Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
File: zjfKOryl4UrBG8fzwVYqZNY5HSI.mft (raw, json)
Hash identifier: vcWkTdFiiG74c0t6xyDsJkODXBfP9+l6C88yLr0/K8k=
Subject key identifier: 78:CA:8E:BE:AC:0A:93:8D:8D:32:32:68:7D:BA:F3:CB:13:08:97:7E
Authority key identifier: CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
Certificate issuer: /CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Certificate serial: 0196C5A86CE4793EF81ED2E49D93BF3718CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
Manifest number: 1478
Signing time: Mon 12 May 2025 18:01:11 +0000
Manifest this update: Mon 12 May 2025 18:01:11 +0000
Manifest next update: Tue 13 May 2025 18:01:11 +0000
Files and hashes: 1: 8kC1dXQut3Q7aEZLq-H6wHv58Nk.roa (hash: wdoh4a7LDX/nFwYQadnYTEwY/jj86xKk/h3rcKaZa3Q=)
2: T24HRLbgJbROlTALREch3AOYbaE.roa (hash: Wevs9VKSENwQtnqRkxhumLN/kRDIgG1A0UE3XstajKA=)
3: zjfKOryl4UrBG8fzwVYqZNY5HSI.crl (hash: 0eIx+QxkID5rrIumP8D3k6eyIHMqbw6yLKdAxwcmu9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:6c:e4:79:3e:f8:1e:d2:e4:9d:93:bf:37:18:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce37ca3abca5e14ac11bc7f3c1562a64d6391d22
Validity
Not Before: May 12 18:01:11 2025 GMT
Not After : May 13 18:01:11 2025 GMT
Subject: CN=78ca8ebeac0a938d8d3232687dbaf3cb1308977e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:43:46:0d:8e:3a:92:06:2a:5e:5c:65:ca:
3d:9e:e8:02:33:f2:12:33:33:70:54:51:96:f6:c6:
ab:41:07:98:99:b6:68:e9:18:fa:04:77:08:29:9b:
bd:42:2e:e5:38:c7:70:8d:d4:68:52:ab:d6:97:8d:
61:05:84:29:a4:97:6a:d9:c2:0e:56:b1:6e:42:d5:
d9:c3:27:90:c7:07:02:04:d0:5e:ce:cd:d0:9d:8c:
98:ff:f1:f4:8d:69:dd:eb:7b:78:eb:d0:76:2a:a6:
b3:36:52:33:2a:4a:5c:80:6a:01:38:93:b5:07:e1:
7c:40:b9:11:55:77:0b:c5:a5:c1:68:42:b2:df:9a:
75:35:51:da:63:f6:c0:6f:34:bd:6e:92:9d:77:51:
95:c0:1e:8e:68:d4:11:f2:cb:71:ec:32:b3:9d:68:
35:bc:3b:ad:27:92:86:fb:eb:e8:db:b2:32:ca:42:
98:91:cb:4f:aa:1b:61:11:60:b4:e3:30:db:91:72:
7e:97:48:9a:8f:37:ab:6b:80:fe:a2:9b:68:87:ce:
28:32:63:59:5e:54:98:eb:18:70:11:9b:b0:c2:b5:
3d:8e:cc:23:0f:03:40:12:da:cc:11:c1:b4:a9:7b:
89:0b:3f:19:25:c8:54:01:36:69:17:c4:b2:37:4a:
bb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CA:8E:BE:AC:0A:93:8D:8D:32:32:68:7D:BA:F3:CB:13:08:97:7E
X509v3 Authority Key Identifier:
keyid:CE:37:CA:3A:BC:A5:E1:4A:C1:1B:C7:F3:C1:56:2A:64:D6:39:1D:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjfKOryl4UrBG8fzwVYqZNY5HSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/be66bf-561c-4d55-826d-038035d80c0b/1/zjfKOryl4UrBG8fzwVYqZNY5HSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ad:3d:71:d4:f4:44:f8:81:ae:94:90:e9:f5:d5:45:86:32:
b1:f4:62:06:52:61:78:dd:a2:3e:77:b4:82:75:df:34:a4:75:
fd:c8:c7:c3:77:ae:0f:74:68:be:3a:49:d8:cf:7a:c6:2d:8d:
20:49:3d:6d:82:59:04:34:14:f8:4c:97:10:21:da:05:2b:76:
28:46:c2:56:5a:56:82:18:5e:fe:7b:8b:ff:8d:b0:31:db:06:
4c:02:c7:b9:82:b4:9b:17:3d:a6:5e:78:b2:7b:07:ea:16:07:
3e:a5:23:a2:b2:84:2c:ad:bb:82:b8:2e:d8:b3:99:a0:85:b6:
d3:7c:f1:71:9d:63:0b:fe:e6:d4:a1:e9:4e:f8:6c:a5:62:87:
9e:e4:ea:1b:83:78:a6:a4:5a:3e:87:1c:65:a4:8f:20:33:a4:
0b:33:9b:d8:d3:8f:43:73:82:db:45:b4:96:79:07:f6:05:e1:
30:b1:5e:ac:b6:f2:c0:41:77:b2:47:5d:f0:86:33:39:4e:a8:
fb:6f:50:61:04:4b:55:e8:7b:91:b3:ba:53:a0:0d:a4:88:23:
97:fe:46:98:73:46:8f:44:5b:4f:7a:85:c1:af:97:81:ac:37:
2d:d8:41:b5:a7:b3:df:2e:d3:b2:de:43:2a:2c:7f:06:0c:ea:
13:4d:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:50:38 2025 by rpki-client