Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
File: zkn8E0twZULK8aHvvgNPcBG0lDY.mft (raw, json)
Hash identifier: IVIY/ScARpU3A5bdyC+CUuiljR3Amf0lwnyoo5c5bmA=
Subject key identifier: FA:18:E0:AD:00:8C:7E:50:91:84:85:C4:13:A7:44:64:42:DE:8A:F5
Authority key identifier: CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
Certificate issuer: /CN=ce49fc134b706542caf1a1efbe034f7011b49436
Certificate serial: 0196A19B270869A348EA5F38F27EF1A66236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
Manifest number: 044D
Signing time: Mon 05 May 2025 18:00:21 +0000
Manifest this update: Mon 05 May 2025 18:00:21 +0000
Manifest next update: Tue 06 May 2025 18:00:21 +0000
Files and hashes: 1: SGAPHhpCJa9JFOb_Zf20G8kvkhI.roa (hash: 27D8nmxY/4y8rMryghx5LNMAGS+7aTblTkGND6PBRy0=)
2: zkn8E0twZULK8aHvvgNPcBG0lDY.crl (hash: gOsQKgcI/zhYYajjnSaSk714oGtZmlB85LuT+GOEfPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:27:08:69:a3:48:ea:5f:38:f2:7e:f1:a6:62:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce49fc134b706542caf1a1efbe034f7011b49436
Validity
Not Before: May 5 18:00:21 2025 GMT
Not After : May 6 18:00:21 2025 GMT
Subject: CN=fa18e0ad008c7e50918485c413a7446442de8af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:21:36:7a:51:4e:12:19:d8:88:49:42:41:ec:
8a:a4:7c:c4:85:bc:3e:54:e1:0c:ad:09:b4:63:67:
a0:c6:4c:d2:af:dd:85:04:58:33:16:a7:76:80:a9:
d0:ba:35:c6:a0:35:4a:68:c5:7d:8b:4b:4c:87:66:
dc:16:3b:53:e1:ab:22:4a:52:26:33:1a:60:76:90:
e1:9a:39:63:24:0c:55:a2:e3:c7:73:e8:06:8c:dc:
d2:a3:6a:b9:bb:17:bf:04:5c:24:40:aa:9d:1f:89:
41:1e:f7:9a:05:9c:1a:21:0d:cb:1e:5a:8d:1d:46:
2b:44:6c:7a:ec:ba:6b:c2:30:c9:13:8b:32:f3:34:
16:4b:b3:d7:09:bd:90:a3:55:7d:bd:6f:ee:e4:4b:
23:31:42:f8:50:42:12:e8:24:fb:c5:02:db:01:2d:
2b:de:fc:c6:b0:e7:48:b9:48:bd:ea:b5:f1:91:44:
dd:8e:63:e0:d9:22:3d:3b:bb:86:2d:c5:f9:fe:a9:
93:4d:3a:7a:2b:78:a4:3f:b6:f0:3d:26:ac:93:dc:
4e:f2:b6:09:a7:8d:89:04:b6:00:4b:58:1f:32:e4:
ab:3b:d0:f8:2d:63:c0:4f:d0:d8:34:3a:64:f5:ca:
93:a5:df:11:bc:0f:66:9a:78:20:56:4b:27:b6:b1:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:E0:AD:00:8C:7E:50:91:84:85:C4:13:A7:44:64:42:DE:8A:F5
X509v3 Authority Key Identifier:
keyid:CE:49:FC:13:4B:70:65:42:CA:F1:A1:EF:BE:03:4F:70:11:B4:94:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkn8E0twZULK8aHvvgNPcBG0lDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/01dbbc-2fba-4d97-85f6-641edda06cce/1/zkn8E0twZULK8aHvvgNPcBG0lDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:51:61:36:90:7c:9e:bd:63:3c:35:b0:33:b2:26:74:f0:a4:
30:80:42:7a:9f:f3:55:12:2f:6d:90:83:c1:a7:fd:44:8d:08:
b6:73:dc:70:f2:a0:ad:5f:8d:f1:cb:75:b1:ea:ea:ec:e4:6f:
87:c0:96:2d:51:6e:be:05:7f:77:69:ce:db:b7:dc:65:a2:a2:
82:47:f8:25:5e:1e:f0:97:03:20:97:91:ae:d0:97:c7:32:b3:
55:6c:d4:e6:38:71:8a:ab:9b:8e:c7:bf:42:94:69:e2:f6:34:
6a:26:d6:cf:6d:dd:68:2e:95:01:22:df:a6:ce:93:62:3b:68:
fe:50:55:c0:e8:aa:40:d8:7a:97:b2:98:ee:1c:82:8a:26:05:
e2:14:ef:7e:13:b5:71:c8:40:79:52:e2:ad:73:47:82:2f:e5:
51:cb:55:1d:7a:f9:39:49:fb:ca:c6:98:e7:7d:0d:79:81:67:
d2:7f:3d:67:8e:2e:22:7f:fa:f3:c5:4b:e5:62:a3:b1:57:c2:
7a:4b:44:b0:1b:22:cf:cd:c3:c3:33:a2:9e:39:0e:ce:79:65:
81:18:a8:ef:cc:06:d9:be:21:c0:68:70:1d:ed:4f:20:31:9a:
a9:ea:d9:9c:9d:87:51:9a:5b:41:da:a6:de:5e:95:d8:49:70:
40:82:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:23:30 2025 by rpki-client