Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
File: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft (raw, json)
Hash identifier: 4e9LkyrVt7EUAdLfcjEFj5+djMyP4qHkZcq13Ky5Z3Y=
Subject key identifier: 78:44:A5:38:BB:3A:20:35:CA:AC:7A:46:BE:1C:7D:56:B2:F7:2C:C3
Authority key identifier: 64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
Certificate issuer: /CN=64b59ae521952da55e03f779b885031c0c809cf9
Certificate serial: 0196C04A95714CD02A2595CF855AEC25427F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
Manifest number: 0E9C
Signing time: Sun 11 May 2025 17:00:35 +0000
Manifest this update: Sun 11 May 2025 17:00:35 +0000
Manifest next update: Mon 12 May 2025 17:00:35 +0000
Files and hashes: 1: 1M6uqQrJ-H8cZQtvFA1H52Pn6A4.roa (hash: nnfKaOcFHds8X3AM+jMxIYq03nNPy9Dlqx+6UDoHZiY=)
2: GKsMg22mlpLXCVq6Bfh92-dR9A0.roa (hash: vyV6Le4sH8oc7qh9Fe3hr94CnSdMfMjPQP6XmVQxrGc=)
3: ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl (hash: QWqErdTs+/espt+dbMkdCYZSWIuDOjqmv1FyoyZzoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:95:71:4c:d0:2a:25:95:cf:85:5a:ec:25:42:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64b59ae521952da55e03f779b885031c0c809cf9
Validity
Not Before: May 11 17:00:35 2025 GMT
Not After : May 12 17:00:35 2025 GMT
Subject: CN=7844a538bb3a2035caac7a46be1c7d56b2f72cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1c:a5:47:cb:e9:9f:95:af:bd:5a:3c:6b:77:
65:19:75:f1:76:b5:1a:60:43:d6:9d:bd:1c:3c:a3:
2e:e6:48:0a:33:6a:7c:6b:bf:c4:de:43:56:60:a6:
42:ae:dc:d4:c4:bb:a2:12:ff:39:37:7c:dd:12:ff:
fc:27:30:03:f2:55:c1:a8:a0:c3:11:f6:7c:7e:17:
3a:24:72:47:d9:b4:1c:19:78:72:62:71:4a:e6:89:
14:e3:e3:fa:9f:36:80:14:90:26:3e:c0:53:fd:08:
70:b2:29:cc:07:f6:47:6e:5a:13:f2:fa:73:35:75:
0c:02:ec:62:10:d8:fc:2a:a7:cc:2d:8b:bd:88:8e:
28:f6:ef:35:3e:64:60:fb:62:91:41:2b:45:fb:e1:
e3:6c:df:32:d5:0a:04:b0:79:57:b1:1f:04:05:a6:
66:c8:ce:32:9d:2f:8a:61:13:ed:22:73:c3:4d:5d:
4c:54:b0:d1:91:16:8c:3d:7a:72:ed:a7:11:51:eb:
30:38:4f:c0:4c:2b:71:70:34:ec:13:e2:cf:f8:75:
5d:3f:ee:36:96:a2:b1:0f:d9:2d:58:40:49:b7:21:
45:bd:a2:0a:dc:cf:d6:79:2a:f0:bb:55:ac:dc:b4:
f8:8a:46:bb:8a:e2:1b:69:52:3d:47:70:62:10:b8:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:A5:38:BB:3A:20:35:CA:AC:7A:46:BE:1C:7D:56:B2:F7:2C:C3
X509v3 Authority Key Identifier:
keyid:64:B5:9A:E5:21:95:2D:A5:5E:03:F7:79:B8:85:03:1C:0C:80:9C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6a6b22-fe67-4202-ac94-51ad00e54332/1/ZLWa5SGVLaVeA_d5uIUDHAyAnPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b2:66:20:08:a9:b0:ff:af:cc:d9:c4:29:24:87:b5:fc:56:
36:82:e1:92:41:51:dd:bd:04:0b:57:96:53:a5:47:19:04:8e:
f6:49:5e:34:5f:55:b5:2d:19:e2:3d:f4:9f:91:e4:b8:a0:0e:
53:a0:ba:00:01:36:60:26:5e:95:b1:a7:9b:7d:ae:b8:78:8b:
95:80:07:e0:a7:b1:55:ac:4d:3f:ce:c9:93:18:49:42:75:73:
8d:eb:cf:36:05:52:ad:15:47:ff:cb:6a:1c:2b:8f:fb:8c:cd:
73:83:d3:5e:68:3c:63:3c:9b:ef:4f:10:87:97:49:65:47:84:
13:1a:1b:fe:c0:67:7c:e2:3c:da:e4:5c:d9:a3:dd:4b:04:ce:
d1:b0:1e:c3:a7:72:10:d0:10:42:17:61:a5:06:c7:39:b5:ca:
64:c2:41:e6:f2:ee:ed:46:d0:57:cc:63:53:fb:bc:c2:02:f1:
0c:50:fe:58:5f:09:55:1f:b5:48:31:b1:5d:e0:bd:8b:6b:48:
6a:63:9d:f7:17:52:26:33:67:5c:b4:34:24:2a:e2:51:cf:6b:
22:59:33:c4:7e:5f:ba:16:ad:7d:b8:1b:b3:cb:88:5f:f6:52:
16:12:d0:94:f6:c4:bb:38:ce:79:d6:91:cb:36:ac:18:33:ac:
84:d2:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:22:38 2025 by rpki-client