Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: nQyAr/KwSVd/QNE70pTlODIWDmY31rBHs2l5JVGHkYU=
Subject key identifier: 74:8A:39:98:A2:11:D5:B7:9C:EA:72:BC:DA:90:49:2A:5A:73:8E:6C
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 0196A72FD1371CBB78C5D1AC6F8A484A20D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 118F
Signing time: Tue 06 May 2025 20:00:50 +0000
Manifest this update: Tue 06 May 2025 20:00:50 +0000
Manifest next update: Wed 07 May 2025 20:00:50 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: ZcU8ggipNrJxGa8j99KiK0QWMhV7qbVmcBdMSdF37E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:d1:37:1c:bb:78:c5:d1:ac:6f:8a:48:4a:20:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: May 6 20:00:50 2025 GMT
Not After : May 7 20:00:50 2025 GMT
Subject: CN=748a3998a211d5b79cea72bcda90492a5a738e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:aa:8f:43:3a:1f:1d:1f:a1:90:3f:1e:8a:
c3:4c:53:ac:f6:2b:2a:8d:d1:af:10:22:21:30:cc:
86:38:c7:6e:c5:eb:49:c2:5a:07:7b:1b:39:16:43:
4f:51:b7:66:92:98:36:4c:45:52:8a:07:53:1e:e6:
05:a5:fa:9d:1b:2c:d6:90:e5:3e:b7:45:be:2b:d2:
c4:3f:58:b0:89:30:94:f8:64:34:0c:da:69:79:6d:
24:c7:7d:dc:2d:ed:d8:6a:0c:49:b6:cb:0a:ec:01:
d9:2e:b8:b9:8b:f4:87:2f:ec:54:95:ba:8a:89:01:
d0:a0:5f:70:65:a0:ec:ec:35:44:fc:1c:69:c0:0d:
ca:79:07:dc:9e:b5:97:c3:fb:96:c8:4f:c7:bc:aa:
5c:1a:df:92:6a:e5:ce:8a:65:df:20:0d:60:e2:0d:
b3:5e:8d:85:20:99:fe:12:02:08:dd:7d:d1:ec:ee:
8a:90:0d:0b:3c:2e:56:ab:26:84:7c:4e:45:03:1f:
bd:5d:b6:ca:28:97:0a:c3:c4:5a:9d:44:9e:66:56:
5f:2d:2d:72:0d:fe:6f:82:2d:66:2a:4f:6e:99:37:
57:c0:2a:82:f3:0d:7a:8b:6b:50:b2:f3:65:d1:24:
4c:fd:8a:9c:5a:a1:d1:4f:72:cd:1d:b8:ee:d6:61:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8A:39:98:A2:11:D5:B7:9C:EA:72:BC:DA:90:49:2A:5A:73:8E:6C
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9d:4f:c3:06:15:b2:63:b3:ac:85:84:49:44:2a:45:d6:f0:
52:cd:0d:2e:74:0e:94:31:18:64:8a:2a:ca:8a:8c:56:46:5e:
c0:e8:fc:e3:52:57:0d:bb:ba:ea:88:f1:b9:0a:e0:76:ff:cc:
34:37:5c:0d:b5:a5:89:21:86:ed:f2:51:19:b0:42:d8:1d:83:
97:b5:a6:f9:04:67:58:ec:87:ea:b5:8e:3e:30:07:51:9e:59:
02:97:9e:20:40:5e:58:90:a0:83:f6:1a:e4:7e:08:ee:49:f5:
b8:ef:6e:e9:d0:b4:e5:bd:c2:80:03:c1:70:3b:1b:57:1e:21:
18:6e:d7:28:cb:06:f2:52:5b:e4:ed:37:26:50:bf:e0:f9:82:
28:83:1c:8f:c6:f3:fb:66:b9:b1:f9:c7:17:d5:8c:b0:02:f6:
46:69:94:46:e1:75:35:09:85:1f:6a:b9:b8:f6:88:21:83:9c:
12:cd:97:a0:67:61:7a:17:86:36:bb:3e:c4:d1:80:25:2d:c4:
b7:54:8e:5b:3a:13:9e:70:b0:4e:05:a6:a9:b3:13:44:94:7b:
4f:28:84:cc:f3:8b:14:c7:5a:a8:fd:75:e6:82:d9:08:d5:b3:
78:b4:fa:b9:ee:b1:5b:4e:ac:f7:93:64:f5:6f:9d:eb:0d:48:
f8:90:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 06:11:28 2025 by rpki-client