Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File: ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier: Q8I9WipirIqzsasYFOm+uttDNcE2NVDLQe5V4UsCt8k=
Subject key identifier: 47:30:76:3C:26:3C:9C:C3:81:BD:73:29:A9:AE:D5:49:FD:0A:44:44
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 0196BC6E4135927212719B00850D1DE67AF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number: 0E0D
Signing time: Sat 10 May 2025 23:01:04 +0000
Manifest this update: Sat 10 May 2025 23:01:04 +0000
Manifest next update: Sun 11 May 2025 23:01:04 +0000
Files and hashes: 1: LbrPw2qHStZqdco2bEzhOUNybWw.roa (hash: 7tT51i1L51JtsRXjzHib6ZL3MKK3W2gKGrb5rsnLLAg=)
2: POCPRxRMQvG_SBDmMnlfbNyZ_Fc.roa (hash: omhI/dBEp6szGMmdnXA+Z3Yz+jOpHj80ol6PbhfLhbo=)
3: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: eHUEfSX5LbypTPKE6m34GY5QmpfQB17QVRQYIc69Ocw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:41:35:92:72:12:71:9b:00:85:0d:1d:e6:7a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: May 10 23:01:04 2025 GMT
Not After : May 11 23:01:04 2025 GMT
Subject: CN=4730763c263c9cc381bd7329a9aed549fd0a4444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1b:a1:f3:9b:06:75:07:73:f5:8b:53:6b:db:
cc:9d:26:a2:84:06:1c:1c:e0:fd:f3:af:46:93:eb:
84:b5:76:60:f1:33:46:06:7e:02:db:72:49:b4:41:
ea:27:34:b4:79:a4:ff:b5:e6:e4:da:01:96:6c:36:
00:44:53:93:a6:5a:1f:9b:03:1f:3d:9d:b7:7b:83:
b0:ca:16:f5:e7:c1:2d:e6:c5:fa:a8:be:e6:45:61:
04:3f:bd:9c:b2:72:b2:46:fe:3a:64:52:ae:0c:cc:
66:66:a6:a3:15:e8:43:2a:dd:6d:43:e3:a3:14:57:
0d:c1:2f:ae:78:2f:ef:f7:19:57:ef:7c:8b:77:5a:
2f:bc:aa:c6:5f:82:44:36:c3:ea:36:06:6f:ae:b3:
24:f4:9f:54:58:53:00:6f:39:d9:39:85:08:0d:48:
70:01:0e:4c:04:62:1e:39:0b:79:0f:e7:f2:72:b2:
c5:0d:a5:0a:b7:70:0c:2d:b6:67:c2:70:a3:35:7a:
e0:30:00:84:9c:60:af:67:6c:8d:c7:b0:e4:c4:f0:
92:4d:b7:6b:65:64:78:11:89:73:7f:fd:f8:a4:f8:
3b:d8:df:d3:aa:f1:7c:34:0a:55:64:0c:0f:2d:88:
ee:5d:49:9c:ec:71:28:06:22:17:cd:41:18:e8:12:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:76:3C:26:3C:9C:C3:81:BD:73:29:A9:AE:D5:49:FD:0A:44:44
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ff:19:14:66:4f:01:db:13:09:b9:df:b7:8b:fa:71:c8:71:
90:f1:71:8d:5a:b1:17:40:3f:d0:94:fb:f6:23:e1:b2:47:ad:
4b:f8:03:3d:7d:73:cb:e6:4a:c4:3f:5c:f2:e2:10:16:75:63:
30:e0:b2:5e:74:1c:ba:01:7e:6f:77:55:7f:60:f2:a6:c6:a7:
56:ab:81:d1:fa:61:c7:d2:ab:b5:17:fa:d3:58:b9:57:d3:21:
02:fe:91:19:29:c0:18:90:45:65:32:d8:40:4d:fa:6f:5d:89:
57:ee:dd:84:b1:e6:e7:6c:7e:af:2b:0c:d1:e0:12:23:79:78:
16:04:c9:32:57:12:3e:e3:15:fc:77:bb:d8:f4:20:e6:65:1b:
93:07:75:27:5f:b3:1c:f0:9c:a9:e1:c8:6f:b2:40:6f:da:22:
73:c3:61:4d:b3:12:c8:8c:bd:0f:44:1c:0f:00:30:86:39:42:
4b:d2:21:71:b5:c9:a2:cb:1a:6f:50:8b:ea:0c:b3:22:ea:71:
ac:50:eb:34:26:2e:d4:ab:20:de:6d:ec:6f:69:22:10:f2:45:
84:a3:4a:58:6f:80:40:3c:f8:eb:09:eb:3e:31:cd:58:10:e8:
32:77:fa:8c:a1:27:98:20:f6:9b:3c:da:cf:8e:03:99:3d:2d:
7d:41:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:10:02 2025 by rpki-client