Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json)
Hash identifier: eP0BRlYQ88JGzCBOpmeAtumL5iX1mlGAHUvpeYXhiJs=
Subject key identifier: 9B:1E:D0:2A:75:B1:EC:8E:2F:59:A3:6E:54:5F:59:4B:3A:09:49:F7
Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Certificate serial: 0196A9F97E6B6896D6C28B0BE691D7C40662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
Manifest number: 0727
Signing time: Wed 07 May 2025 09:00:22 +0000
Manifest this update: Wed 07 May 2025 09:00:22 +0000
Manifest next update: Thu 08 May 2025 09:00:22 +0000
Files and hashes: 1: cGaM1pqwI_iREeyFYU4bDaF6huI.roa (hash: ZX5FkbfvKLABufYmP9T9sbDn4rTGZcGZ9RNRwuV4C4s=)
2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: krWvSt5LJEbIyIib/s+NpAqSAUuK/mZznW9UcU3tmVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 09:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:7e:6b:68:96:d6:c2:8b:0b:e6:91:d7:c4:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b
Validity
Not Before: May 7 09:00:22 2025 GMT
Not After : May 8 09:00:22 2025 GMT
Subject: CN=9b1ed02a75b1ec8e2f59a36e545f594b3a0949f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:37:31:78:b0:26:0e:3f:8f:e0:b9:d9:3a:
ab:37:46:da:f5:e7:37:8d:9f:96:7c:87:ad:82:65:
23:78:43:2c:0f:97:85:be:3e:a2:37:31:8d:13:f1:
b7:bf:b5:cb:39:07:d4:b1:b2:e8:48:11:17:68:5b:
08:d1:2f:ef:f3:ee:0b:cb:45:f1:d8:2f:f2:ef:fb:
68:45:55:78:24:f4:99:85:92:5d:02:23:33:d3:e0:
ff:ae:e5:d1:0b:4d:6d:f2:62:6c:8d:77:0a:38:39:
c9:c9:fe:d6:32:07:a0:3b:00:57:43:44:f5:32:8b:
7e:f9:b3:8e:6d:1c:31:93:7b:92:df:75:1a:ad:5b:
d2:2c:52:3c:9f:98:96:1b:80:bc:40:dd:1c:e0:a5:
8e:dc:e4:65:4f:55:c9:d8:7f:69:da:ec:0c:02:3a:
3e:22:6f:db:48:af:02:84:22:04:13:43:89:3a:69:
61:40:2f:bc:56:7a:0a:6d:f2:86:7f:8e:e8:7c:68:
26:ee:de:a6:ec:a8:0d:a4:71:10:d2:bb:62:69:39:
c0:04:34:91:aa:b8:2f:03:09:9b:9e:00:d9:e7:4a:
a2:fe:4c:7e:f5:d5:1e:06:61:f5:20:e5:f3:3a:12:
1b:02:e8:73:fa:ee:89:45:a3:50:7a:0c:1d:0c:bb:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:D0:2A:75:B1:EC:8E:2F:59:A3:6E:54:5F:59:4B:3A:09:49:F7
X509v3 Authority Key Identifier:
keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:04:00:73:14:94:d6:54:25:b4:b1:21:9c:62:68:80:06:61:
2c:d4:82:95:f7:25:91:4d:4e:62:8f:58:38:33:7e:37:2b:67:
ab:39:6f:ba:9f:c2:10:b8:d6:89:b8:96:80:3d:be:3a:57:92:
51:23:0e:73:d1:6c:fd:7a:4a:fd:38:eb:e2:e1:3b:73:48:21:
36:95:01:51:b0:6d:d1:78:6b:21:fa:e4:f8:38:b1:28:23:ff:
6b:3b:b9:00:c0:ec:90:51:34:4f:0d:40:a1:87:d3:41:93:5e:
48:36:8d:aa:3e:e4:26:7a:49:0c:df:94:b1:2b:bf:c7:d0:0c:
cb:b2:4b:78:c6:e6:28:9c:e5:26:e3:a7:ad:89:68:8f:c6:d9:
59:2a:87:39:2d:61:88:b8:66:9a:3e:57:eb:f2:5e:60:c0:7c:
95:66:6e:7c:95:fc:0a:a1:ec:74:2c:23:fc:a9:a3:b7:3f:4a:
5a:79:48:fc:da:07:e1:d7:c9:00:34:05:1b:25:92:10:10:e2:
bf:e2:c3:18:1c:36:33:cb:39:14:7c:59:62:01:88:ff:34:97:
49:eb:1e:e8:44:d2:62:03:65:70:b5:0a:c6:6c:e0:be:df:01:
3a:a0:87:77:c0:dc:0a:93:01:e8:4b:8f:ec:f7:45:b6:a4:c5:
cd:c4:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:19:55 2025 by rpki-client