Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: tqtX+qgmFEvBdc2QUOdlI2WjsqEDbA+Hm5rYfyLo9Aw=
Subject key identifier: 06:31:20:A3:43:5E:6D:8C:E1:22:1B:80:5A:15:1D:94:78:F7:85:AE
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 01968390ACAB5076DAE02FFDCDA8F852AAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 22:00:18 +0000
Manifest this update: Tue 29 Apr 2025 22:00:18 +0000
Manifest next update: Wed 30 Apr 2025 22:00:18 +0000
Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: cy/DhcHNIqVkz5t42wDCnHed3iwosm2vqy8Chgx0YQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:ac:ab:50:76:da:e0:2f:fd:cd:a8:f8:52:aa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Apr 29 22:00:18 2025 GMT
Not After : Apr 30 22:00:18 2025 GMT
Subject: CN=063120a3435e6d8ce1221b805a151d9478f785ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:69:d8:36:4c:06:93:ae:42:35:07:1b:4f:
2c:c2:ff:9d:ea:4e:18:f7:7b:c8:24:83:41:2c:e8:
3d:1d:53:aa:1d:8b:d6:da:16:69:ed:e6:38:dd:2a:
e0:38:31:61:bf:3d:e6:14:36:01:a3:fe:3c:b6:98:
44:62:72:3d:02:b1:d3:89:0a:d2:06:f9:20:3f:24:
00:fd:53:50:e6:0a:be:3d:c3:d5:a7:49:72:a0:59:
23:37:cd:ec:4d:4a:37:54:f4:cd:b2:ea:d7:4c:35:
7f:d0:12:14:f6:4d:f5:90:56:02:0a:e6:00:d5:dc:
6c:4e:6c:0a:b7:9e:c5:1c:3b:63:69:e3:fe:95:79:
68:af:2b:4c:52:0d:ee:be:1e:9a:ba:b0:d1:40:be:
7c:d7:f4:91:26:25:15:b4:c0:d8:dd:33:4a:8a:1e:
d4:df:23:d6:1e:25:14:e2:24:f6:a4:1e:0a:60:55:
30:f3:3e:48:e9:56:35:33:57:c0:1d:eb:6a:50:1c:
58:6f:e6:21:cc:ca:b8:26:08:23:8c:84:52:0d:df:
62:fd:a0:67:29:71:b6:79:19:88:97:8e:42:db:a7:
5a:31:cc:c4:40:72:0f:03:db:a8:71:79:4e:32:75:
76:ba:28:24:c1:84:02:51:fd:25:ce:0b:5c:be:64:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:31:20:A3:43:5E:6D:8C:E1:22:1B:80:5A:15:1D:94:78:F7:85:AE
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b1:a3:b9:87:98:ba:f5:bf:8b:f7:e8:c9:2e:30:fe:47:20:
ef:7d:c2:61:88:8a:b4:ed:b0:24:5d:bc:91:ff:01:73:8e:36:
ab:a3:76:20:72:5a:eb:6e:74:11:01:51:6b:57:ac:9f:6a:28:
74:5e:90:58:b7:ba:ab:76:81:f7:44:e0:03:0c:50:c0:38:d1:
0a:86:13:24:00:3a:24:f6:c8:53:fa:24:6e:fb:c5:dc:90:f2:
dd:20:51:13:3b:84:2e:aa:3e:19:79:3d:53:cd:80:02:a7:9c:
75:f0:00:38:46:f1:6e:6b:cf:db:e2:c6:41:5c:ef:20:70:96:
62:09:02:4d:32:70:ff:bb:dc:60:9a:e6:b4:9e:0d:ce:9a:a4:
b2:e3:92:5a:11:54:c8:84:28:65:f8:72:9b:25:ed:c7:1b:63:
97:ab:87:1a:a9:21:10:06:cb:64:84:a4:a8:3d:49:c2:de:af:
1a:3a:9a:a9:ac:ee:2f:13:49:b5:26:92:88:19:f6:1c:98:b0:
6c:6e:72:1a:43:f6:75:83:db:64:09:26:75:86:dc:1b:34:10:
e0:ba:5d:86:aa:5e:0c:cd:5b:e5:22:d1:be:de:d4:7e:f0:1d:
ba:61:04:3f:56:e5:d4:55:ed:81:da:d3:29:f6:f2:a6:bd:21:
12:67:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:27:36 2025 by rpki-client