Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
File: zPqIwisefFLecaN2Q96jw_zdSVQ.mft (raw, json)
Hash identifier: FKTM8bSJWRP1JEFgGVjpd5O85ONbMV7NWW3FTcCmQiY=
Subject key identifier: 4F:B4:F6:3F:22:A7:36:73:5B:92:39:6F:1C:15:2C:92:90:EA:27:22
Authority key identifier: CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
Certificate issuer: /CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Certificate serial: 01967DFC565ECC1BBB5C7D84679D0F14818D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
Manifest number: 14A5
Signing time: Mon 28 Apr 2025 20:00:11 +0000
Manifest this update: Mon 28 Apr 2025 20:00:11 +0000
Manifest next update: Tue 29 Apr 2025 20:00:11 +0000
Files and hashes: 1: 45oepcPp24ddD7U9F9fgcfRE2_A.roa (hash: JFFqkItzCIGw3eiTO4eyZ8lxk2ns3Bweomn6UBCbaB0=)
2: 6NfPgvm2R-DEhD59RilUaEstXMs.roa (hash: nHYetpjWCpzfXvmA5NqKKNkZO4+XknrY7xhjpxJgzio=)
3: zPqIwisefFLecaN2Q96jw_zdSVQ.crl (hash: FhNeVjzq07Zk4EW2qm7oGP+XBGaIzWyW0C59cBb8oXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:56:5e:cc:1b:bb:5c:7d:84:67:9d:0f:14:81:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccfa88c22b1e7c52de71a37643dea3c3fcdd4954
Validity
Not Before: Apr 28 20:00:11 2025 GMT
Not After : Apr 29 20:00:11 2025 GMT
Subject: CN=4fb4f63f22a736735b92396f1c152c9290ea2722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:9b:5d:87:7e:9b:59:13:f3:bc:16:4c:9f:
a9:bb:8a:bc:01:ef:35:17:4f:81:86:18:70:a6:e8:
49:6d:4c:78:0a:41:e7:c8:c3:64:6a:4c:9f:96:d7:
58:ea:cc:55:c2:96:3e:a0:64:43:82:fd:31:0e:36:
01:51:4d:b2:aa:8e:10:a5:f9:89:33:7b:22:ae:4c:
60:28:b4:6c:ea:b5:7b:c4:3f:97:4e:8f:bb:32:09:
6a:3f:f2:5d:52:35:1b:e0:5b:f2:08:3d:79:23:bf:
30:dd:e0:b0:19:97:3f:64:9b:86:f6:45:2a:9a:54:
e7:0a:47:db:09:d4:81:10:41:a6:8d:34:1a:52:72:
20:f8:8f:d0:c0:4e:38:5b:7c:13:de:40:7a:ea:08:
b6:ca:c5:83:f7:3f:97:a9:c7:eb:3f:06:8f:aa:44:
d2:fe:7f:ce:b2:7b:de:f9:75:69:d4:40:91:70:e5:
fc:e0:eb:fe:27:b6:07:dd:72:42:f6:01:94:0e:4b:
7b:d2:1c:6f:e8:f1:4e:8d:1b:91:e9:8f:0d:44:31:
7e:e2:5c:1a:20:1f:fb:f0:68:a3:e2:34:b6:c5:fb:
a2:06:37:54:1e:ff:fc:2f:3c:6b:7a:33:d6:47:6d:
cf:32:53:31:a6:69:ed:6a:27:51:6c:91:ed:91:7d:
9d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B4:F6:3F:22:A7:36:73:5B:92:39:6F:1C:15:2C:92:90:EA:27:22
X509v3 Authority Key Identifier:
keyid:CC:FA:88:C2:2B:1E:7C:52:DE:71:A3:76:43:DE:A3:C3:FC:DD:49:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPqIwisefFLecaN2Q96jw_zdSVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/1ae2b0-d93a-463c-a6b9-827b643af3d7/1/zPqIwisefFLecaN2Q96jw_zdSVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bd:2b:72:66:20:82:77:2c:82:9d:df:97:b4:00:dd:2d:b7:
8d:6f:89:65:76:46:9b:80:3c:82:d8:59:f5:ab:36:e4:e3:58:
84:24:e9:ef:72:1b:9b:ff:c3:98:7c:89:81:b3:b2:a4:14:57:
33:d8:59:50:98:6e:f3:62:f4:56:97:e6:ff:95:38:b5:2e:d5:
3f:a3:44:11:91:64:d6:86:d6:8a:c5:13:ce:13:6c:0b:c7:a6:
7e:3f:47:d3:b7:d9:56:54:80:85:29:34:5f:a4:76:9d:54:c8:
15:2a:10:f1:f7:8b:4a:32:b4:75:93:73:83:ce:fc:fe:68:21:
ad:1b:29:ae:14:72:43:ec:2e:67:ea:3a:45:55:4e:f6:4e:53:
9b:06:10:6d:3b:22:43:02:f1:bf:44:62:eb:20:f7:e0:d9:b9:
e4:ca:a4:d7:bf:fe:20:4c:8d:20:82:6a:01:2a:67:66:be:56:
f0:5e:58:fd:ca:42:0f:3b:f5:36:44:52:5e:cb:ee:38:59:55:
fa:40:ad:9a:74:ad:a8:27:7f:53:81:3d:e9:37:9e:5a:f6:cd:
25:9c:1a:9f:25:d3:6b:b0:85:24:ca:3a:61:c5:19:36:8f:82:
c3:f1:be:11:06:2a:f9:02:d1:75:72:5f:b4:e3:85:1d:04:3a:
2b:26:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:25 2025 by rpki-client