
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: INZG9o8XVjaD2VvRCb0ynewh+FhXxRAD0Rwv4X4uOxI=
Subject key identifier: 00:A8:41:AA:C0:C7:9F:C3:92:16:9B:D6:AA:88:CB:82:59:35:56:89
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 0196ACC3BD66FC11021B5A7D2BCF2CB45231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 1532
Signing time: Wed 07 May 2025 22:00:31 +0000
Manifest this update: Wed 07 May 2025 22:00:31 +0000
Manifest next update: Thu 08 May 2025 22:00:31 +0000
Files and hashes: 1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: VOw+WXA6eXw1NBzfwJqbEWEWidT7pL3BiZHfopqSFV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c3:bd:66:fc:11:02:1b:5a:7d:2b:cf:2c:b4:52:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: May 7 22:00:31 2025 GMT
Not After : May 8 22:00:31 2025 GMT
Subject: CN=00a841aac0c79fc392169bd6aa88cb8259355689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:0d:fb:55:75:de:80:ee:db:e6:23:8a:4f:
76:08:74:be:76:f4:a7:e5:9c:0e:e4:0e:99:ec:dc:
60:da:cb:f5:ae:42:22:03:21:c4:ee:7a:54:c0:b6:
f7:81:3f:b0:35:12:ae:f3:86:15:87:89:30:35:04:
f6:78:0e:6d:2f:b0:93:9d:b6:0e:ba:fe:87:bb:ea:
ba:d6:1f:a9:e3:4e:8b:9d:7d:ff:67:88:80:39:a0:
ed:ac:32:16:dd:0e:a0:81:e8:60:4b:c0:fa:26:a2:
96:c8:05:7d:29:47:c5:3b:bf:64:70:91:41:74:9f:
c5:06:09:95:02:87:33:df:c4:ea:b9:dc:1c:f6:4b:
ec:58:1c:a7:35:56:37:c7:93:68:37:9f:c0:70:ac:
64:fc:dc:de:f3:4e:57:b1:c8:59:0c:9c:35:29:f7:
d1:39:41:6a:25:b6:7c:68:d5:bd:2d:d8:a5:6f:01:
7e:7d:f3:98:1c:36:80:63:ab:16:f2:49:1d:6d:6e:
01:25:b0:5f:5b:a1:30:f0:e5:23:66:18:90:37:2e:
b9:87:65:17:83:d5:31:d2:1c:a5:c2:08:ea:f8:41:
69:bf:e4:87:fb:cf:85:bb:15:fd:c1:2d:c9:31:27:
16:38:a7:38:b5:a7:c0:63:d6:d2:a5:af:c7:5c:4a:
cb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A8:41:AA:C0:C7:9F:C3:92:16:9B:D6:AA:88:CB:82:59:35:56:89
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:64:5c:80:76:f7:61:e6:b4:8d:1e:13:b9:22:36:0f:38:82:
56:24:32:52:1a:a8:a9:90:d0:43:e5:da:7d:71:f5:f2:a1:8b:
12:91:93:a1:ed:3a:94:88:9d:a4:e0:98:46:36:5a:3d:0e:c9:
9f:76:4d:66:4b:c4:1a:c0:f9:82:b5:76:be:07:4d:54:e5:a3:
c5:c7:d7:3f:9f:b4:4b:bf:bc:45:2f:c7:fa:ea:09:d1:d2:ba:
f0:17:ce:00:5c:04:b4:3f:24:3b:45:3a:20:2e:c5:65:ec:0f:
11:fd:c2:50:0b:7e:e1:c5:d5:5d:15:38:e8:42:f6:d2:4d:05:
9e:7d:13:e4:49:b1:25:9a:85:a8:f4:c2:55:54:cf:f3:6f:99:
56:db:3e:54:9d:fd:af:4f:31:6e:3f:dc:b2:d7:4d:20:9e:e0:
d1:7b:7a:07:ff:e0:9f:ea:a1:d5:4e:e1:3d:7f:6e:3e:2b:f7:
11:32:5d:c7:81:28:5d:8a:4f:38:4a:fd:48:96:42:30:32:e7:
37:8e:c8:11:12:f7:70:8b:2a:4d:db:78:4b:9b:f9:8c:a3:3d:
71:ab:3e:ac:56:da:35:7d:f4:d7:c5:f4:0e:71:57:9c:5d:e9:
5e:46:83:53:0d:04:77:3f:4a:f5:fb:03:8d:fe:58:8a:e4:f5:
e7:26:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:58:13 2025 by rpki-client