Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: PbjDyHfawtjp87eHQdBX78fgry/wFXe23vhXaVSdeOE=
Subject key identifier: B5:F1:1C:E4:FB:D0:09:65:6E:DE:E2:3C:1E:EB:9E:02:86:05:E5:32
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 0196BB5B577C228CD7847ECA835AB913A591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 18:00:47 +0000
Manifest this update: Sat 10 May 2025 18:00:47 +0000
Manifest next update: Sun 11 May 2025 18:00:47 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: pL/gNXw0W0AAsg1KmGpdy3Skw5wvy+kF+wBbqS9AlU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:57:7c:22:8c:d7:84:7e:ca:83:5a:b9:13:a5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: May 10 18:00:47 2025 GMT
Not After : May 11 18:00:47 2025 GMT
Subject: CN=b5f11ce4fbd009656edee23c1eeb9e028605e532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:c3:89:75:88:7f:a6:e1:cf:39:24:7a:5b:
f0:85:08:a6:ad:0a:e0:a6:f3:e2:3d:a5:90:b3:60:
79:8e:42:8b:85:3a:88:b1:b5:85:b9:66:2a:04:56:
58:63:7c:d3:26:2f:d3:d9:f0:85:13:09:db:15:2a:
4b:ed:88:22:1b:c7:42:fd:68:32:7c:79:9e:c5:66:
83:2e:15:a2:e5:54:cc:85:11:b7:21:56:67:67:35:
18:a7:e6:10:26:86:d2:22:ef:d6:5e:1d:df:a9:2b:
74:26:c9:b6:26:65:01:0a:6c:5e:66:74:e6:4b:00:
21:2b:9c:de:97:a4:59:82:0a:f1:8a:24:c4:5b:32:
66:a2:fd:8c:51:73:2c:d5:be:e7:0d:f4:e6:c6:c0:
fd:4f:ad:57:fa:bf:eb:48:44:23:1b:bc:15:7e:cf:
be:31:9e:a4:2c:b6:33:ff:4e:09:da:44:db:b5:75:
12:83:f0:64:0e:11:3a:fe:12:43:a8:d8:65:b8:32:
0a:08:ac:34:25:4a:38:9e:02:79:02:36:4b:e1:fa:
bc:8d:3c:a9:ab:64:74:89:f8:64:dd:26:76:4f:46:
e1:e9:67:45:cc:75:ae:52:b8:57:74:7b:10:1a:b2:
1e:46:21:de:e5:a1:e6:a5:3a:40:c5:f6:a4:99:2c:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F1:1C:E4:FB:D0:09:65:6E:DE:E2:3C:1E:EB:9E:02:86:05:E5:32
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dc:c7:d2:68:c9:20:c8:00:f5:56:b2:c4:68:a7:a6:92:16:
20:ea:7b:5d:f7:fb:bb:a5:3b:6c:53:6d:44:4d:30:b3:48:07:
ec:29:d9:bc:41:f9:8e:e4:22:e7:89:2e:3f:c3:4f:bf:bc:82:
c1:3d:64:0a:b4:07:66:38:fe:b6:08:0c:8d:14:50:8e:23:6b:
e8:0e:3d:43:d4:9f:48:98:5f:f2:48:9f:61:04:d9:12:83:4b:
96:68:a7:75:81:a4:0e:12:37:e3:6c:e0:1d:8a:fe:f9:46:c6:
76:31:27:57:e7:70:c6:65:ff:cf:97:47:53:9b:05:63:6f:6c:
c0:69:09:fa:91:99:57:67:7b:1c:b3:94:3d:6f:a0:02:80:58:
c0:39:15:4f:f0:56:e7:8a:81:23:ce:a5:ad:4a:f8:63:cb:59:
c8:16:1d:b5:d8:eb:93:48:09:15:77:8f:5e:0d:c8:9b:2a:58:
9e:ad:d8:d5:7e:e0:50:23:50:4a:76:64:77:fb:63:b8:00:be:
6a:b1:34:7e:d1:16:b6:72:72:72:03:c6:f9:35:fa:b8:39:ed:
c2:a5:06:7b:fe:01:4c:84:bd:6f:e4:16:05:76:d8:7c:20:54:
f0:d6:ba:a9:02:48:c8:ad:20:60:3d:71:1b:07:f0:80:c1:87:
8e:54:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:57:59 2025 by rpki-client