Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: 084vVPzqba68Q95FGbt/64qIzxWB0V4v8PUZo8ntLoA=
Subject key identifier: 72:8D:48:56:A7:62:49:1E:D5:01:D1:B3:C4:AF:08:AC:0A:11:4E:0C
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 019684DA9D585F6BAC14CFC727DB1AB0BF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 0D33
Signing time: Wed 30 Apr 2025 04:00:41 +0000
Manifest this update: Wed 30 Apr 2025 04:00:41 +0000
Manifest next update: Thu 01 May 2025 04:00:41 +0000
Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: aFGMkFT/ME7NRUR8MfOZq90lh9RKliK1TQoIvezkfZM=)
3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:9d:58:5f:6b:ac:14:cf:c7:27:db:1a:b0:bf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: Apr 30 04:00:41 2025 GMT
Not After : May 1 04:00:41 2025 GMT
Subject: CN=728d4856a762491ed501d1b3c4af08ac0a114e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:41:a0:fe:a9:47:8d:cc:05:5e:b9:8d:97:
6e:1e:ec:90:6f:1d:2d:f3:33:ec:4c:80:5c:f0:fe:
6e:4a:d6:9b:2c:30:12:4e:62:8d:ba:a7:b8:0e:0a:
3c:e8:68:a6:9f:53:ba:61:6c:d0:26:e1:14:12:71:
50:26:58:de:92:d5:32:c8:3d:50:99:ee:d0:1f:02:
99:5e:0b:ee:b4:87:46:9d:e5:c2:f5:b8:94:cb:87:
f4:3b:5d:53:f0:d4:ae:cd:61:5e:b9:03:57:6f:6e:
f7:4f:a1:cf:b8:6f:71:4a:40:41:4f:6a:c7:81:96:
c3:c5:dc:64:e1:36:87:d2:1f:dd:27:0d:e4:a8:58:
8b:a2:1d:23:d2:a7:8f:d1:c6:b2:15:3f:fe:e8:b8:
02:64:54:56:3c:44:0a:26:ea:bd:66:2d:26:13:66:
ba:f7:5f:8a:6d:33:b6:13:35:89:37:b7:cd:8c:20:
d0:a4:db:33:8e:7c:96:09:48:07:eb:d4:f1:c1:36:
a1:8c:0e:77:d6:49:c1:e5:dc:78:7e:e5:a3:94:58:
19:54:88:93:25:a9:9b:4d:99:b0:f8:33:1d:e7:d6:
8f:03:14:17:30:4c:a0:56:41:9f:36:cb:bd:e5:d4:
1f:87:bb:94:0c:ed:15:13:5c:ff:ad:a8:3e:28:43:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8D:48:56:A7:62:49:1E:D5:01:D1:B3:C4:AF:08:AC:0A:11:4E:0C
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:87:33:bc:27:b7:a4:fd:c7:3a:28:e6:56:d3:60:e9:74:4b:
61:c4:61:45:cc:aa:e1:be:d3:b5:62:cf:2a:99:e6:f5:2b:0f:
cf:e1:b5:e6:b6:90:f1:cc:1d:92:23:08:65:de:86:2e:ce:c6:
cc:b3:ba:a7:8e:6b:3c:5e:e8:ee:18:9f:42:ec:cb:7a:e9:c1:
d7:b8:d8:65:3d:c8:26:e2:f4:51:d8:44:5a:4d:5f:72:5e:22:
01:38:21:dc:3b:39:cb:47:31:d5:7a:0f:d0:e0:1f:ff:f0:84:
49:87:86:bb:48:94:f5:16:eb:55:2d:82:3b:3a:24:2e:d5:b2:
06:60:1f:80:b6:c1:2e:ec:be:ff:64:ad:00:ee:18:40:9b:dc:
ad:93:21:7d:40:a9:69:32:02:4e:e2:32:9a:58:9c:86:32:c6:
da:17:a9:64:30:75:cd:0f:25:b1:43:55:8c:31:6d:c6:27:69:
93:80:17:3f:5f:c4:bd:4c:6a:45:e7:d3:73:bd:04:78:39:f9:
95:7b:8a:58:a8:3d:bf:ac:6a:7c:fa:f6:eb:ab:25:47:6a:aa:
78:04:84:a2:ce:86:91:d0:c2:02:e9:44:a3:fb:5d:7e:07:74:
4e:b9:62:b2:b8:4e:ca:99:f7:99:27:25:8b:5f:b9:9f:d7:d3:
4a:e9:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:09:51 2025 by rpki-client