Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json)
Hash identifier: XeqQvQPeOCM17+pLPFBStuitLHzdignzu5avtVQ6Od4=
Subject key identifier: 61:5F:99:FE:0F:2A:3F:2D:AC:D5:3A:D4:00:70:E4:C9:FB:C2:F9:6C
Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Certificate serial: 01968F5DF24CEEC910D94E8AFC4A8C510FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
Manifest number: 151B
Signing time: Fri 02 May 2025 05:00:20 +0000
Manifest this update: Fri 02 May 2025 05:00:20 +0000
Manifest next update: Sat 03 May 2025 05:00:20 +0000
Files and hashes: 1: tI06KHzBBY3ciTxCvrFdxn-AF88.roa (hash: S7ryr3BP0FqkUSqJufb4MUZCom0jlItHHtPlMcuWHB8=)
2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: wvUOy7ZszVYvAun/4u/JR44Hqbc02hhnI51jCD7zw4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5d:f2:4c:ee:c9:10:d9:4e:8a:fc:4a:8c:51:0f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0
Validity
Not Before: May 2 05:00:20 2025 GMT
Not After : May 3 05:00:20 2025 GMT
Subject: CN=615f99fe0f2a3f2dacd53ad40070e4c9fbc2f96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:62:a8:e9:7f:3a:e6:d1:c9:66:da:0b:e1:
4e:76:77:8e:e0:59:fd:aa:e9:c2:6f:1a:b7:42:41:
f3:69:f4:a7:07:93:ee:8b:2a:c2:e1:55:56:50:09:
c7:66:49:4d:3a:bb:6d:22:d3:b0:3c:73:e3:e2:1d:
dc:f4:0b:e6:18:f4:fb:d2:2f:73:eb:48:1a:66:93:
85:85:81:4e:40:49:fc:7f:62:1c:64:c6:7f:ac:12:
ba:eb:8d:fc:68:43:21:02:ae:ea:ca:3a:28:6a:65:
10:52:63:50:c9:47:10:af:83:2d:e9:8d:25:3e:96:
9a:bc:45:cd:0f:88:29:4d:74:9e:b1:be:95:36:aa:
0d:ba:d4:96:4e:46:c9:c2:50:ab:cc:f7:3c:94:01:
ee:0b:94:eb:bb:58:df:37:46:48:ce:06:15:9d:72:
e2:1e:6a:b4:a2:42:58:04:5d:e4:9e:29:4a:c4:7c:
f2:4b:d8:9f:74:0c:f7:66:ba:29:29:19:bf:a2:5c:
90:31:2b:69:05:ab:d2:89:de:5a:a5:2f:c9:29:70:
0a:0f:69:51:bd:5c:e9:5f:5d:79:b7:e2:45:4e:99:
f9:90:ee:31:b7:37:b2:f5:9d:76:62:bf:9b:d3:ad:
1f:18:b7:b7:d5:f0:06:3e:08:b1:bb:fc:d0:b2:11:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:99:FE:0F:2A:3F:2D:AC:D5:3A:D4:00:70:E4:C9:FB:C2:F9:6C
X509v3 Authority Key Identifier:
keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:35:ac:86:0c:76:55:bf:7b:1b:52:c3:f1:fb:d8:12:66:6f:
f6:63:5e:fb:38:ca:3c:94:60:f8:77:c8:ea:3e:90:40:fc:1e:
f3:e9:7b:7f:61:2f:84:16:b0:57:d8:f7:aa:99:1b:c1:f9:0e:
32:eb:0e:37:e1:af:7c:58:69:4f:55:64:8e:8f:2b:bc:c6:af:
dd:99:ef:96:c7:21:68:04:27:3a:a3:42:8b:16:84:3b:33:03:
3a:b9:3c:16:bd:02:02:b0:7a:9b:96:1e:5d:42:93:0b:4e:d9:
83:eb:fc:fa:76:a6:3f:57:1c:4c:26:c4:07:5f:24:17:72:25:
e2:62:62:2d:89:96:71:31:14:d1:c5:5a:29:90:97:1d:3b:98:
d8:90:33:36:a7:a8:5d:d1:4d:b7:54:9f:1d:9a:99:d7:a6:4f:
fb:90:c4:79:74:e8:19:a0:47:87:f3:31:9b:6f:7a:ee:13:e3:
f2:bb:a4:47:f3:66:47:d2:f3:73:fe:c2:43:91:a8:e7:36:d3:
b2:f4:42:b2:47:13:d8:8a:0f:50:2c:bb:4e:13:31:96:b7:d7:
72:5c:40:84:a4:6f:24:97:2d:ef:b4:61:54:73:aa:3e:cf:9c:
fe:b4:0b:7d:4d:02:5b:2f:b5:31:40:98:e4:b2:ae:2e:64:c5:
31:ff:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:38:05 2025 by rpki-client