Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File: ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier: bDaaGc1sPfjqpcCiSvd/ZjbG5kGumSJnLGhDjM2vX3s=
Subject key identifier: 04:21:03:DC:81:AE:E3:65:10:15:9D:2D:20:48:36:27:14:69:25:78
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer: /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial: 0196C0B88067D5E980FB41173D0524C1DA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number: 0D52
Signing time: Sun 11 May 2025 19:00:38 +0000
Manifest this update: Sun 11 May 2025 19:00:38 +0000
Manifest next update: Mon 12 May 2025 19:00:38 +0000
Files and hashes: 1: 7EbuG3-0BaX89LTHJW4crEKXOgE.roa (hash: JIvKyqKrpPXGWekxvpmbylJZltK1pz01V4vTqb0PGqw=)
2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: d8THlpZee41NM1fwhVvcE5mK7czMRv9pvsCurfnKdYY=)
3: o17-yma_5t9exYXoXM4y9yk2rGc.roa (hash: 21brSGZYsEDJcaoR6r/SPKw0TZMGaiZDGKvCII90PgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:80:67:d5:e9:80:fb:41:17:3d:05:24:c1:da:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Validity
Not Before: May 11 19:00:38 2025 GMT
Not After : May 12 19:00:38 2025 GMT
Subject: CN=042103dc81aee36510159d2d2048362714692578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:9d:04:55:8c:d9:16:09:ac:6c:96:2c:c1:
fb:5e:08:25:db:95:6c:bc:94:a7:36:b9:ac:e4:90:
4a:47:b4:5e:f4:c5:41:62:98:55:1d:db:92:00:99:
5e:50:de:21:d4:e4:f6:d0:5b:dd:76:eb:e6:dd:fe:
08:4f:43:76:2b:19:fc:64:a8:6a:fe:73:cc:a9:88:
99:d7:04:52:f3:2b:54:b2:e5:9f:eb:13:92:c6:e5:
fa:a7:08:f0:1b:7d:2a:98:10:bc:57:1c:5e:9b:7f:
2b:cd:79:ef:31:4d:7b:25:23:01:58:3b:3a:cd:ad:
05:69:8c:e5:9f:c9:08:b4:0d:76:bc:08:0b:0a:d5:
dd:4d:4c:64:c1:ec:8c:f2:21:ec:4c:31:6a:e8:15:
ec:4c:7c:8d:05:2e:38:30:53:72:2d:45:61:b2:ae:
a8:89:58:de:31:59:0e:8b:d0:37:24:ae:83:01:b7:
ea:97:e3:a0:4f:6d:8b:88:85:98:dc:e8:0e:fa:d3:
c1:23:f6:66:63:a0:36:7d:fe:85:87:57:75:82:b8:
b1:a1:c5:f4:e7:fd:e7:b7:2c:12:01:06:e4:0f:b3:
58:39:61:12:1f:0b:8a:02:21:ae:d3:70:bc:93:b4:
b0:8a:01:69:e6:c1:de:66:7b:c3:3f:cf:b4:6e:78:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:03:DC:81:AE:E3:65:10:15:9D:2D:20:48:36:27:14:69:25:78
X509v3 Authority Key Identifier:
keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c8:6e:67:19:74:d2:86:d1:eb:ff:53:5d:98:32:0c:cd:43:
77:d8:1b:a8:5d:41:8c:b6:bc:d7:08:45:ed:43:f3:ac:e9:93:
c5:29:b7:e3:26:fb:9a:2e:08:36:59:a4:54:80:fb:aa:d0:e7:
2d:ba:48:a3:e8:87:f1:f7:a5:20:4e:96:51:90:5d:33:46:be:
4a:c9:22:b4:34:4c:15:f5:fd:4c:ee:f2:f2:59:1f:b7:3b:19:
e3:87:c4:84:eb:6f:e2:dc:cc:d7:f5:c2:30:39:19:a6:4b:56:
ae:df:44:7a:6c:7c:0d:b0:c7:b7:12:0f:4a:4e:e8:d2:74:7e:
f4:78:e6:ac:89:e2:a9:7b:06:de:bb:db:19:0c:95:d4:2f:6c:
7e:44:85:8f:74:2e:34:78:89:b6:17:42:3d:55:9d:02:11:0f:
8d:21:d6:41:f7:7c:8e:e7:6c:40:98:04:85:58:ff:6d:25:f3:
34:79:97:80:ab:38:0b:16:25:5a:74:e7:0d:72:c1:1c:90:47:
b2:83:4b:58:3e:af:f4:2c:28:9a:18:fb:ac:2c:2e:25:a1:2f:
ab:31:a0:a3:be:c9:09:22:66:20:d7:64:da:8e:83:71:2b:ce:
cb:66:c2:73:7d:92:3e:5e:db:e7:54:c8:e9:d9:d9:e5:ca:97:
6c:3b:3f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:31:07 2025 by rpki-client