Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
File: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft (raw, json)
Hash identifier: IHir8QJ67zbB9EKG14th7QOLHvecDzC7XqPQVF/xbvY=
Subject key identifier: AE:D9:F1:2D:C2:62:BA:4F:CF:AD:35:48:BC:1A:DB:1F:A3:66:04:A6
Authority key identifier: CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
Certificate issuer: /CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Certificate serial: 01968DA6DE49BE466E4012B88D7EEBA76B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
Manifest number: 11E2
Signing time: Thu 01 May 2025 21:00:45 +0000
Manifest this update: Thu 01 May 2025 21:00:45 +0000
Manifest next update: Fri 02 May 2025 21:00:45 +0000
Files and hashes: 1: I9pCIyNdXwO_UmL0GiE3Cg1yOBE.roa (hash: rgdmg36ZiZKltWGUWVab82/ToqNlhoJ2jQiTOIy/cAU=)
2: svzhNq6qtyn4S4aBADhUvEOECPM.roa (hash: PLCvbbOnyIN6lmj0BVGyyI3TGiwUbgBbXCHrA/CAEUE=)
3: zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl (hash: Tk2VGVKvZBRVHas6sWDBboG8rDxLoGnv8SVV5lHwn/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 19:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:de:49:be:46:6e:40:12:b8:8d:7e:eb:a7:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc159c8a1e64fc64ff666bd9219dce174373caf2
Validity
Not Before: May 1 21:00:45 2025 GMT
Not After : May 2 21:00:45 2025 GMT
Subject: CN=aed9f12dc262ba4fcfad3548bc1adb1fa36604a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3c:af:05:38:55:b7:9b:d1:09:ae:70:4b:e2:
b9:9e:12:c8:5a:ec:67:ef:d0:cb:37:25:26:a0:3a:
d6:ab:8c:1d:56:c2:9a:8f:db:3a:5e:f0:eb:a6:3e:
10:06:83:72:da:62:60:3e:0e:c6:51:a4:a0:ff:b1:
3b:d6:be:c1:df:2a:c3:11:5f:02:a4:51:99:10:fb:
c1:e3:b5:28:f4:30:e0:11:4e:71:76:1e:82:f1:b8:
6d:df:da:6e:9e:91:33:f9:85:ea:1b:a3:18:eb:30:
26:4d:71:e9:e9:ff:14:4f:bd:dd:16:00:b8:33:f3:
24:83:c5:fe:f3:fb:4d:c6:09:86:27:14:dc:7d:8f:
83:59:6c:b9:1d:04:6f:36:92:fd:c9:df:e4:3d:78:
8d:71:31:16:6d:2d:ae:15:b3:5a:c5:e5:91:8b:d6:
54:40:94:e9:30:ea:4d:38:8d:62:77:24:4e:cf:ff:
64:be:31:f1:50:e6:d9:fa:ca:37:76:f4:2a:89:af:
79:c3:dc:44:97:38:db:c9:49:63:f4:35:f0:d1:36:
16:41:36:14:16:c0:ba:b2:ce:1f:9a:0d:c7:7a:4e:
e6:b6:44:b2:72:fd:7b:8f:9c:2c:a6:5f:4b:1b:d7:
ee:cd:25:24:83:08:d4:22:79:98:50:1f:7a:be:d8:
b1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D9:F1:2D:C2:62:BA:4F:CF:AD:35:48:BC:1A:DB:1F:A3:66:04:A6
X509v3 Authority Key Identifier:
keyid:CC:15:9C:8A:1E:64:FC:64:FF:66:6B:D9:21:9D:CE:17:43:73:CA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3e3109-cec3-46bb-b8d6-6482041a8246/1/zBWcih5k_GT_ZmvZIZ3OF0NzyvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f0:38:56:9d:a6:7a:54:44:c5:6e:c5:5c:39:38:2c:dc:fe:
0b:dc:dd:60:38:77:0d:09:a3:0c:e2:a8:50:a5:0d:29:83:d1:
fe:5b:f1:fe:ff:4f:09:0b:04:34:a7:74:5f:c3:29:ea:b2:d8:
22:06:b2:b8:13:25:1c:1c:82:5d:3a:06:11:a2:e0:22:1f:fc:
c6:fd:12:31:86:3e:2a:51:ba:19:0b:e1:90:07:58:96:a3:fa:
74:d4:6d:eb:1c:d8:1d:a2:2b:18:9b:06:f1:d0:9a:68:dd:79:
64:7f:8f:b0:52:ff:8f:2c:fd:17:12:1f:0b:ac:25:c5:79:82:
40:14:e4:f6:88:30:23:2c:81:1a:ba:12:5e:08:aa:54:8e:94:
e5:34:5f:22:09:c9:ef:d2:f8:fb:c0:ae:21:6b:8a:77:1e:53:
40:17:f2:0b:78:76:50:eb:1b:d1:24:66:d6:d1:2f:6a:e7:51:
9d:31:2f:42:05:49:ac:f8:fc:57:66:0f:43:c8:7b:59:70:98:
37:92:af:4a:72:6d:e9:4f:89:7a:79:f6:17:01:e1:9f:32:87:
a6:7e:ef:85:15:62:9a:3c:01:8d:04:11:82:33:c5:9a:3c:96:
4e:0d:9c:c7:86:b1:9d:62:6d:25:42:1e:6c:8d:06:5c:d8:86:
6d:cb:eb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:35:28 2025 by rpki-client