Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
File: zPFCMN6e_sYQ_90zngxEgLaLrUU.mft (raw, json)
Hash identifier: xglwPUUG1O513fCBJEtpu3vStM7QEC2ef3KpFd2R0JM=
Subject key identifier: 1C:19:14:B8:4B:D5:AC:7E:EF:DF:66:96:26:AD:7F:13:A1:04:0F:48
Authority key identifier: CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
Certificate issuer: /CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Certificate serial: 0196BD8016FE21BAA46DACC99EB12729C9C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
Manifest number: 023F
Signing time: Sun 11 May 2025 04:00:10 +0000
Manifest this update: Sun 11 May 2025 04:00:10 +0000
Manifest next update: Mon 12 May 2025 04:00:10 +0000
Files and hashes: 1: Jy9w65ZubGm0SY_59Wq1tFlq7gA.roa (hash: GAWYOmgt7SjOR4XrYGICCDsdlImXuLIEXBRuDs31QjI=)
2: zPFCMN6e_sYQ_90zngxEgLaLrUU.crl (hash: qXfhPKLDNUWpm8/wczdZyJuj2ZFILsnaPJJGCx5ynpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:16:fe:21:ba:a4:6d:ac:c9:9e:b1:27:29:c9:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf14230de9efec610ffdd339e0c4480b68bad45
Validity
Not Before: May 11 04:00:10 2025 GMT
Not After : May 12 04:00:10 2025 GMT
Subject: CN=1c1914b84bd5ac7eefdf669626ad7f13a1040f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:23:60:d6:33:24:71:62:78:1a:a7:0a:b8:
ce:77:29:df:40:16:3b:9b:ba:fd:ed:e1:a8:41:54:
ef:d5:1c:3b:eb:09:bc:e6:39:3b:eb:43:83:5a:97:
34:e3:a6:ef:4b:e3:72:39:94:4c:2b:20:be:0a:2e:
79:be:ae:88:f6:16:77:fe:50:3a:8e:6a:b3:fe:90:
9e:f9:7d:7f:2a:b1:ec:c1:24:65:b2:23:ba:24:88:
bd:3c:d4:91:53:b3:2e:a1:ca:fa:47:2d:ff:9a:47:
0d:4b:ab:e9:fe:3c:71:4b:3e:75:4a:99:33:16:f9:
23:05:61:b0:f7:de:c7:f9:68:e5:77:c0:72:37:6f:
39:28:cb:8d:db:53:c4:60:c3:c4:e7:28:39:00:ff:
da:30:eb:5a:22:b9:af:28:97:90:9b:1d:61:03:f1:
56:b0:f7:d4:c0:44:41:c9:7e:ca:79:49:d5:0b:ab:
f9:18:55:cb:90:4b:34:22:7d:0c:80:74:20:15:8c:
82:e0:73:f7:fa:7d:05:2e:0d:3c:b3:97:89:44:e0:
fd:2d:da:85:96:8f:6c:6c:a7:e1:c5:bf:e8:41:fe:
38:51:bc:d2:4d:e2:aa:80:45:af:c5:40:b3:a3:2d:
0a:81:99:f4:67:cd:79:f4:ab:eb:68:45:d3:7b:a6:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:19:14:B8:4B:D5:AC:7E:EF:DF:66:96:26:AD:7F:13:A1:04:0F:48
X509v3 Authority Key Identifier:
keyid:CC:F1:42:30:DE:9E:FE:C6:10:FF:DD:33:9E:0C:44:80:B6:8B:AD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPFCMN6e_sYQ_90zngxEgLaLrUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/482633-c9a9-4633-b138-a17b82e6d786/1/zPFCMN6e_sYQ_90zngxEgLaLrUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1a:01:76:b9:b3:43:20:31:a9:de:a3:d8:9d:c0:c3:43:6e:
fe:13:c3:a1:ef:7a:9c:55:32:6b:a5:bb:1e:70:f3:1c:3a:8e:
47:f9:10:6a:7c:af:20:0d:9f:2b:40:c3:0e:f1:ff:de:78:ac:
37:0f:3a:2e:af:a0:e6:dd:14:88:01:cc:0c:0a:a9:e8:f2:8d:
d7:b3:2e:17:8c:61:8e:af:d6:15:b2:a8:d2:0b:ee:a3:d9:1e:
51:48:cc:19:41:c8:c9:52:89:00:50:6a:39:b1:e2:1d:12:31:
c0:3a:f1:9f:ed:09:f1:86:7e:df:de:35:02:3d:6a:19:45:77:
cb:35:6a:35:60:2c:30:d8:1f:a7:cb:fa:89:f2:c1:e1:b4:58:
0f:c7:d9:36:5c:8c:6a:d7:1a:c0:9c:34:db:bc:1e:55:18:b7:
46:25:b1:1f:89:4c:8b:ab:75:7a:0a:03:e9:0d:6e:c7:d3:1c:
a9:85:ed:10:b1:bf:43:55:c5:f9:d3:fa:f2:30:06:7f:80:04:
14:b7:40:55:2e:be:f3:07:36:dc:30:2e:96:76:56:1d:6a:71:
3a:39:99:ee:a2:ff:98:66:01:b5:2f:0c:9c:2c:90:9f:e5:60:
51:d1:fd:e2:c5:85:2b:91:de:22:36:82:59:f0:a5:72:96:6a:
32:45:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:28:01 2025 by rpki-client