Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
File: zE3DCP5thhIQJvl0St1A4Rc1Q94.mft (raw, json)
Hash identifier: zQQlpBJXtvhRPaqNFgWNzH/1oLaG5HeCbe2laePj3q4=
Subject key identifier: CB:4C:00:EB:7C:8C:AB:47:31:D5:FD:B0:7D:4E:25:6A:76:E6:62:77
Authority key identifier: CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
Certificate issuer: /CN=cc4dc308fe6d86121026f9744add40e1173543de
Certificate serial: 0196759E9BC2CDFED4B76293C48C4DCE9FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
Manifest number: 121E
Signing time: Sun 27 Apr 2025 05:00:50 +0000
Manifest this update: Sun 27 Apr 2025 05:00:50 +0000
Manifest next update: Mon 28 Apr 2025 05:00:50 +0000
Files and hashes: 1: cNg_w6FNDPxXpKdIkq9A_UpQRD4.roa (hash: syLuSdgaorQGcBipXNeo5+gDHDzPudwTqzWzLW2dWo4=)
2: zE3DCP5thhIQJvl0St1A4Rc1Q94.crl (hash: jfdsqPMPzQo1I4CQqWQQ28lv0+asBALN0YSPFNpuzI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:9b:c2:cd:fe:d4:b7:62:93:c4:8c:4d:ce:9f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4dc308fe6d86121026f9744add40e1173543de
Validity
Not Before: Apr 27 05:00:50 2025 GMT
Not After : Apr 28 05:00:50 2025 GMT
Subject: CN=cb4c00eb7c8cab4731d5fdb07d4e256a76e66277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:db:9a:81:a9:97:28:08:aa:dd:62:6d:2b:
57:a9:83:c7:09:e2:2a:7b:3c:17:16:e7:10:98:69:
e2:8e:9a:62:c7:d5:5a:78:e5:00:ae:44:52:76:18:
23:ea:af:6b:5e:7d:b5:51:05:04:d7:96:23:b3:24:
9b:46:78:3e:6d:66:51:e7:29:e9:71:01:c8:ea:5d:
2a:cb:4e:01:dc:2a:d7:2b:f6:cb:35:ff:4b:a9:c4:
5c:81:b9:1d:36:af:3b:7d:a4:c0:19:c2:d5:92:b0:
a9:4b:b0:a9:cc:d0:65:af:a2:7e:b8:b1:8f:a7:2d:
61:85:8f:a8:ec:ce:35:19:01:65:b1:3e:b8:96:42:
c7:77:51:ed:cb:12:49:b0:ae:5f:40:54:53:73:c8:
22:da:5c:46:64:65:5d:14:57:36:ee:48:4c:5d:48:
03:2f:98:73:81:e2:bd:a7:b1:49:a9:72:c8:3c:96:
62:2a:cb:c7:72:e5:01:67:27:e8:de:16:a6:78:5a:
59:5e:7e:2f:a7:a5:9b:1d:fd:e8:12:01:88:a7:2c:
d7:ac:21:66:39:f4:b1:43:5b:33:36:35:7f:61:55:
1f:00:8d:7d:ee:a2:2f:93:3c:e2:74:0f:15:e6:b2:
55:6e:f0:8d:c3:e7:49:ed:d9:bb:c0:8e:d2:ea:d8:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:00:EB:7C:8C:AB:47:31:D5:FD:B0:7D:4E:25:6A:76:E6:62:77
X509v3 Authority Key Identifier:
keyid:CC:4D:C3:08:FE:6D:86:12:10:26:F9:74:4A:DD:40:E1:17:35:43:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zE3DCP5thhIQJvl0St1A4Rc1Q94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0cfa6-c446-4886-96ed-d226a3b1f42d/1/zE3DCP5thhIQJvl0St1A4Rc1Q94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:da:fc:c8:63:0c:af:a7:88:a8:42:25:77:f9:cf:00:f2:19:
72:ad:79:61:27:b0:05:03:5d:98:6d:e6:f2:9d:31:5b:49:f4:
75:41:da:49:40:b7:54:9c:89:3a:4c:47:ba:bf:ae:f9:74:18:
82:37:e6:71:d5:e4:ec:b2:8c:e5:91:65:1e:41:2e:9e:b3:7e:
f6:79:32:a2:69:4f:d6:b6:1d:87:35:8c:3e:64:0c:9c:9a:b1:
71:1e:7e:99:2e:b6:31:16:8f:ef:a8:0a:ba:8c:63:d6:b6:db:
35:73:be:9c:65:73:41:df:c7:c2:ee:30:4b:30:67:bf:23:31:
97:43:67:59:f4:f4:5a:4b:0e:bb:9e:0d:f0:79:33:01:cc:b1:
be:1d:f6:81:7b:00:97:b2:2e:52:af:c7:6c:1a:67:dc:4b:c7:
41:c9:bb:ac:f5:10:11:98:23:0d:65:e4:ea:55:78:df:d1:8c:
c0:51:e2:a9:c3:15:0b:01:44:fe:5b:14:6c:2e:fa:99:17:6c:
94:52:8f:07:e3:2f:ba:70:98:86:5d:26:75:88:55:88:9b:4f:
28:72:39:7c:64:15:40:d5:b3:c7:a1:47:59:4c:cb:46:10:28:
ff:cf:a2:b9:35:26:23:41:1e:e0:a3:11:67:1e:02:eb:f0:11:
6e:9a:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:41 2025 by rpki-client