Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: A22nT9y6/M2H+Mzvl96n1z5ZLqJ00+U1ZHfA48RTaC4=
Subject key identifier: 32:94:1B:70:41:A4:5E:67:A9:64:2C:87:64:65:45:F1:DC:57:53:D5
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 01967AFB688239D3DE3B93DC1901F11287DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 06:00:18 +0000
Manifest this update: Mon 28 Apr 2025 06:00:18 +0000
Manifest next update: Tue 29 Apr 2025 06:00:18 +0000
Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: aYyC7/1Y9yHVCSjXxLQGA8cgSlTqzdJQwciWEFEAT4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:68:82:39:d3:de:3b:93:dc:19:01:f1:12:87:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Apr 28 06:00:18 2025 GMT
Not After : Apr 29 06:00:18 2025 GMT
Subject: CN=32941b7041a45e67a9642c87646545f1dc5753d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:0c:b4:b9:57:b6:a4:43:0a:59:08:e7:38:
e9:0f:76:3d:cc:91:d4:77:a1:95:d8:b5:e1:cb:fb:
5e:28:0a:bf:c6:37:bf:7d:95:0e:49:d7:61:03:63:
88:4f:d7:20:d1:c8:1a:10:7d:c3:6c:79:61:34:e2:
c3:af:75:11:4c:50:07:cd:fe:46:d5:fe:04:b5:bf:
06:6f:ae:81:98:18:d1:22:6d:d7:3f:3b:1c:7f:88:
c4:f6:ea:cc:e1:5a:83:dd:36:68:8a:88:a5:bd:0d:
0d:69:dd:57:45:76:b0:a2:ba:79:ce:78:17:61:fd:
dd:f2:19:4d:e0:5d:7d:43:6d:1b:b3:c8:b9:6b:99:
65:35:fc:43:f5:ea:aa:67:29:f6:db:d2:b0:df:eb:
d4:ba:4d:56:2a:01:1b:2b:76:90:4e:1d:27:f8:93:
b4:7a:6d:20:0b:ee:25:8a:27:44:96:fe:56:3c:ed:
cb:75:f8:05:6c:5b:50:64:9b:51:b6:60:49:0e:07:
ad:e9:ab:ad:81:37:19:79:75:f0:41:3b:3b:48:68:
74:57:d2:24:2d:19:32:17:d5:9b:2b:09:7e:52:e0:
29:04:eb:44:1e:11:5e:5c:a4:1d:09:11:ca:37:9e:
fb:47:92:3f:41:19:5d:d7:a3:dd:80:e2:c6:f7:6c:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:94:1B:70:41:A4:5E:67:A9:64:2C:87:64:65:45:F1:DC:57:53:D5
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:34:c7:0f:a1:44:97:6b:b6:9d:5a:4e:0f:b7:a0:67:99:f7:
f5:c7:ef:03:89:49:f0:ed:5d:97:46:b0:5b:72:a9:2e:f8:cb:
77:26:95:4e:52:20:4d:08:29:dc:24:f8:27:40:fb:71:19:c7:
14:67:11:7e:d1:55:b4:42:b2:a1:06:14:a4:a9:00:ca:00:f7:
b7:27:4d:a8:34:1f:64:ef:06:49:f7:36:6a:c0:93:7d:52:a2:
ab:d1:c2:df:34:0e:b3:6b:42:07:f2:7b:60:0b:55:ca:00:03:
ac:ba:ec:95:07:b1:59:97:a5:b2:83:e4:38:a3:0b:9c:4d:61:
f2:81:58:da:c6:1c:64:e2:59:b1:1d:e1:b7:5c:32:d9:f6:5d:
6a:40:58:3b:98:7d:23:b5:80:32:e9:e3:ac:b9:3b:37:1f:28:
ae:31:74:f3:c4:54:ad:9d:9e:44:bd:bd:a4:e4:86:cf:77:b0:
b4:98:70:13:a1:89:40:31:cc:82:71:d3:68:58:28:2b:61:38:
08:81:cc:55:56:f6:0c:48:87:25:0e:01:a7:84:b4:dc:ed:e7:
02:30:a0:08:fc:cc:6c:9b:8d:5a:3f:5d:70:56:36:af:fd:83:
a6:b9:47:4c:74:16:ed:69:45:33:47:33:62:8e:d9:c1:fc:1e:
8c:9f:62:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:10:56 2025 by rpki-client