Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
File: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft (raw, json)
Hash identifier: GvKmDLMmO6oq0WX0lhfShgxd2aeQscX46Vzl3PBerLI=
Subject key identifier: FC:64:C2:11:32:52:78:88:52:C8:A9:3B:9C:1B:28:34:AD:AF:8C:5D
Authority key identifier: CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
Certificate issuer: /CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Certificate serial: 019675D554FE5766AAAB38ECF070AC4C02D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
Manifest number: 14A1
Signing time: Sun 27 Apr 2025 06:00:37 +0000
Manifest this update: Sun 27 Apr 2025 06:00:37 +0000
Manifest next update: Mon 28 Apr 2025 06:00:37 +0000
Files and hashes: 1: ZhlMSwf3_ZJIBXJaWSn_aND6IvY.roa (hash: I3W7A3cWQn7Ae7Qv1tAEghjtV2ZOTEutRM33xiC+rN4=)
2: zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl (hash: LjWu0yYAY33kx9/e+t+QIzAlT/p78DwE8RSrusFwDPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:54:fe:57:66:aa:ab:38:ec:f0:70:ac:4c:02:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb5929361e1d0de160b871f29bdd5a4040ca111
Validity
Not Before: Apr 27 06:00:37 2025 GMT
Not After : Apr 28 06:00:37 2025 GMT
Subject: CN=fc64c2113252788852c8a93b9c1b2834adaf8c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:de:74:ea:1a:8b:8b:88:2c:57:c5:d1:56:
76:46:99:ee:ba:65:41:81:a9:bd:15:b4:d0:2c:e3:
8d:7b:c5:49:ae:a7:3f:de:75:e5:6f:92:eb:28:d2:
e4:40:99:7d:97:c4:d0:ce:e8:cf:6a:91:00:85:15:
9e:60:e6:38:1a:8a:eb:8b:df:cc:d2:70:9a:03:d0:
21:d3:d8:1a:8a:95:27:9f:44:26:5f:78:2d:3e:99:
98:65:cb:b3:c1:7c:4f:b6:96:2f:34:84:6f:19:9e:
43:a6:bc:f2:9c:58:e6:50:9f:1b:fd:22:c3:e1:c9:
c8:00:8c:22:29:12:f7:ad:b4:ad:e4:92:a1:8f:e3:
a2:5d:d7:e2:95:45:46:7b:e3:36:d9:b6:12:51:1e:
c2:85:cf:76:6f:6a:6a:71:7d:7e:cb:d7:7e:08:20:
41:d7:6b:af:56:d8:66:d9:88:a4:c7:6d:d9:27:2c:
ba:1c:65:be:4a:46:1d:36:35:3f:65:4e:89:6a:38:
d6:24:4a:ae:5d:fb:0b:a4:c2:92:65:e0:da:49:16:
22:e6:05:04:cc:e8:c6:f8:58:8a:70:58:a7:e6:e5:
46:c3:16:a3:66:93:1b:99:af:54:7d:fc:4c:17:4e:
22:23:29:a2:d0:13:ed:6e:f5:58:2c:9c:f6:db:e9:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:C2:11:32:52:78:88:52:C8:A9:3B:9C:1B:28:34:AD:AF:8C:5D
X509v3 Authority Key Identifier:
keyid:CE:B5:92:93:61:E1:D0:DE:16:0B:87:1F:29:BD:D5:A4:04:0C:A1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d4dded-c510-477c-8fad-f616f0094b14/1/zrWSk2Hh0N4WC4cfKb3VpAQMoRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2e:9a:6d:2d:ba:d7:68:76:c8:3b:a1:a4:8f:14:0c:aa:36:
bf:af:d0:a0:cd:95:0d:09:9c:ae:fe:00:91:d9:ec:7c:4f:68:
2a:f2:c9:8b:64:b3:11:cc:17:dc:8a:c5:c7:a9:fd:9e:65:40:
be:31:f6:20:d8:a7:c6:01:8e:0d:f8:9b:4e:64:2a:78:45:f2:
0f:69:e3:5f:05:2c:00:57:6b:9e:a9:24:e8:0d:24:b3:6a:ec:
1a:15:50:05:63:82:46:28:20:92:4e:6b:d0:79:b9:82:80:1c:
0e:94:67:64:2f:85:3f:c1:be:d4:b4:07:8a:de:7c:6a:27:82:
d3:6f:2b:e8:4a:2c:0a:b6:99:9c:85:67:65:b6:1b:76:e2:03:
d5:ac:e7:d8:4c:d0:03:43:f5:de:57:45:08:6f:e5:ad:3d:b8:
31:68:97:9d:cd:12:84:b9:8e:ad:9a:11:ca:be:57:48:0c:00:
06:4a:1a:32:e2:dd:e1:ba:71:3c:47:38:a4:96:7e:3f:d3:22:
df:83:08:9a:4c:db:96:15:70:63:f7:88:09:35:17:87:e0:a6:
b1:c0:35:3f:cf:c5:b7:72:19:3b:8e:76:0b:15:ea:2f:a4:1f:
b3:e5:b4:e7:10:b2:cf:19:9c:b6:42:1c:80:8d:0c:0c:51:7a:
fc:c0:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:55:06 2025 by rpki-client