Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier: n/M/1MQwP/qklq3pKgBWXEhhFLElhHlqFaF/Y4Wc0cM=
Subject key identifier: 8C:E6:5F:29:37:4C:D1:01:99:04:39:5D:0E:2D:59:E5:37:79:3F:6F
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 019674546AC6B8F6E465AE023E04F2FBB9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number: 1512
Signing time: Sat 26 Apr 2025 23:00:11 +0000
Manifest this update: Sat 26 Apr 2025 23:00:11 +0000
Manifest next update: Sun 27 Apr 2025 23:00:11 +0000
Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=)
2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=)
3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: Fsr1k0n9ubqMWV9V+Lk8GWHXfrZrVnmEM5sO5VaHfn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:6a:c6:b8:f6:e4:65:ae:02:3e:04:f2:fb:b9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Apr 26 23:00:11 2025 GMT
Not After : Apr 27 23:00:11 2025 GMT
Subject: CN=8ce65f29374cd1019904395d0e2d59e537793f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:ee:82:7b:73:96:c3:4b:4e:bb:36:75:c4:
21:07:77:c7:82:a9:ff:14:d1:5b:45:bb:cb:24:4c:
36:b1:d3:26:70:dc:51:c6:92:66:15:75:ea:cd:0a:
0f:3a:2f:2a:c5:f7:27:74:a3:11:35:3f:ee:1e:39:
25:7d:4b:3e:03:dd:4f:be:15:37:3b:d7:4d:d1:42:
17:b1:35:f4:fc:8d:fa:62:b5:e3:73:47:2e:77:f7:
bb:d5:47:9e:66:ef:c6:30:1c:e6:7f:f7:dd:9b:42:
e6:6c:cb:48:a5:f6:54:d9:16:5d:d7:6e:12:a2:15:
55:6e:87:0c:6d:3f:ac:11:1f:dd:cb:e2:54:45:a5:
9e:a8:97:73:c3:9c:ba:c5:eb:ee:fb:a6:96:d3:4f:
8f:f0:78:80:db:a3:56:32:7b:1f:34:3a:bc:eb:16:
b4:2f:63:0e:82:ea:67:0d:7b:be:7f:94:a5:7f:98:
4b:c7:85:8b:b7:3c:82:86:8f:aa:90:4f:ab:5e:41:
24:d2:ef:dd:6f:55:02:c1:c7:76:73:59:e9:03:11:
30:77:70:25:93:59:f4:e4:c5:b2:f1:84:cb:41:3a:
85:ef:46:2b:81:61:38:9e:9e:18:9b:8a:7c:c3:15:
18:b3:93:c2:d9:bd:54:de:8a:59:5d:7d:26:05:5d:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:5F:29:37:4C:D1:01:99:04:39:5D:0E:2D:59:E5:37:79:3F:6F
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:68:59:73:dd:f2:be:49:3c:50:6a:39:52:44:45:e0:f1:55:
ef:ed:49:22:58:95:f8:2e:2b:f8:c3:cb:b3:b4:b5:16:35:b7:
8c:c1:f4:89:6c:c0:e5:f2:18:ae:9a:44:a7:a8:a5:f9:c4:21:
0f:e0:c1:58:ca:2a:98:69:09:81:c5:a4:6f:2d:8f:98:26:ab:
96:ad:59:bb:3f:b1:f9:30:fa:45:e4:13:ca:60:05:3a:43:2a:
2a:e0:b7:75:03:76:04:79:02:7b:2d:00:d1:12:41:d9:0a:5a:
60:bc:29:a4:6e:b7:88:5c:f9:41:f1:b5:de:cc:95:cf:0c:5c:
f4:b9:c5:c9:b4:a0:29:1f:82:c1:fb:d9:39:c0:e9:14:99:03:
21:27:35:f1:c3:a0:12:cc:0d:66:6a:62:a6:5b:bd:05:44:75:
be:79:be:71:a3:a6:85:4f:7a:bd:b4:af:e2:7e:8c:27:75:d8:
81:fc:f5:fb:d1:17:f1:35:c1:1d:5a:d2:0c:68:2f:17:6a:f0:
85:36:47:1e:0c:2c:2e:63:06:5a:03:30:d1:cb:50:06:b0:87:
ac:06:05:28:14:8c:71:72:da:50:16:fe:96:74:d1:49:42:e3:
e3:c8:14:ab:74:65:1a:8b:9f:3a:07:0e:2e:05:02:06:49:3a:
e8:70:28:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:36 2025 by rpki-client