Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
File: ZePmyEfHm7BarCTUF4F41vfARIU.mft (raw, json)
Hash identifier: p7kX+FA+DxDzjbHRI/GqXqcZt232do3+6PiiwzPcrcM=
Subject key identifier: 23:5D:20:C1:7F:FE:FF:D4:06:56:25:94:5C:BC:FD:F3:35:6F:A4:50
Authority key identifier: 65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
Certificate issuer: /CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Certificate serial: 0196B145AD1A12D01A8B1D69FF06F1775E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
Manifest number: 01CB
Signing time: Thu 08 May 2025 19:00:55 +0000
Manifest this update: Thu 08 May 2025 19:00:55 +0000
Manifest next update: Fri 09 May 2025 19:00:55 +0000
Files and hashes: 1: ZePmyEfHm7BarCTUF4F41vfARIU.crl (hash: 7t6F/RA5PnEBMYdcPOpnFsnk7nasQp1rMl6qnNc+Wfg=)
2: _G6b2YObaO8vXwxmRAdxtdM520E.roa (hash: 1ZvsYB4M9L/iBBRu/0d0SPNVtbn8DNDppTZnbpT7L4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:ad:1a:12:d0:1a:8b:1d:69:ff:06:f1:77:5e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e3e6c847c79bb05aac24d4178178d6f7c04485
Validity
Not Before: May 8 19:00:55 2025 GMT
Not After : May 9 19:00:55 2025 GMT
Subject: CN=235d20c17ffeffd4065625945cbcfdf3356fa450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:4f:03:ae:51:36:10:8d:85:fc:53:09:cf:
48:ad:63:bb:6e:aa:60:3a:63:45:29:ea:a9:e4:21:
5e:c6:8b:7d:45:11:35:0c:2b:05:a6:2e:36:73:fc:
be:90:1d:fa:c4:83:82:4a:6a:0c:9e:44:10:5c:82:
a4:ed:f5:92:4f:48:bc:97:a1:09:77:4c:98:73:1f:
ac:67:86:ec:5a:22:44:ba:f7:d3:19:b4:52:3c:19:
c5:bf:52:19:16:aa:83:11:d6:a0:9b:85:df:77:41:
c0:35:75:e8:62:fa:7a:ec:0f:33:ca:f4:9b:ed:45:
e1:92:8a:97:47:9d:5f:64:c5:79:90:e7:7c:e9:ef:
41:67:07:39:41:19:51:5e:37:21:e8:7e:ba:f9:b6:
12:53:7a:c8:cd:af:1d:ae:b4:ba:c3:cb:07:30:1d:
53:48:61:c7:2e:c0:0c:08:fa:e0:ae:43:90:23:94:
75:ec:99:24:1c:8b:1c:8f:19:25:09:6d:ab:41:0e:
b4:00:80:f0:02:eb:82:c5:40:ba:aa:ec:1b:cd:7c:
75:ae:e0:fb:ba:e2:0e:90:50:2a:7f:67:bb:59:96:
13:61:5a:4f:2b:f9:5e:86:87:98:7d:4a:70:60:e1:
71:06:a1:60:8d:3a:6b:a8:91:bf:cc:3e:63:cf:0c:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:20:C1:7F:FE:FF:D4:06:56:25:94:5C:BC:FD:F3:35:6F:A4:50
X509v3 Authority Key Identifier:
keyid:65:E3:E6:C8:47:C7:9B:B0:5A:AC:24:D4:17:81:78:D6:F7:C0:44:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZePmyEfHm7BarCTUF4F41vfARIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a38100-c760-48b8-8b3f-2f7bf704f74a/1/ZePmyEfHm7BarCTUF4F41vfARIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a2:c7:15:79:02:4b:02:af:eb:65:25:75:db:4b:68:0c:e3:
2a:9d:5c:93:98:17:e9:db:bd:c2:8e:d2:97:9e:97:52:1a:e5:
6b:6b:6b:00:f8:95:bc:b4:a8:84:8f:9b:e8:58:e9:de:f2:a9:
76:60:d2:e7:ec:c3:83:f4:d0:04:2f:f7:09:8d:36:6e:3e:99:
82:20:22:89:3d:c9:14:38:ba:4c:8f:ee:d0:dc:d2:84:70:33:
52:d8:7e:e0:88:35:f0:11:db:8c:a1:d4:a1:d4:f9:08:b8:b4:
5b:96:a6:f1:f0:d6:a7:0d:36:db:43:24:98:5a:d1:e3:da:4d:
0b:63:f4:d0:f7:31:14:dd:d7:b7:ef:a2:37:8f:ba:71:55:81:
af:92:c5:2d:1d:07:1f:df:28:75:26:b1:97:4e:49:79:06:92:
e5:f6:75:ad:fb:a7:d1:98:8c:3b:af:9c:a0:2a:96:6d:d3:34:
01:4b:41:01:f6:39:d8:2f:14:fe:a9:13:05:f8:c1:75:d6:6f:
1c:c8:98:4b:9c:38:93:18:bd:4e:b3:e9:aa:c3:ac:5b:cf:a1:
bd:20:e8:f3:d9:ca:ab:74:5c:4b:f9:26:05:c9:b9:83:55:29:
7a:52:a9:6b:bd:88:b3:e7:c0:f2:7b:41:57:cf:8f:8a:b7:17:
ef:cb:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:28:43 2025 by rpki-client