Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: CKxsG2Rn3jnpnfdJ7CuXn2377VvIt3+IkhkaLSF0H2w=
Subject key identifier: 9C:D7:47:A7:89:5E:D5:2E:9A:75:BC:F5:65:2D:07:BF:71:3F:DD:DF
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 0196760CEA2CDDD1B5D3505EFE475F79C195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 04D8
Signing time: Sun 27 Apr 2025 07:01:19 +0000
Manifest this update: Sun 27 Apr 2025 07:01:19 +0000
Manifest next update: Mon 28 Apr 2025 07:01:19 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: FgCMEFGiAQqzkS6x0MzT332KOTyRIq5bfnDNTK91KLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:ea:2c:dd:d1:b5:d3:50:5e:fe:47:5f:79:c1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Apr 27 07:01:19 2025 GMT
Not After : Apr 28 07:01:19 2025 GMT
Subject: CN=9cd747a7895ed52e9a75bcf5652d07bf713fdddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:52:55:e2:6f:8c:fc:fa:9e:6b:2a:72:10:66:
e8:b2:26:cf:52:79:d4:ce:5a:01:66:60:e2:20:2a:
48:ba:c5:a2:48:10:64:2d:6b:2e:15:b5:05:0a:43:
a7:14:91:6a:1d:fa:0c:90:9a:78:70:73:6e:5a:2c:
60:23:23:04:23:30:ab:18:41:07:43:2b:8a:49:aa:
94:bb:da:a0:97:dc:d6:4c:45:47:83:6b:43:ae:bf:
88:3f:43:7e:df:6b:ca:42:e9:4f:82:1e:cb:5f:8a:
3b:ce:0a:3d:6a:7a:36:63:05:f5:6a:91:b4:39:d2:
f5:b9:a5:5b:7b:ca:f9:ac:7d:57:14:2a:32:2c:10:
94:2e:31:3f:02:f6:a6:d3:2c:60:65:7a:4f:e7:93:
af:8e:05:12:db:99:a3:ce:3b:0b:7b:27:fc:7d:d8:
77:f0:1b:71:28:c6:62:2b:dc:f6:af:1e:03:91:2c:
65:69:58:26:77:4e:e3:50:51:4a:51:42:e6:17:c5:
9c:2a:99:54:54:0f:dd:84:9f:32:8b:f8:29:66:a2:
32:49:54:f2:d7:8a:b9:1c:6a:4f:2e:75:5b:87:3c:
5a:ae:de:a0:dd:85:1e:c7:04:9a:a8:a8:e0:f9:fe:
96:73:f8:84:75:48:ca:dd:66:e1:0c:04:24:f6:18:
1f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:47:A7:89:5E:D5:2E:9A:75:BC:F5:65:2D:07:BF:71:3F:DD:DF
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ab:b1:11:c0:c2:64:56:54:d2:2e:6b:7e:68:1a:cd:9d:98:
42:25:6c:4e:88:09:32:69:04:93:de:74:a7:5b:c9:66:f3:ba:
ab:ff:12:d6:1d:66:91:81:e5:57:77:ac:06:c4:58:f1:f7:25:
93:fd:cb:f9:e4:1e:b0:b8:3f:50:6e:a4:12:00:24:80:f2:a8:
95:be:7b:c2:d5:eb:5b:3f:2a:11:5e:42:35:2f:93:2c:19:f6:
7a:60:52:61:8f:6b:c5:4a:09:3b:15:2b:d3:94:37:4c:5f:a8:
08:d3:83:f5:ea:ea:dc:63:17:c1:b4:f3:da:a5:cd:af:4c:65:
2a:a5:bf:6d:07:25:17:43:de:db:5d:69:47:48:0c:72:e8:e9:
bc:16:fd:73:b3:cd:c1:e1:dd:3d:48:c6:be:f4:81:80:2a:8c:
27:7b:85:6b:75:e4:91:93:c3:96:9b:a7:5b:32:3e:28:6c:0d:
fa:f5:73:11:e1:dc:8a:01:14:55:06:cd:f7:cf:49:39:52:35:
4f:b5:cc:fb:c1:ae:11:c0:21:65:04:23:d5:f3:13:88:fb:8f:
e8:86:ed:32:91:35:82:b8:f0:b4:27:78:1c:cc:b3:24:2a:67:
1b:36:c2:c6:e4:0d:cf:99:9f:0f:61:16:2b:f3:2f:8a:57:25:
b5:02:ab:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:44:57 2025 by rpki-client