Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
File: zsR4iytpLHEDscueFhf4s2aRDxM.mft (raw, json)
Hash identifier: GInqDfBJVCYIoer6Z3x+TwrZwtonmNX8mALGI/EaZi4=
Subject key identifier: 15:7A:F4:7B:A0:C3:20:66:9F:5B:CA:BA:D3:E6:17:27:7C:6A:24:91
Authority key identifier: CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
Certificate issuer: /CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Certificate serial: 0196C3B9BB77FAC2F14606E24D267ADBCF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
Manifest number: 14CC
Signing time: Mon 12 May 2025 09:00:51 +0000
Manifest this update: Mon 12 May 2025 09:00:51 +0000
Manifest next update: Tue 13 May 2025 09:00:51 +0000
Files and hashes: 1: GXWE9o3Md3OnmirO54Ws7kdTmag.roa (hash: VqWImb5tQTrzcpmc6cZTpWy2Q4m6hTduUqRabtaq5to=)
2: zsR4iytpLHEDscueFhf4s2aRDxM.crl (hash: /mNu8pZAqkL1Z5cO3Zt3OCBPf8NlVnexYpST1TP/q1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:bb:77:fa:c2:f1:46:06:e2:4d:26:7a:db:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec4788b2b692c7103b1cb9e1617f8b366910f13
Validity
Not Before: May 12 09:00:51 2025 GMT
Not After : May 13 09:00:51 2025 GMT
Subject: CN=157af47ba0c320669f5bcabad3e617277c6a2491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ed:c0:90:a7:c4:18:33:6b:00:4d:a7:e2:45:
d1:82:c5:60:55:df:b1:d5:d4:21:51:d5:ef:a3:8a:
a9:c5:7c:f2:a5:51:e7:e5:ca:5b:3a:c9:07:77:51:
cd:25:d5:3c:76:ad:7f:f6:45:00:6e:42:4b:46:40:
73:5b:45:c6:ab:1a:33:3e:22:79:85:0c:f1:ad:16:
4f:de:f2:0d:c2:12:68:01:d7:ca:6f:e2:06:ec:ca:
c9:e8:61:f7:9a:23:2d:c1:64:12:cd:8f:55:93:74:
4e:da:01:ad:e7:16:c3:4b:47:6f:17:d0:0e:21:22:
0f:36:94:55:24:47:e1:34:1f:60:55:2f:13:64:c6:
e1:01:73:f5:a2:72:e9:2e:0e:43:48:b8:51:83:09:
0d:6f:39:c3:48:d6:ad:10:1e:47:af:b3:3c:40:5c:
b4:32:7a:a0:06:7e:0d:41:39:2e:f3:5f:8e:a4:e4:
0e:7e:7d:67:5a:82:cb:27:0c:5c:7a:4e:1a:26:b1:
f2:32:53:0d:2a:5d:65:d0:a0:8e:2d:49:52:38:93:
88:e2:bb:34:7f:11:a0:65:23:7e:03:1a:8f:ba:08:
24:ac:3f:79:87:e7:17:97:cd:11:19:1b:c7:b2:a3:
58:85:2b:c8:6c:1f:07:d0:9d:c4:be:2f:12:ce:c5:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:F4:7B:A0:C3:20:66:9F:5B:CA:BA:D3:E6:17:27:7C:6A:24:91
X509v3 Authority Key Identifier:
keyid:CE:C4:78:8B:2B:69:2C:71:03:B1:CB:9E:16:17:F8:B3:66:91:0F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsR4iytpLHEDscueFhf4s2aRDxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a091-8550-43c6-8a0c-c682b5be0e53/1/zsR4iytpLHEDscueFhf4s2aRDxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5b:e8:23:ea:eb:f6:63:4a:e3:e9:44:ef:55:0d:f6:e1:89:
3c:e1:ea:45:fd:07:b2:a7:62:1d:63:0e:37:25:83:32:40:0e:
8b:b9:ee:22:95:81:fe:27:77:e6:4a:28:f2:97:cc:9a:04:df:
33:b2:40:9a:e4:77:f5:7e:c0:9e:33:9d:88:36:62:8b:fc:ef:
52:ee:12:b1:dc:d0:61:52:36:8d:cd:5b:73:2f:8e:8c:9a:eb:
a7:74:c4:42:65:31:a0:2e:17:0c:33:0d:7d:43:3d:28:39:78:
7a:b6:47:ad:75:d1:85:ab:22:41:26:28:44:8a:e7:94:c9:13:
53:42:4e:30:f7:fa:db:18:65:23:5d:cf:e9:d0:7c:bf:c2:82:
09:c6:df:d1:80:c8:88:82:0d:ca:60:99:b2:52:c8:85:03:c6:
96:5b:9a:ba:43:52:44:cf:73:9a:7c:cd:13:82:5b:47:f4:19:
06:3a:db:cb:e3:e4:95:9f:9f:d8:1f:a5:21:2a:98:35:75:25:
8d:d9:df:ea:1a:a9:e8:3e:1d:2b:ca:ba:7e:9c:05:f0:66:48:
ce:a8:3c:8a:73:10:2e:f7:59:aa:47:2e:c4:25:b9:2a:4f:98:
63:22:48:9c:5e:a3:d2:b6:3e:86:ab:17:4c:28:0b:85:a3:19:
8d:8c:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:05:02 2025 by rpki-client