Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: CFLOJDGWb7rTFwZfSCKWcHySkm1JTGJsg+rTWz3+zbo=
Subject key identifier: A5:AB:54:62:B3:FE:20:86:3F:77:C0:52:75:44:60:25:5C:E0:44:57
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 01967755E9D7E21D18C0AEEA1050E36DB285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0A18
Signing time: Sun 27 Apr 2025 13:00:41 +0000
Manifest this update: Sun 27 Apr 2025 13:00:41 +0000
Manifest next update: Mon 28 Apr 2025 13:00:41 +0000
Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: v7CI2h5GNI1SzVsG4p5pI2tLPDzSNtX1e6V4BjEZpPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:e9:d7:e2:1d:18:c0:ae:ea:10:50:e3:6d:b2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: Apr 27 13:00:41 2025 GMT
Not After : Apr 28 13:00:41 2025 GMT
Subject: CN=a5ab5462b3fe20863f77c052754460255ce04457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:e4:86:c5:de:32:f9:c6:de:51:63:00:f2:
93:a4:c5:09:d1:82:35:6a:d9:16:88:9d:36:14:59:
70:22:a5:ec:49:26:e1:c5:56:2e:6b:4a:0c:ba:24:
fe:4f:6b:b8:3d:94:08:46:11:09:46:0e:ed:36:0b:
9b:67:1b:ad:69:16:30:e1:05:99:49:3a:3e:f1:1f:
61:4b:c3:2a:29:ab:17:96:06:f0:8f:fe:13:a7:20:
b1:e5:df:5b:d9:78:94:a0:2e:3f:35:76:80:dc:f3:
d4:55:48:19:d5:43:03:28:20:53:b0:06:53:36:ec:
b5:8a:1d:c8:0a:65:50:5a:0b:43:45:ae:7c:59:37:
91:85:5e:a5:e8:42:92:6e:f8:d4:e3:92:28:c6:a5:
fb:d0:ab:f2:11:a8:d9:f0:3c:6b:a3:c1:85:65:69:
f4:ce:83:9d:17:de:66:29:e5:27:ce:81:8c:89:1a:
46:d2:60:76:de:e6:59:18:33:dc:1a:f3:b6:5f:dd:
6f:cd:15:6e:39:56:78:87:b3:19:11:12:eb:95:fe:
9e:f7:0b:8e:65:a7:9e:ea:97:a7:c0:39:45:3f:21:
34:f4:fd:bf:7e:d6:5d:f4:0d:41:f3:4a:44:2c:67:
a8:2f:f7:86:7c:90:b2:36:eb:98:5a:f4:20:30:ff:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:54:62:B3:FE:20:86:3F:77:C0:52:75:44:60:25:5C:E0:44:57
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:00:11:d6:b4:70:34:e4:85:d1:0f:f6:b1:1c:b5:25:8c:54:
84:e5:81:ae:fd:83:b1:a3:de:6c:6c:29:3f:68:d6:2a:37:83:
0a:5f:d3:a6:08:71:b2:71:8e:44:08:7a:0c:a9:df:37:a3:3b:
d2:a6:76:a2:29:dc:b6:28:7e:d9:ed:f6:1b:cb:19:61:6c:a9:
18:a5:cc:d7:29:33:87:cc:1c:06:66:cc:aa:6b:5f:2f:05:a4:
e3:b6:57:48:07:04:45:e7:04:c9:56:7a:15:a2:89:47:48:ab:
f3:eb:b3:a7:b1:a7:fc:e0:30:4f:91:ba:b2:ca:b8:16:40:6b:
61:c4:c3:db:23:a3:86:5d:46:dc:19:65:17:c6:5c:8a:d5:45:
95:35:66:5e:85:e6:80:1c:2c:24:39:35:7e:ff:1b:b4:b2:a0:
8f:e0:24:7c:d1:f2:fa:ef:2d:f2:6c:95:07:78:3d:4d:f7:84:
cb:c9:6d:c8:74:20:cb:cd:5e:02:66:9d:ed:07:01:38:55:00:
36:7b:c7:ff:86:53:2a:db:9b:44:07:c7:0c:c8:9c:4c:36:44:
88:90:db:3f:fb:44:98:c3:ba:2a:62:59:38:b1:f9:82:f4:6b:
01:d2:5d:6c:8a:a9:9c:0d:62:f1:2c:0a:16:fa:a3:c2:78:6d:
42:bf:78:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:54:32 2025 by rpki-client