Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: /HMMl0Xj9WClKEsijqAIDFfNtKkrwp7tNPOtv5p90h8=
Subject key identifier: E3:A4:2F:74:96:77:13:6A:25:4A:57:25:E6:11:C6:4B:48:3E:71:1A
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 0196AB4300BA71717C664C37A1ACF0801B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 0312
Signing time: Wed 07 May 2025 15:00:17 +0000
Manifest this update: Wed 07 May 2025 15:00:17 +0000
Manifest next update: Thu 08 May 2025 15:00:17 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: Yena3v5cf0Qe925zRSIT2Mufne/nRpp9LqdAhZjPLcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 13:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:43:00:ba:71:71:7c:66:4c:37:a1:ac:f0:80:1b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: May 7 15:00:17 2025 GMT
Not After : May 8 15:00:17 2025 GMT
Subject: CN=e3a42f749677136a254a5725e611c64b483e711a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:33:30:e0:8f:63:3e:4f:bc:68:c4:89:dd:
61:fe:70:db:1d:4a:c9:44:44:dc:10:7f:7b:72:c3:
7f:21:42:ed:ef:c9:ab:d8:c5:13:9f:03:3c:bc:34:
b9:1c:62:1b:2e:1b:d8:bd:c6:4b:84:7e:2d:af:f8:
60:bc:3f:fa:a1:32:fb:e9:2a:81:bd:77:b5:a4:66:
a2:3a:c4:ef:6e:2e:b4:37:d8:b1:f7:6c:b0:a4:dd:
0e:20:c3:0c:b2:7f:9e:08:3c:8d:28:b8:f4:ec:47:
43:8c:8b:82:bd:2e:17:e5:2e:d9:56:2e:7e:01:f1:
53:27:ec:8c:85:ec:84:25:9f:3f:62:5a:54:0f:21:
b1:d7:89:1d:78:08:91:f9:cf:28:d8:f4:b0:27:99:
e1:ec:ac:00:a8:3c:06:81:1a:f3:72:a2:1d:7a:34:
93:c9:22:b0:c1:10:ed:98:1f:d1:e7:6f:e7:fe:21:
60:72:b1:eb:92:41:c8:f9:e7:6a:0a:ba:6f:30:b4:
98:13:02:6e:42:9b:58:e2:2b:01:a0:d2:0f:37:d2:
86:e9:5b:3a:89:2a:0f:86:c1:89:40:65:38:66:f5:
c6:80:d7:a6:58:08:4e:3d:b7:f3:53:27:df:ac:8b:
18:40:82:7c:44:4e:c5:25:b8:74:b8:e0:9c:6b:1b:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A4:2F:74:96:77:13:6A:25:4A:57:25:E6:11:C6:4B:48:3E:71:1A
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6c:15:1b:94:47:c3:a3:66:33:39:ea:45:3b:ff:eb:31:b5:
d8:df:bb:2e:fd:ba:fb:56:7b:11:83:da:f4:0f:02:84:05:e4:
81:c0:89:47:65:00:15:d9:b6:f6:9d:c8:c6:29:82:5b:25:9f:
c0:8e:f5:35:e6:88:dc:63:f2:f1:7b:25:68:2f:c0:8f:79:e1:
24:a7:a6:6c:cc:ad:f2:99:e9:9d:bf:63:3e:e5:4a:96:6b:2f:
b0:fe:fe:38:2c:0c:bd:4d:98:6e:a6:6d:75:e6:0f:48:87:2f:
1b:ea:b0:67:79:1d:55:e3:bb:67:90:7d:60:a5:30:a4:33:75:
49:1a:0f:50:1d:be:fa:37:34:8d:30:ce:e3:96:44:a3:fc:b3:
92:16:72:09:a7:6a:1f:3e:07:62:83:01:8b:f0:d2:13:b1:b4:
a5:04:00:c5:7e:69:2f:24:1d:40:bb:35:ad:86:a7:af:70:fd:
1b:e9:24:2f:21:2f:8d:68:2d:ee:3a:40:8e:20:8c:e7:31:06:
ca:68:ef:9e:c5:36:76:bd:84:f5:94:89:89:82:cb:38:c2:18:
92:01:4d:27:fb:7d:81:c9:c4:1b:76:6f:5e:8b:88:d1:a5:c2:
9e:7c:fa:a2:bf:d1:c3:90:1c:33:3f:9d:d4:bd:b4:d3:e4:4a:
8b:3c:96:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:29:38 2025 by rpki-client