Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json)
Hash identifier: jVGbxrDUPasJmW2D5Q7xx/axPNXPghOR/4LncfXlJzk=
Subject key identifier: D0:95:F6:74:F5:6A:63:E2:F1:95:A3:CE:DD:47:35:58:01:9A:72:DA
Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Certificate serial: 019685ED639D3D4EA5A2399C74D266BA1F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
Manifest number: 0B7C
Signing time: Wed 30 Apr 2025 09:00:49 +0000
Manifest this update: Wed 30 Apr 2025 09:00:49 +0000
Manifest next update: Thu 01 May 2025 09:00:49 +0000
Files and hashes: 1: talgukTPD8oL2wxiXAXrxPFSwAY.roa (hash: 42F75IV5IsX3V6ll7VHZlZ+ABWMo+HJa6Q+yWz1dm0U=)
2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: +4IW6WAMO6DzzIGf992tY2/EXCCJuXE0DWvtdCG+eCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:63:9d:3d:4e:a5:a2:39:9c:74:d2:66:ba:1f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad
Validity
Not Before: Apr 30 09:00:49 2025 GMT
Not After : May 1 09:00:49 2025 GMT
Subject: CN=d095f674f56a63e2f195a3cedd473558019a72da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:7f:42:52:4d:f1:5b:67:c7:3b:eb:05:37:
38:e3:a1:6b:35:ca:f8:97:d5:b9:8c:8e:83:85:b0:
5e:d9:ec:83:03:af:85:a7:20:03:e3:c9:3e:d3:c3:
45:45:7b:b5:38:6f:03:7b:15:be:80:ac:c0:42:f6:
9f:d7:1a:c6:66:2d:91:04:da:db:88:38:9b:24:33:
89:2c:3d:c9:ca:63:8d:f4:fa:a5:7c:4f:fd:0c:75:
8f:c4:cd:9e:e4:ad:32:51:5b:72:ea:7a:a9:e2:c4:
66:54:ee:d1:4e:15:4e:2b:85:b9:9c:78:f0:24:22:
e1:65:6c:36:71:4a:86:39:33:bb:58:f7:47:f1:3e:
84:15:ee:1f:19:48:37:2a:6c:eb:4d:1f:70:37:5e:
b6:45:05:6a:44:14:ce:08:f9:37:58:77:cb:01:55:
31:1e:d8:5f:67:f5:e6:c5:29:9e:03:cd:af:aa:2e:
83:54:bc:80:30:3c:56:b5:ba:10:78:1d:ae:02:df:
22:c7:01:bd:f6:48:92:da:c1:31:35:b9:c5:1f:74:
80:48:ea:b3:cc:b1:1e:5b:97:77:9e:79:44:b6:84:
f8:2e:e1:3f:ec:ec:c6:85:bb:eb:c0:16:6b:65:2e:
b3:3c:46:55:29:06:22:76:cf:d3:c9:c6:d8:39:c0:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:95:F6:74:F5:6A:63:E2:F1:95:A3:CE:DD:47:35:58:01:9A:72:DA
X509v3 Authority Key Identifier:
keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:05:ec:37:e7:34:c3:87:94:b7:f3:16:d6:88:59:29:df:90:
2c:c0:74:87:e1:26:c3:b8:54:c3:c6:ad:38:71:49:96:de:d7:
fd:c7:da:37:2f:96:9f:18:1c:d9:b7:57:ea:d5:2d:94:d8:48:
1a:8e:ae:ae:d7:49:7a:1f:01:03:af:63:c3:8a:d6:66:ab:88:
1b:4e:1a:ff:52:b2:7a:9a:83:9f:d3:a8:b2:9b:8d:a7:8d:85:
bb:4e:dd:0e:09:38:94:09:c6:17:bb:f7:18:82:42:8f:4b:1a:
c8:e1:4a:43:b2:c9:0c:0b:ed:aa:79:dc:36:76:37:9f:5f:09:
0e:63:17:23:6e:0e:db:97:9c:2a:02:f1:ae:ca:7f:b8:78:af:
aa:4d:bb:9e:60:2f:cb:c0:0f:83:00:b6:c8:14:59:24:7c:f7:
da:aa:87:b4:ec:5d:da:fc:4f:a2:0a:20:e7:49:ee:27:eb:0b:
8b:d0:72:21:80:60:70:b3:e4:ef:75:c8:79:36:e1:cd:68:3b:
d8:3e:bb:88:e5:3c:01:3c:d3:fe:a0:c3:8f:f2:1d:ab:b8:23:
70:54:16:e8:27:dd:59:6e:e5:7e:86:a9:64:80:2d:8e:04:2b:
d3:79:a6:6c:72:ae:3d:b8:18:0d:a4:5b:ea:85:9c:c7:4b:1d:
be:8d:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:50:53 2025 by rpki-client