Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
File: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft (raw, json)
Hash identifier: AtDbc1YbyVig3s+ZcryuQoEGOaViiK/GQaTSQjj9Ih4=
Subject key identifier: 8A:26:AE:B1:9D:D8:E6:45:96:11:AD:F7:83:98:10:76:90:6D:A3:35
Authority key identifier: 65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
Certificate issuer: /CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Certificate serial: 01968D6F6E2771CA3C00117D52C286ABB869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
Manifest number: 0E83
Signing time: Thu 01 May 2025 20:00:12 +0000
Manifest this update: Thu 01 May 2025 20:00:12 +0000
Manifest next update: Fri 02 May 2025 20:00:12 +0000
Files and hashes: 1: DkGvgDnbdtEHDMx7b64dzBjhPco.roa (hash: 8mB0OA1c8Mmrq7iJrmaJaIVGUwLhqVKrizBW/uXLsCE=)
2: ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl (hash: qsBx/BGyCuTCLlYnK5YhRSaSouSDyfylHBzQtdiy0ho=)
3: ZiWYCsD1Dry724z5OmJJ8Oawr6w.roa (hash: pA+krdDNaZYU7n+P4r9c22BIzRTJGvLkmVz3LgTk2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:6f:6e:27:71:ca:3c:00:11:7d:52:c2:86:ab:b8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6583d322ef24c87198b765ea1d1c42c283a7f8f6
Validity
Not Before: May 1 20:00:12 2025 GMT
Not After : May 2 20:00:12 2025 GMT
Subject: CN=8a26aeb19dd8e6459611adf783981076906da335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:a9:d0:22:de:10:11:49:2c:fe:37:e0:09:
b8:1b:4f:ce:9f:df:24:10:0b:b1:1e:f1:f1:12:c4:
5b:50:75:22:32:94:c4:2b:1d:ba:03:78:06:27:f6:
cf:e7:41:8c:28:a4:8e:ea:6a:71:dd:5f:5e:b9:ed:
1a:03:a0:48:52:1f:15:f3:a9:46:39:5f:82:2f:a3:
dc:4b:4d:b7:54:55:3d:2f:16:67:d0:04:50:2b:cd:
ea:e2:e9:8d:3b:d8:f2:ab:84:e5:b5:26:c2:9d:b2:
50:ee:0a:03:22:f3:04:06:32:b9:71:3d:94:e0:7a:
f9:ce:4b:10:37:1b:69:24:88:8e:9a:43:b6:fe:2a:
23:98:ba:df:80:59:25:50:d6:ab:13:e0:ee:fe:2e:
46:54:eb:51:95:34:5e:ae:40:f8:ff:d9:13:0d:bd:
16:21:17:71:6d:16:b2:6f:b1:36:b7:e7:91:1f:22:
d1:93:09:09:be:37:81:09:c7:ef:f8:91:43:7e:f0:
65:f3:e7:9a:7f:b1:da:5d:2f:45:fb:73:3e:99:47:
7e:21:20:b4:cb:3b:28:ef:c2:c5:f5:67:1e:57:c0:
13:23:7b:bf:24:52:07:ec:59:26:04:b9:3d:54:a5:
61:b3:65:95:93:38:9f:76:5f:2d:78:aa:59:e5:f3:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:AE:B1:9D:D8:E6:45:96:11:AD:F7:83:98:10:76:90:6D:A3:35
X509v3 Authority Key Identifier:
keyid:65:83:D3:22:EF:24:C8:71:98:B7:65:EA:1D:1C:42:C2:83:A7:F8:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f0971a-8891-4b53-944c-5be9e117dbda/1/ZYPTIu8kyHGYt2XqHRxCwoOn-PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:16:42:13:a0:4a:de:9c:f8:3c:ad:bb:d3:4e:90:70:4b:f3:
64:f9:03:9e:1d:1e:1a:29:14:6d:f7:ac:6e:ae:ee:26:af:9d:
e5:b7:a1:b6:3b:67:9a:ce:c0:e1:ac:36:73:15:7f:5a:84:53:
97:7a:e2:79:41:f0:d2:2d:95:09:74:61:b0:0c:53:9a:1f:d9:
95:0a:dc:83:b4:e7:62:76:4c:44:cd:0a:85:e9:58:22:c7:3b:
7a:6b:40:2f:7c:ab:df:3e:54:72:9c:81:a3:0f:31:1c:b0:60:
7b:73:51:4d:85:7f:d4:f6:b4:23:1a:4a:40:27:17:5b:6c:3d:
00:d0:04:59:20:d0:ac:f4:71:dd:96:cc:82:2e:8e:c1:ac:cf:
41:eb:2c:69:cb:3a:66:db:ae:21:17:70:93:11:66:e9:e0:1c:
00:01:ff:06:a2:71:fa:ca:f0:34:ea:6f:31:54:3e:c7:e4:c7:
04:61:fe:77:7d:47:3f:38:b9:2d:b7:07:f9:4d:fd:66:ea:83:
49:75:3c:a8:39:33:46:a6:6a:b4:cf:31:61:38:cf:a8:54:82:
3c:53:f5:99:19:65:d2:88:6c:48:2d:76:8a:45:2c:db:b9:c8:
e9:c1:24:b4:c9:5e:f4:d8:a4:d2:1b:e7:41:0f:9c:37:2c:40:
e6:b2:88:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:05:30 2025 by rpki-client