Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File: zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier: beCm5MZ3fswKMTWSfq2jhGiwUF1ZzNdybzdP1fE1g7o=
Subject key identifier: AF:BD:E2:2D:23:B0:62:91:39:E2:07:CB:76:78:A7:E6:3E:58:5F:DE
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer: /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial: 0196DA786EFBCADDD22C7A5523DF7E4BABEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number: 0803
Signing time: Fri 16 May 2025 19:00:47 +0000
Manifest this update: Fri 16 May 2025 19:00:47 +0000
Manifest next update: Sat 17 May 2025 19:00:47 +0000
Files and hashes: 1: YDAV-stFbBYknK-MHQjAFGKIviM.roa (hash: SdDeY9dzrBZujPQFvilvXbGOkdZa6vv8FLkLN5jjZVw=)
2: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: Nq/GupmUSUfaBsVnXKmSZToeB3/p1DrKTdaNw+dujOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:78:6e:fb:ca:dd:d2:2c:7a:55:23:df:7e:4b:ab:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Validity
Not Before: May 16 19:00:47 2025 GMT
Not After : May 17 19:00:47 2025 GMT
Subject: CN=afbde22d23b0629139e207cb7678a7e63e585fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:93:5b:ac:af:56:57:10:26:31:b6:1c:5f:f0:
9e:c6:5b:81:d7:bf:e8:8b:20:91:a4:4f:d6:36:36:
d3:a2:6f:70:76:83:ae:fe:44:44:8e:ab:2b:c2:3c:
a1:db:73:3a:bb:47:02:e2:43:af:70:53:f7:10:d3:
29:9a:f4:24:7c:03:8e:98:d7:b2:f7:55:f7:84:02:
04:64:4e:d0:90:f9:89:0c:81:65:f9:ca:07:e9:02:
17:89:9b:01:00:31:9a:33:75:65:c0:5d:de:e4:1d:
1e:74:c8:23:6e:cd:eb:97:bb:ed:03:bc:7f:31:4d:
6d:74:02:04:14:16:f2:b9:ca:b3:f8:20:1e:c7:03:
61:76:c5:14:7a:76:1a:89:71:97:32:9b:69:83:29:
95:77:06:d4:b7:f1:92:84:88:1b:18:d9:a1:3e:15:
8b:95:cd:e8:51:79:c4:b7:45:ae:fc:1b:c0:77:4b:
81:e0:3f:fe:90:75:64:b4:a3:65:c4:97:24:24:af:
57:9a:ad:e1:a0:d3:08:0b:d0:62:fb:27:dc:7c:82:
68:34:8d:6f:78:59:b7:e5:3d:16:45:a7:44:5f:8a:
ab:c7:6f:79:b7:ea:e5:96:38:c0:fb:2d:0f:0f:79:
b2:18:24:da:d4:1d:bc:38:06:1c:19:a5:a2:60:e0:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BD:E2:2D:23:B0:62:91:39:E2:07:CB:76:78:A7:E6:3E:58:5F:DE
X509v3 Authority Key Identifier:
keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b9:8a:8e:88:84:ca:0d:e8:5f:59:c9:6f:0d:f0:87:19:89:
fb:8b:c3:22:b5:c6:43:33:41:7f:60:7c:41:43:cd:95:ac:1d:
e7:98:f6:2b:e5:5a:a3:eb:14:a9:83:ce:24:d7:70:38:51:3c:
14:fd:5c:c9:c1:0d:3b:de:6b:c2:3d:f7:b3:d1:67:e6:a0:04:
8f:fd:2f:64:a0:28:33:dd:57:32:99:b8:82:ed:24:4b:d2:28:
1a:87:40:92:3b:5d:15:ca:dd:af:87:d3:da:0c:a7:bc:1b:be:
a7:8e:21:86:f3:03:64:ad:b7:1b:0b:a4:ae:0f:0c:9d:25:1b:
0a:c6:56:d8:45:90:db:71:9e:cc:de:23:b4:92:38:d8:27:fa:
3d:02:f4:0d:3e:fa:98:4a:51:b7:e4:53:21:98:d7:f6:f0:89:
eb:3f:61:47:d0:72:6a:0f:d3:95:54:c1:1a:70:0c:e0:25:de:
3e:92:f3:39:fd:24:6b:ad:94:88:22:b6:6a:ab:2c:92:82:98:
dc:57:2d:ad:86:03:4b:44:d6:6e:c6:b9:82:97:79:64:06:0a:
69:99:63:76:de:ec:65:31:ac:90:cf:2d:6f:95:76:d2:92:35:
e7:af:f4:ce:b7:3e:49:ea:ef:9a:a5:24:15:30:4b:cd:c4:25:
7d:c3:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:06:32 2025 by rpki-client