Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
File: ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft (raw, json)
Hash identifier: 2jNgUcWrYJWe0wI/5FV9Nd/jazYUY4DoZ4E6VV6H+ds=
Subject key identifier: 55:F0:2F:5C:02:30:E0:B5:17:8D:17:EE:CB:46:9B:F8:DB:39:C2:54
Authority key identifier: 65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
Certificate issuer: /CN=65a424cee2fdb0072b541438d913d26636a9b88b
Certificate serial: 0196A0BF8D8CCB99843B1E98E0BA9D1A0E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 14:00:30 +0000
Manifest this update: Mon 05 May 2025 14:00:30 +0000
Manifest next update: Tue 06 May 2025 14:00:30 +0000
Files and hashes: 1: ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl (hash: 7smmk1yHw7SSMeqKN2vDlczeaDSe/SZoeZo7xjFZqlo=)
2: yg4sGgC5KBzP9wrpfNuvhuojK2M.roa (hash: e1y06aA1s62UqKwjDXe9gE31sK3hItmKrNoYCjTILV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:bf:8d:8c:cb:99:84:3b:1e:98:e0:ba:9d:1a:0e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a424cee2fdb0072b541438d913d26636a9b88b
Validity
Not Before: May 5 14:00:30 2025 GMT
Not After : May 6 14:00:30 2025 GMT
Subject: CN=55f02f5c0230e0b5178d17eecb469bf8db39c254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:2b:14:2e:f6:a8:12:57:88:1f:2a:c4:06:
3b:67:61:df:1e:63:e0:09:08:76:57:02:98:a5:f5:
80:8e:5c:19:11:9f:83:ad:74:19:74:a2:00:4f:71:
22:58:59:99:0c:d3:b3:39:0d:92:cd:53:8e:ad:85:
10:02:50:86:11:1b:f4:ec:d3:79:4c:14:a3:df:e9:
95:2d:b1:b3:45:43:ef:63:d8:52:7a:0e:15:56:50:
6e:ff:f9:67:c1:63:e3:60:63:d3:8e:34:01:42:75:
21:0e:4e:a2:ce:7b:06:97:79:19:4b:12:ee:0b:39:
0a:d8:3f:32:2c:a1:5f:9c:d3:14:69:f3:77:82:3d:
dd:84:40:49:ee:e8:d1:1c:36:8e:6a:cf:25:73:d8:
16:65:59:0c:30:b9:b6:3a:8d:89:71:31:89:a5:8d:
5a:de:a3:3f:90:d4:ca:3e:56:73:e0:37:dc:12:ad:
34:95:ff:a3:a6:1d:00:54:5d:6f:68:e4:e6:6e:c5:
04:bd:e7:3a:4f:1f:d4:f3:8f:16:89:12:de:d1:f1:
78:4f:a0:12:be:c8:10:73:4b:1d:7f:4d:cf:65:6f:
e9:e6:91:ba:c3:c8:cc:cf:4d:26:18:17:65:60:81:
71:bb:e7:7f:96:37:65:e0:31:1c:4c:ca:bd:dd:cb:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:2F:5C:02:30:E0:B5:17:8D:17:EE:CB:46:9B:F8:DB:39:C2:54
X509v3 Authority Key Identifier:
keyid:65:A4:24:CE:E2:FD:B0:07:2B:54:14:38:D9:13:D2:66:36:A9:B8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaQkzuL9sAcrVBQ42RPSZjapuIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/eb837b-3ae5-4f60-829b-2b8038283017/1/ZaQkzuL9sAcrVBQ42RPSZjapuIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7c:db:75:0c:97:1a:cf:3f:27:db:c9:8c:3e:50:2f:24:06:
13:16:40:dd:e5:2b:92:9f:8d:e5:80:4c:a7:56:6d:23:61:bc:
9e:d9:50:b6:63:d2:00:36:28:00:bd:cc:f4:93:3b:65:2f:fb:
d9:11:83:20:da:6e:a3:05:ff:eb:aa:12:e4:df:36:87:f1:9b:
0a:47:53:1f:09:18:87:be:86:90:2b:fe:f5:3b:ad:01:e3:77:
ed:b9:ef:bd:11:7c:c5:0d:f0:97:92:cb:76:5b:df:d9:f0:13:
a1:9e:03:1f:39:fb:e3:93:0b:bb:ea:6e:b3:df:83:70:0b:0b:
ac:84:15:90:73:c8:81:eb:0c:66:87:1f:d5:70:c6:a5:2c:e1:
e0:4c:a3:0f:15:06:ef:b0:73:cc:24:4d:22:a1:39:41:44:44:
e3:d8:ba:ba:4c:60:05:58:5f:af:50:41:34:c0:a1:f4:2a:58:
e0:3b:3f:bc:3f:34:bc:53:e6:60:44:38:48:7e:5f:af:4a:25:
f5:7e:20:54:e8:e8:92:f1:de:9a:9a:64:52:82:3a:95:b4:b8:
67:25:7c:dc:c9:b0:53:1c:29:11:b9:e0:31:bd:1d:24:0d:34:
6c:ff:58:01:b6:dc:3d:3a:5e:b8:3d:2c:8e:e5:96:f8:df:01:
33:61:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:52:04 2025 by rpki-client