Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json)
Hash identifier: RISnOYvYKwq2LMb2xiAyYENprYKsUke/U4NehbV9tcg=
Subject key identifier: F9:CB:EC:ED:1A:F9:23:9A:EA:A0:D5:C6:2F:0E:C7:3A:CE:37:53:44
Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Certificate serial: 0196C04ADD53A7C0960E5F4810D378D883C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
Manifest number: 0D01
Signing time: Sun 11 May 2025 17:00:53 +0000
Manifest this update: Sun 11 May 2025 17:00:53 +0000
Manifest next update: Mon 12 May 2025 17:00:53 +0000
Files and hashes: 1: F8CkVi3Azk4IP8l0xbj9A7utWT4.roa (hash: E5Iv0quJqPnudHATWcToHknlwXYMpaxnHvHdqASmVUA=)
2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: 7gJJnO336Axtxs9/+va5LE2RmhVmTw6gxTFSLUMPLwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:dd:53:a7:c0:96:0e:5f:48:10:d3:78:d8:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52
Validity
Not Before: May 11 17:00:53 2025 GMT
Not After : May 12 17:00:53 2025 GMT
Subject: CN=f9cbeced1af9239aeaa0d5c62f0ec73ace375344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:3e:8f:d5:ab:2d:6a:1f:d2:99:d8:85:56:e3:
67:49:d3:f4:32:33:c2:a5:14:bd:36:91:9f:f6:e6:
d7:b8:80:de:b4:79:4f:be:d7:98:bf:ca:b6:f6:62:
73:89:e4:bc:5a:f2:99:12:43:02:0f:5b:87:0d:5a:
36:0e:ce:91:cc:9c:73:bd:b1:1c:8f:93:e0:c2:8f:
62:99:e2:e6:4e:de:4f:f5:e1:21:38:d5:dc:69:1c:
77:c4:52:5d:09:0d:77:8d:ad:23:dd:d7:90:f8:7e:
d4:e1:b7:44:03:7e:e6:0f:1b:e4:50:63:47:80:f9:
cc:1e:76:65:5d:6f:cd:3f:07:19:0a:99:34:a1:f8:
b8:b3:cd:cf:e4:d1:7d:f1:1c:e9:bc:52:9b:4b:f2:
4e:30:ed:ec:4a:f0:67:9a:bd:5d:e7:d5:57:4e:b7:
80:bf:d5:f7:7b:bb:85:50:4b:12:1b:0b:70:0a:b8:
be:af:98:d3:e1:08:a0:06:d7:d5:06:79:02:be:c0:
7b:9a:eb:58:36:5c:6c:f9:46:88:17:39:72:31:a1:
e7:6b:5a:e3:8a:16:8a:61:06:6f:08:c7:97:60:e5:
bf:22:a3:0e:88:dc:00:36:99:c1:91:ef:2e:18:e3:
93:48:3c:4c:5c:69:50:10:4b:a7:d4:d2:bc:5a:7e:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CB:EC:ED:1A:F9:23:9A:EA:A0:D5:C6:2F:0E:C7:3A:CE:37:53:44
X509v3 Authority Key Identifier:
keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d9:48:e6:07:2b:a9:cd:c1:6f:4f:6a:a5:22:17:ef:07:4d:
7a:10:c6:73:45:04:d7:d0:42:e6:65:02:2c:b6:26:38:66:0c:
fd:4f:a0:fc:cb:66:33:7f:bc:d3:5a:5d:19:47:91:57:2d:54:
61:63:b5:96:11:4f:fe:80:13:c5:84:99:ef:0b:ec:da:55:9c:
04:25:37:f3:a3:33:83:c3:cd:a2:d1:79:3d:d0:8b:53:06:20:
a6:6a:a9:dc:50:4c:86:ec:6e:6b:16:13:e7:e2:c3:54:76:3a:
83:37:1c:f1:7a:ce:fa:fa:bb:0c:9d:03:50:9a:1d:eb:ca:b1:
c6:2f:b4:fd:ce:bc:17:f8:19:33:08:cf:e3:0e:27:2f:b5:32:
7e:16:5e:ef:ab:30:90:d2:fb:21:ba:ea:e0:68:38:97:91:97:
1d:e3:31:07:4e:8b:c2:b6:90:3c:0c:42:76:31:43:c9:3b:63:
1a:54:ab:0c:ba:93:dc:62:40:fb:2b:2c:33:b3:42:c7:53:1c:
ec:6f:48:b1:60:9d:13:82:d7:c9:bc:9a:31:3e:c8:a7:ba:ff:
e0:03:48:71:e5:1f:39:07:dd:ab:94:a8:df:b7:23:f7:65:18:
00:bb:a2:69:5a:d6:62:86:51:a4:04:df:4d:8f:b8:4c:2a:a0:
e3:84:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:23:59 2025 by rpki-client