Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: LUjx5nhWt7+3jKqkoP9Dn4ElHK5fE45K/BIEffXFmL8=
Subject key identifier: 1A:F4:DB:CA:1C:F0:5B:EC:1C:53:06:51:6D:87:42:F9:61:2E:1B:D6
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 0196B36A5CDB7FCEA9E600B180F5D5C57CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 0511
Signing time: Fri 09 May 2025 05:00:14 +0000
Manifest this update: Fri 09 May 2025 05:00:14 +0000
Manifest next update: Sat 10 May 2025 05:00:14 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: Ux+JGA4S3upNW4udGcLWqNCxYjciT3SNydRPZoU1vZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:6a:5c:db:7f:ce:a9:e6:00:b1:80:f5:d5:c5:7c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: May 9 05:00:14 2025 GMT
Not After : May 10 05:00:14 2025 GMT
Subject: CN=1af4dbca1cf05bec1c5306516d8742f9612e1bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:bc:2f:58:6e:ca:06:8b:44:f3:f4:76:5b:
54:ab:60:01:ef:ff:53:25:f5:7c:04:16:85:b0:5f:
9d:78:6c:1f:8d:c7:35:34:5c:69:74:ff:9d:8b:9a:
02:a4:b6:a8:ad:ac:37:a3:c3:19:74:38:c2:cc:66:
2a:53:fc:6d:b8:a9:d6:97:68:e1:ff:f8:40:12:08:
4e:46:c7:ca:a9:6f:97:57:bd:d8:f8:1f:06:f7:3c:
7c:5c:51:64:87:9e:2f:1a:a2:9f:cd:03:74:f7:be:
51:65:8e:28:85:5e:61:d2:78:2e:2f:65:3f:54:59:
fc:37:d0:b7:a3:82:15:d3:ae:2b:c7:3b:e2:b5:0d:
11:1c:01:94:f7:5b:3a:9c:18:51:13:ec:e1:4e:04:
5c:7e:8c:3a:89:8b:46:54:02:77:71:43:8c:97:15:
1b:82:7c:b7:8f:9a:19:a6:a8:33:96:8b:e3:47:ec:
59:2a:aa:cb:3f:80:ac:cb:00:9e:c5:69:92:e4:dc:
67:9a:75:9f:58:eb:42:33:42:03:41:65:e8:9f:ea:
f4:01:d9:1a:c4:96:cf:ea:33:30:11:10:0c:b9:98:
c1:9b:5d:be:0a:75:d2:19:c6:d5:30:3d:f2:b7:61:
94:78:ad:26:63:1d:66:9f:01:38:0f:ef:88:30:29:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F4:DB:CA:1C:F0:5B:EC:1C:53:06:51:6D:87:42:F9:61:2E:1B:D6
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ba:83:c1:a8:dd:b0:b1:93:0a:6b:1a:93:98:ab:a7:be:61:
6a:0f:85:1a:47:ee:cc:11:0f:13:bc:4d:b8:33:2a:7a:b3:97:
71:33:d9:47:ee:17:bc:92:7c:bb:8f:af:77:e6:c7:2c:3d:a6:
14:f1:12:a4:cd:05:7c:d7:dd:53:66:18:16:dc:85:6d:7a:2c:
21:00:23:e4:28:a4:fa:04:8f:14:5a:a4:e8:64:54:94:af:35:
de:d0:fe:02:bc:39:48:3c:aa:7b:3d:b3:39:97:21:51:a0:82:
75:fd:14:48:1d:ff:10:01:ea:31:f8:df:56:6f:36:74:13:50:
d6:84:61:7d:cd:97:3d:53:c9:35:ab:97:7d:14:f4:99:90:18:
16:87:33:47:18:28:62:b1:0a:6f:26:98:90:0c:40:d6:95:b4:
4c:06:3b:dc:ea:fa:7a:6d:1f:3a:85:b3:75:c1:95:49:6f:93:
78:4d:cf:5a:9d:4f:35:8a:ea:e2:c0:ca:1c:3a:d1:18:17:3b:
c0:bf:95:4f:6a:be:3e:99:1d:31:80:e7:7c:8b:a2:23:ff:23:
41:de:63:0e:b9:4e:b7:1f:0d:71:1d:7d:43:43:ae:25:92:8f:
0b:a5:d6:61:59:04:4f:4b:98:74:05:3d:67:e6:0f:5c:34:3c:
04:2e:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:41:23 2025 by rpki-client