Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
File: zeKPHxgJm6vwoZCIvqNboITskpc.mft (raw, json)
Hash identifier: vTa1cRYkejZu1ZWUo3Hmy1nN4eXswwG3eBuBxXvTJqA=
Subject key identifier: CC:EC:A8:72:BB:E3:21:E2:BF:0D:83:F0:98:1D:22:2D:EA:BE:9A:D2
Authority key identifier: CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
Certificate issuer: /CN=cde28f1f18099babf0a19088bea35ba084ec9297
Certificate serial: 0196760CF6087035DB69120BAFF87DF59058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
Manifest number: 0D03
Signing time: Sun 27 Apr 2025 07:01:22 +0000
Manifest this update: Sun 27 Apr 2025 07:01:22 +0000
Manifest next update: Mon 28 Apr 2025 07:01:22 +0000
Files and hashes: 1: tODsj4wJmlLizDhD4zx5X4Q0kBs.roa (hash: 8ot7Ptkdu5uwMXdssVMoEe9aK4JBYnjK0TXriR+RS5I=)
2: zeKPHxgJm6vwoZCIvqNboITskpc.crl (hash: CEh9QBGGoU1Z6q0WdZDcb9HXWFI4sT3LJj6b6qflRX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:f6:08:70:35:db:69:12:0b:af:f8:7d:f5:90:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cde28f1f18099babf0a19088bea35ba084ec9297
Validity
Not Before: Apr 27 07:01:22 2025 GMT
Not After : Apr 28 07:01:22 2025 GMT
Subject: CN=cceca872bbe321e2bf0d83f0981d222deabe9ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:44:21:4c:ab:23:35:96:ba:b1:66:84:8f:9b:
83:7a:64:5e:66:d3:75:be:30:9b:8b:8c:f4:ec:a0:
86:f9:9c:26:9b:cc:8b:a2:fa:5c:dc:40:63:3c:23:
2a:bc:53:7d:ee:3b:33:6d:33:8c:75:f5:f8:16:6d:
ab:8f:d3:d9:e4:7e:22:9d:d9:f9:c8:0d:89:4c:01:
d4:6a:69:18:2c:9a:8c:93:58:71:da:8d:0a:9a:a5:
0d:02:85:dc:47:25:50:b0:a4:7b:2d:9c:38:ce:4c:
f7:9c:d9:6b:1f:6b:98:a5:c6:c5:c9:f3:7b:56:d2:
f4:08:75:ea:af:5a:b4:63:51:50:c8:07:49:b6:47:
7a:c6:9a:35:9d:e6:ce:c5:22:fe:bf:e0:e3:f4:c5:
fa:16:8d:4d:96:93:53:05:5d:39:f7:68:c1:9e:06:
cd:41:78:2d:48:e3:76:28:95:88:ef:a1:7f:9c:03:
bc:65:63:a2:ea:76:d3:0e:59:7d:0c:51:cc:64:61:
ab:04:0b:30:f1:00:a7:6d:a1:ce:95:f4:a2:56:f3:
be:b4:2f:6e:4d:02:6d:aa:c2:6e:b2:49:1f:f5:61:
a7:99:8f:0e:0b:b6:6d:3c:7e:26:14:1b:08:f8:77:
b3:22:91:3e:ad:d3:61:a5:ce:5b:5c:2a:c5:63:9e:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EC:A8:72:BB:E3:21:E2:BF:0D:83:F0:98:1D:22:2D:EA:BE:9A:D2
X509v3 Authority Key Identifier:
keyid:CD:E2:8F:1F:18:09:9B:AB:F0:A1:90:88:BE:A3:5B:A0:84:EC:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeKPHxgJm6vwoZCIvqNboITskpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4e10c9-8652-4c84-b99f-e96f96cc9dbd/1/zeKPHxgJm6vwoZCIvqNboITskpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:14:7d:6d:0b:bc:db:eb:66:f3:b5:c4:56:a5:9f:ca:f1:b2:
7f:91:04:14:b6:8c:81:93:e7:d3:e6:84:8a:55:0e:53:6e:8a:
03:76:67:7d:91:90:c7:59:30:0f:8b:1c:fa:b5:8e:c8:d0:c5:
db:a1:7e:58:5b:b2:7e:ea:44:76:bb:47:e8:ab:2d:b1:36:60:
49:d9:9b:bc:0a:57:96:41:c0:f6:a1:2c:4a:7d:72:4c:03:03:
20:be:5f:54:b9:b8:03:21:d1:fd:b8:91:21:21:b3:83:2d:01:
f8:40:80:97:f4:5f:cd:72:f1:ec:11:80:7e:83:15:c5:9b:a2:
98:eb:db:c4:42:5b:02:df:2b:c9:cd:97:20:cd:16:ac:af:bd:
4c:4d:ed:d0:4b:d2:8f:23:51:95:32:8e:59:e4:6c:d3:2d:17:
98:0c:da:a5:ec:24:3c:c1:6c:c3:cd:06:d9:cd:39:bc:65:60:
fb:99:05:f8:6e:b8:a1:fd:1a:c8:a2:11:32:14:a0:99:c3:d0:
5d:77:9e:a4:18:a8:8f:fd:c5:9d:f2:d3:ac:f0:e7:36:4c:3b:
d1:7f:59:47:83:7d:6e:81:23:8d:76:da:1e:7f:82:56:6a:3e:
a5:bd:d1:61:7c:18:b6:37:14:a1:63:d7:c2:41:4a:ce:f5:b2:
d2:2d:d4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:38 2025 by rpki-client