Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
File: ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft (raw, json)
Hash identifier: E0RjsM5I6AfkbZ5HMhNihz7KptCWK5PCiPqtLQ6N1zg=
Subject key identifier: 57:79:49:A2:21:DC:83:E7:80:80:E2:DA:47:91:6B:59:68:5F:68:E8
Authority key identifier: 64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
Certificate issuer: /CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Certificate serial: 0196A91E4F04F4BA24661216B718E35A570F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
Manifest number: 06DE
Signing time: Wed 07 May 2025 05:00:57 +0000
Manifest this update: Wed 07 May 2025 05:00:57 +0000
Manifest next update: Thu 08 May 2025 05:00:57 +0000
Files and hashes: 1: Evho_cMgUimufNWmo89VlB8ZA3M.roa (hash: 2vAp0+W0OyinQ7bz3KRWYoOM0rGntzBMfgwLVb6cFF4=)
2: GmmTJrDnl5l4oNm96pmFHnUTmtw.roa (hash: pwolnRd5ZwHSnC/gP9Agf6nFawzcw4azMTiVm2n1TBU=)
3: OTa2_ClY6w9bRnknrGzz6ZpLbY0.roa (hash: auzCJAX6dLQz9Niz6mEEUMnopgCP2rrZW6Motu990Ng=)
4: ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl (hash: EnsUWUNGZTZdPfbyu+gDqQMhwbNeo3quEKsikOlizQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1e:4f:04:f4:ba:24:66:12:16:b7:18:e3:5a:57:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6416bc721c740c10fc7b0d8b1b358a2d35f488b7
Validity
Not Before: May 7 05:00:57 2025 GMT
Not After : May 8 05:00:57 2025 GMT
Subject: CN=577949a221dc83e78080e2da47916b59685f68e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:28:b9:3e:3c:b7:c1:10:2c:b3:e4:00:be:
b3:ac:7a:0d:37:e2:65:07:e7:1b:c7:f0:a9:01:9d:
27:62:bf:db:c0:57:16:99:f4:4d:92:e1:0b:bc:4d:
ac:d9:a4:5a:79:e5:d2:57:ea:05:d7:e3:b1:ce:8e:
f5:fb:91:99:17:c8:c3:c8:24:aa:49:84:de:20:d8:
0d:68:78:ec:be:8e:08:7e:c7:23:93:9b:c7:92:67:
14:7d:a4:e4:b7:dc:4e:b1:04:23:95:bf:f3:f4:74:
b9:8c:09:7f:c4:2a:c5:dd:47:ab:a8:2f:a8:d5:cb:
b0:14:40:db:4b:50:34:88:41:0d:6a:cb:e4:9f:f4:
9b:0e:10:ec:08:45:2b:46:ca:85:70:9a:4a:db:cc:
37:f4:59:23:1b:a8:a4:fe:9e:16:3c:84:0a:d5:8a:
e4:4a:70:16:d6:0f:6c:c5:31:52:40:6b:2b:27:3e:
5d:24:c9:2d:da:5f:63:73:62:7b:b5:61:bc:64:91:
fb:9c:c1:2a:9f:26:97:93:61:55:d7:1b:5f:17:61:
be:b2:a8:8b:a1:ff:24:6a:ab:08:56:f6:ee:20:ac:
8e:06:3c:eb:85:eb:b8:d1:c9:e3:2d:cc:00:2c:f2:
9c:68:61:da:c0:f5:42:f2:a8:2b:15:5b:11:08:2e:
50:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:49:A2:21:DC:83:E7:80:80:E2:DA:47:91:6B:59:68:5F:68:E8
X509v3 Authority Key Identifier:
keyid:64:16:BC:72:1C:74:0C:10:FC:7B:0D:8B:1B:35:8A:2D:35:F4:88:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBa8chx0DBD8ew2LGzWKLTX0iLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6db264-73d4-43ac-a97e-590b1b2a4609/1/ZBa8chx0DBD8ew2LGzWKLTX0iLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c5:d6:12:34:f0:ce:c3:71:39:23:c9:16:d3:4f:1f:16:f8:
18:36:94:3d:fc:b5:82:d7:6f:d7:31:59:72:3f:76:86:13:76:
ac:06:e3:c7:5e:85:1d:65:a0:8d:e5:93:05:2c:d7:f0:e0:c9:
fb:3a:86:ff:fc:67:41:fc:a3:7c:46:2a:d7:1f:97:5d:36:40:
b8:50:b2:53:eb:ef:a0:56:cd:cd:e1:19:c1:c3:0a:18:5b:c2:
e7:fe:51:18:aa:fc:86:c0:81:c0:5c:0d:3a:64:d7:a5:d1:8e:
04:8f:6a:c3:66:3e:3b:68:20:e0:d6:64:7d:20:b8:d6:de:74:
88:7b:27:97:63:01:0f:1b:a0:6e:6c:25:ea:10:64:20:3a:2d:
34:6e:03:db:2e:a6:8d:3f:3c:5e:7c:13:6f:03:7c:ef:0f:3a:
89:20:12:4d:fc:87:57:88:17:9c:7f:1e:31:d8:6b:ed:e2:53:
3f:fa:3d:6a:00:5b:34:13:4f:2b:3c:63:94:6a:1e:5f:2c:60:
3e:ac:18:28:0e:be:61:6b:44:7f:60:2d:6a:4e:0b:4a:64:fb:
be:44:87:db:3c:0d:06:a3:98:c8:a3:20:02:f3:85:40:af:a8:
ed:4b:64:c5:9f:7c:6e:f2:94:ee:78:2e:90:13:40:17:7b:62:
27:d6:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:31:56 2025 by rpki-client