Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft (raw, json)
Hash identifier: 4Ep3KrsCX/XdKK9+ws7yOu4v9K98eDFlaJrSX4Fcu1Y=
Subject key identifier: 2E:22:56:F0:45:1C:02:F4:77:0B:A0:6C:6A:05:66:47:7C:2E:CF:DC
Authority key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Certificate issuer: /CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Certificate serial: 0196C916E6D25B78EF7ECBEE65EDFC5550E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
Manifest number: 1537
Signing time: Tue 13 May 2025 10:00:43 +0000
Manifest this update: Tue 13 May 2025 10:00:43 +0000
Manifest next update: Wed 14 May 2025 10:00:43 +0000
Files and hashes: 1: bTsSCn9VQJFsfJFoDTOrVGY-N2k.roa (hash: +9Rs1bITp6EHbSOzvjJQ8zLBys/+7urSMq64MyKwyrA=)
2: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl (hash: xGidqZljoF/UpG2V/5n4S/9gkj3dIJ4rVxiL5ikqB6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:e6:d2:5b:78:ef:7e:cb:ee:65:ed:fc:55:50:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Validity
Not Before: May 13 10:00:43 2025 GMT
Not After : May 14 10:00:43 2025 GMT
Subject: CN=2e2256f0451c02f4770ba06c6a0566477c2ecfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:b5:60:27:8c:00:80:48:20:05:50:d5:6f:
b3:f0:67:92:5a:d7:58:9d:ad:cf:93:ae:54:75:b3:
ce:41:64:fa:3a:7f:c8:29:80:bc:74:39:24:66:bd:
24:68:1d:14:b4:3f:fd:4e:76:54:0f:8d:17:4a:e1:
e6:e3:6d:a3:44:6a:ef:93:b9:21:ef:a2:4f:58:c6:
c9:3b:9e:08:1e:c5:81:13:bf:82:53:6d:e0:c6:aa:
b0:0c:eb:38:2b:5d:48:32:23:b2:1f:32:9d:9a:88:
b7:a6:bd:be:55:c6:f8:7a:1b:8b:a6:82:9f:53:e8:
fa:40:98:0a:c8:61:5a:4f:5d:73:3f:21:6f:ae:10:
a8:03:50:bd:6d:ac:b7:aa:f9:66:78:a9:8c:a8:e3:
b5:80:ef:72:39:7a:6c:a2:3c:5a:94:6a:0e:f0:84:
93:e3:1c:1e:f7:ef:c3:45:67:1d:f6:34:f2:19:d9:
08:4e:9b:6d:d0:d3:0b:0d:73:6a:90:27:d5:30:ec:
4f:2c:af:9d:f0:c8:cf:bb:01:68:b8:06:0a:6a:3c:
1b:cc:93:6e:0e:4c:f8:20:8f:5c:ee:e1:79:36:29:
36:f9:68:22:de:0d:02:51:25:5b:e0:c6:cc:da:47:
73:45:75:1a:60:74:2a:9c:33:42:3e:68:05:a0:1e:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:56:F0:45:1C:02:F4:77:0B:A0:6C:6A:05:66:47:7C:2E:CF:DC
X509v3 Authority Key Identifier:
keyid:CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:11:c3:66:f5:05:d7:f2:d0:5c:fc:6e:9d:2b:65:7a:c5:
7d:a1:d0:30:e1:8a:b4:a2:dc:3e:d8:9a:9c:77:89:e2:3d:05:
89:25:fe:fc:1a:87:fa:8b:15:16:f7:88:eb:3c:a3:c9:d8:73:
ca:bb:f5:62:a9:88:d8:ec:4a:b3:e3:3e:21:e4:04:52:55:06:
e5:ff:e1:09:d9:7b:b2:19:40:34:e3:77:19:44:12:97:cc:3a:
39:ea:e0:67:f7:b6:3d:9b:a8:9d:2e:7a:49:38:03:18:70:b6:
72:e4:41:0d:b9:30:4b:b0:ce:90:52:4d:6d:a2:e4:56:1b:cc:
f0:7d:98:6f:aa:f4:57:37:69:f1:e5:09:f9:8e:42:30:7c:25:
b0:0e:69:33:05:88:50:6c:8f:e3:6f:a8:c1:a2:1b:f9:e0:9e:
3d:22:ad:df:d6:b1:8a:fe:08:9c:d3:61:77:05:26:0a:00:25:
14:e5:1c:f3:c8:43:7e:79:96:3b:e5:4b:57:90:bc:93:99:b0:
a6:9c:8f:41:bd:a7:60:69:cd:53:85:09:91:2c:5f:69:c6:fa:
6c:cb:d1:e1:38:3a:94:a7:31:fd:88:49:19:e6:bc:b7:a9:8f:
23:85:87:d3:18:98:04:57:1e:8a:a0:6b:e5:72:24:3c:82:6b:
89:0a:8b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:54:10 2025 by rpki-client