Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
File: zahD6BKxbexgu3CYykEzEX24R00.mft (raw, json)
Hash identifier: q7t+x+ZjvF7hD1Jax7hDvQ6Fvpwvbddf0kzE711Xxs0=
Subject key identifier: D3:90:70:2C:78:CD:C3:C5:B4:EC:F8:64:D6:6D:D7:68:3D:60:EB:5F
Authority key identifier: CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
Certificate issuer: /CN=cda843e812b16dec60bb7098ca4133117db8474d
Certificate serial: 0196C270053585001170237ECEF2B97B4EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 03:00:43 +0000
Manifest this update: Mon 12 May 2025 03:00:43 +0000
Manifest next update: Tue 13 May 2025 03:00:43 +0000
Files and hashes: 1: VJUoXBS9iPEfhSdXRvzqWIAuTX8.roa (hash: Nan6DQGHyzFA7VJDUyPb17ZowHybZxaUB4pA1mJmnaY=)
2: zahD6BKxbexgu3CYykEzEX24R00.crl (hash: lsuC93Zns2geVP0Yn9s180W+bPeQqtjhbn5nqvQcvTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:05:35:85:00:11:70:23:7e:ce:f2:b9:7b:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cda843e812b16dec60bb7098ca4133117db8474d
Validity
Not Before: May 12 03:00:43 2025 GMT
Not After : May 13 03:00:43 2025 GMT
Subject: CN=d390702c78cdc3c5b4ecf864d66dd7683d60eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:ba:29:6f:54:76:ec:00:77:fe:34:06:4c:
f4:ce:9e:d9:cb:d4:f7:81:d0:2f:f1:54:36:ae:ed:
e2:63:b6:e8:5f:df:f6:39:66:77:b0:24:28:d7:6e:
77:fd:2b:64:fa:cf:dd:16:96:7c:88:d6:57:64:86:
60:35:58:0e:b8:fe:09:85:65:7c:71:d4:a3:66:9a:
dc:ab:08:41:6d:b7:86:16:cd:61:2b:11:0c:ae:71:
74:f9:d2:f5:bb:fd:cd:3f:89:35:01:ec:3d:ed:34:
4e:03:f2:de:06:a1:01:0f:ab:af:f7:0d:d9:47:a5:
8f:72:61:21:50:5a:ba:cb:d8:a1:07:ce:6b:ad:75:
b3:11:56:64:28:f2:00:75:44:6c:f1:84:6f:ef:1d:
eb:cf:ce:32:fe:12:c4:80:fb:cd:5d:33:9d:24:ea:
be:12:fb:5d:ce:32:b2:26:cc:de:54:96:c1:cb:d6:
5c:a9:97:1f:5e:10:d2:0d:61:7d:d9:4e:67:ce:69:
48:b6:c7:28:aa:cf:e1:01:91:a4:ac:d2:16:12:e6:
41:d8:82:80:25:17:d5:51:ec:01:be:ba:91:b6:e9:
37:0e:6f:89:78:e6:92:99:8c:80:19:52:44:b3:9c:
53:a8:fd:3f:54:dc:c2:08:bf:75:ab:b9:75:02:21:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:70:2C:78:CD:C3:C5:B4:EC:F8:64:D6:6D:D7:68:3D:60:EB:5F
X509v3 Authority Key Identifier:
keyid:CD:A8:43:E8:12:B1:6D:EC:60:BB:70:98:CA:41:33:11:7D:B8:47:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zahD6BKxbexgu3CYykEzEX24R00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8eb32d-f7e3-4a9c-aaa4-8421d781b03b/1/zahD6BKxbexgu3CYykEzEX24R00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a5:3c:9e:47:31:f3:1b:bc:3b:35:d2:42:57:c7:3c:27:af:
1e:fd:87:d0:d0:26:64:13:b0:a9:22:d7:fc:0e:ae:b1:41:0d:
91:92:c6:1b:c8:9f:6f:ab:fb:51:94:e4:69:bd:37:3f:35:86:
07:62:39:e4:84:eb:49:8b:66:af:93:2a:8e:86:cd:66:7d:da:
72:8c:59:a9:4d:56:ca:98:d1:89:c6:1e:7f:74:38:a4:d3:dd:
1b:b8:1d:74:dc:2f:5f:18:9b:e9:bc:93:f1:ae:c9:91:e3:77:
d6:20:71:22:b8:69:fb:90:dc:6a:87:00:a9:3f:7f:66:7e:1d:
b0:a3:7b:e5:4e:89:b4:69:56:50:2d:61:9e:91:5a:85:8a:d0:
02:85:0b:00:7e:ea:96:cd:65:47:ff:c2:e7:e1:77:72:87:68:
91:bf:92:b5:49:2e:eb:86:3f:75:22:26:68:cd:62:70:94:d8:
7b:5e:c2:61:fa:93:cc:ca:1e:f1:24:5d:6e:50:44:fd:85:00:
6b:f8:75:02:80:fe:f5:35:ff:82:3b:b8:19:bb:cb:85:8a:a4:
dd:6b:7e:65:eb:a5:b3:b8:26:f9:cd:63:86:20:5d:5e:c4:87:
17:28:4b:fa:a2:60:63:e7:aa:5b:4f:7b:39:5e:84:46:5c:e2:
fd:e4:c9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:33:40 2025 by rpki-client