:e2:ad:a4:76:b0:17:4b:05:a3:e7:6c:1b:ab:9c:
6a:e3:b9:fa:c4:dc:0f:f7:2f:37:a6:66:b7:a4:3d:ae:5c:69:
28:e7:bf:e3:9b:3e:c2:08:9e:5c:e2:be:a8:45:7b:42:05:f6:
24:1f:3e:72:23:e2:e5:51:15:e3:e2:4e:7b:b6:a1:2e:44:75:
9d:73:12:44:a1:b2:d6:af:b8:ef:8d:52:8d:43:fc:22:54:81:
c2:e0:bf:c4:ab:56:e2:14:a6:f8:ec:d9:cc:22:56:51:82:a4:
18:04:38:44:8c:4e:6c:30:5e:cb:d8:8b:69:06:a4:ad:f8:9c:
7b:6e:b8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:50:11 2025 by rpki-client