Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
File: ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft (raw, json)
Hash identifier: YyqXeDXrLF1SU+aTW/05P/ZvwgrSWk2/QwOQx4N5l2E=
Subject key identifier: 50:78:47:77:E3:F1:42:7C:8C:71:4F:54:BE:05:FA:6D:60:73:5B:91
Authority key identifier: 67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
Certificate issuer: /CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Certificate serial: 01967C0E65156E3DDCB211732EAACCA036F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
Manifest number: 1055
Signing time: Mon 28 Apr 2025 11:00:40 +0000
Manifest this update: Mon 28 Apr 2025 11:00:40 +0000
Manifest next update: Tue 29 Apr 2025 11:00:40 +0000
Files and hashes: 1: W5Hmap82286bMvYRGfhj5P6hiJY.roa (hash: /qhhKBqlDLllBtHRejTtA1t4Bm+9enZEcvJRIbXk7e8=)
2: ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl (hash: zQf00k8QAdWYh6GljWV48Uq1XM/1dvaxU14J00NAJA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:65:15:6e:3d:dc:b2:11:73:2e:aa:cc:a0:36:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67147694fd17eb2d16fed7f735d7a11ddd451963
Validity
Not Before: Apr 28 11:00:40 2025 GMT
Not After : Apr 29 11:00:40 2025 GMT
Subject: CN=50784777e3f1427c8c714f54be05fa6d60735b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:e4:d1:99:89:84:7f:62:b2:1d:86:43:f4:
d3:d6:32:44:3e:3f:e5:56:06:db:16:6e:9c:57:0b:
f9:f3:a6:73:8c:07:39:b3:2e:f7:6f:19:dd:fc:19:
6a:8a:2d:ff:8e:ad:9e:e2:d1:06:82:e3:5f:1b:68:
9a:81:f3:85:3c:2d:3d:2c:02:67:47:98:c8:c7:15:
c5:e0:b3:72:f5:85:c9:f2:45:5d:f5:0b:d2:dc:64:
b3:72:4b:4b:63:0e:ff:a8:b4:37:f8:57:ac:bf:27:
cb:80:47:28:ac:77:e2:e8:85:60:86:f1:47:1b:b7:
6e:7b:eb:76:fa:1d:d9:3c:45:5a:4d:44:b7:07:aa:
6b:e4:9c:6c:3e:82:54:71:1a:e1:7b:4c:30:da:0b:
25:38:ce:d8:e2:cf:65:94:9e:e3:44:4a:96:de:90:
b1:c0:e6:dd:fe:7a:16:6a:ad:b1:76:c9:56:42:e7:
2e:8d:e9:b7:11:e7:86:90:4e:7c:ff:cd:f3:c0:5f:
a4:87:6c:2a:90:1b:b5:46:34:43:a1:07:ff:db:89:
dd:ff:0f:08:7a:d0:9b:da:fb:af:91:3c:0f:39:25:
9a:bd:3d:d9:06:dc:f7:d5:09:60:e6:66:bc:da:7d:
66:9b:22:ad:75:6a:8b:ba:08:ef:02:cc:59:d1:ea:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:78:47:77:E3:F1:42:7C:8C:71:4F:54:BE:05:FA:6D:60:73:5B:91
X509v3 Authority Key Identifier:
keyid:67:14:76:94:FD:17:EB:2D:16:FE:D7:F7:35:D7:A1:1D:DD:45:19:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxR2lP0X6y0W_tf3NdehHd1FGWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/de190b-7335-4816-a711-dccad0211327/1/ZxR2lP0X6y0W_tf3NdehHd1FGWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0e:05:d8:d2:7d:5e:d6:1e:02:70:c1:a6:aa:e7:8f:b4:9d:
d2:f3:1c:01:ee:cc:a4:fd:4a:38:47:ff:91:aa:97:63:35:78:
d9:6b:41:97:dc:83:76:dc:4f:c6:a7:52:bf:f5:a9:c8:66:0e:
1b:a6:6c:72:54:75:e6:05:ca:73:f3:6c:13:e5:19:95:de:f6:
05:60:e4:a5:de:de:0e:f1:d3:a9:6f:04:09:aa:cb:3f:26:56:
ae:37:54:a8:ad:99:8e:f0:d7:d4:07:39:dd:d7:b6:f7:ec:f8:
83:66:65:4d:d6:ef:3b:ed:cb:df:ba:55:ac:d3:0a:6c:79:63:
46:79:53:15:ed:66:ea:c6:81:d0:f2:47:97:19:37:35:c8:15:
19:15:92:90:90:0e:ad:2e:d9:09:a1:a9:04:6b:87:30:83:e9:
1d:5b:db:7c:e5:b4:98:93:3c:1c:a8:4c:96:c3:ba:d9:bb:09:
97:e7:03:92:01:5e:d8:c7:f8:7f:53:ac:b2:d0:dc:06:d3:4c:
85:10:3e:2d:cf:63:2c:55:19:8d:4f:e7:44:2c:03:fa:1e:a7:
94:2f:53:03:1d:0e:28:b0:4b:03:27:b9:7e:e6:30:08:a8:ef:
18:fd:a0:be:e0:97:c1:44:ae:da:b4:5e:55:ab:d3:8f:b7:44:
41:2a:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:32:29 2025 by rpki-client