Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
File: zkyvauzIwxB7S3EXTrKZdOD9hVs.mft (raw, json)
Hash identifier: RZmGKC+mgWOjeIy674C5xBfk5zsXPJDOJ1qbBwn7+so=
Subject key identifier: C4:A7:64:0E:3C:EC:C2:44:25:ED:30:01:B5:54:CA:FD:AB:8A:0A:BD
Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Certificate serial: 019675D50D4E5635C7D5214F2659090E7188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
Manifest number: 150D
Signing time: Sun 27 Apr 2025 06:00:18 +0000
Manifest this update: Sun 27 Apr 2025 06:00:18 +0000
Manifest next update: Mon 28 Apr 2025 06:00:18 +0000
Files and hashes: 1: bveNVNZQRYaQggK5H4XE-ImTkzI.roa (hash: RsefAt4XMHkoKxXyBZqmXBMXlqDjbew2tMCZMb8OiUg=)
2: zkyvauzIwxB7S3EXTrKZdOD9hVs.crl (hash: xQE4mfV8XYNEqPjbr/MiE+enEZa7O7Pmj61mxda7XRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:0d:4e:56:35:c7:d5:21:4f:26:59:09:0e:71:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b
Validity
Not Before: Apr 27 06:00:18 2025 GMT
Not After : Apr 28 06:00:18 2025 GMT
Subject: CN=c4a7640e3cecc24425ed3001b554cafdab8a0abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3c:b5:2f:db:49:75:0c:c3:71:b8:8f:c0:f4:
89:78:55:40:20:ae:8f:06:d6:6e:4b:7b:0f:75:85:
fe:a0:64:b8:a1:3d:5c:a2:2c:94:48:3a:64:7c:9a:
78:ef:5e:a4:b9:bf:4c:65:38:d8:e6:c0:ef:91:a8:
a8:49:ea:46:f5:5d:52:f7:64:28:59:a1:f5:10:dc:
e6:3f:91:a6:88:9e:3d:5a:8a:8b:c5:db:b6:33:20:
b3:5f:43:1b:9b:a7:15:3c:cc:62:78:de:80:fb:6d:
d5:fc:fa:d6:23:6c:fe:b6:a4:2b:4a:92:f6:db:24:
2a:70:a4:8b:dc:8b:19:d8:b1:60:fb:8e:9b:90:c1:
a0:f9:f9:86:82:85:41:e3:d4:fb:93:67:56:c3:55:
f9:61:2c:02:81:dd:cc:3d:51:c4:9f:f7:02:04:cc:
81:ae:53:b2:05:42:c6:60:e0:18:0e:ef:9f:7b:47:
cb:67:22:4f:e7:95:b1:c3:90:c3:7d:ec:dd:52:68:
60:99:85:c3:96:77:8a:1e:ad:e8:72:2c:b0:d3:1b:
b8:8c:11:84:7c:6e:44:3e:f7:da:3b:2f:ec:55:45:
f5:71:94:bf:d3:50:27:80:4e:be:0e:25:73:81:f1:
96:52:15:4a:56:00:b7:d8:2b:2e:25:b6:b5:44:a4:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A7:64:0E:3C:EC:C2:44:25:ED:30:01:B5:54:CA:FD:AB:8A:0A:BD
X509v3 Authority Key Identifier:
keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:01:de:f1:0b:75:c2:da:9d:e2:78:46:1d:5e:e6:a9:81:3c:
69:24:b8:2a:32:6e:6d:99:72:c0:2f:62:53:06:6f:70:7b:76:
1b:3e:29:0d:c1:21:ea:95:2c:ba:1c:53:e6:2c:cb:43:29:47:
9b:37:e0:2c:3d:ba:42:28:76:e1:3c:d3:56:54:5e:7e:50:04:
d9:b7:50:62:62:ab:26:0b:08:17:aa:5c:8c:b2:54:f7:b3:75:
94:f3:a6:4e:11:20:3a:df:8f:91:fa:d1:cd:4e:8e:8f:41:da:
ee:27:29:eb:41:9d:cc:58:e0:69:a3:4a:87:20:b2:15:30:44:
f3:9a:3e:53:67:6e:65:7d:e3:dc:51:12:ed:fb:7b:92:b8:45:
e7:5d:85:3b:a8:de:a9:04:ed:16:c6:a3:ea:31:ac:e0:25:6b:
c5:0a:2f:7d:33:73:33:16:0d:1c:2e:ae:e6:95:31:0c:e7:83:
5d:5d:b2:e3:8e:9e:d3:db:4f:24:b4:2b:d5:b3:2a:62:30:f8:
aa:7f:00:c5:d0:dd:b8:de:00:a1:31:9c:57:a0:93:0d:05:c8:
12:7d:ab:40:d2:5b:a6:cc:8c:c5:cd:c8:b7:e7:e3:8f:e2:5d:
70:86:18:41:be:9e:4f:5d:48:42:f0:5b:ea:8c:67:63:3e:55:
2e:0f:45:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:43:52 2025 by rpki-client