Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
File: zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft (raw, json)
Hash identifier: LN2TaRrsuaa2vGj1Ivywwvb2cvql2chRHjL5yHKvkys=
Subject key identifier: CA:4C:23:81:CC:3A:3A:86:50:B2:EE:C7:74:44:D8:E1:63:16:A2:0D
Authority key identifier: CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
Certificate issuer: /CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Certificate serial: 0196C2A6C6BAB2700E211A52F966203AD0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 04:00:31 +0000
Manifest this update: Mon 12 May 2025 04:00:31 +0000
Manifest next update: Tue 13 May 2025 04:00:31 +0000
Files and hashes: 1: WMmVXxLBNxJnZE-IVz74wBzTPGY.roa (hash: 8cKtSjQsmp93ydLLkC85Xv608/v/eBo4I+GY+4AHbek=)
2: zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl (hash: GvJhgdGTmdbElTkCtYA1c513hDsYXjPKWvKJmt8GNMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:c6:ba:b2:70:0e:21:1a:52:f9:66:20:3a:d0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf94814139e50cf0ad138f03dcc7f35b8b4dfb4
Validity
Not Before: May 12 04:00:31 2025 GMT
Not After : May 13 04:00:31 2025 GMT
Subject: CN=ca4c2381cc3a3a8650b2eec77444d8e16316a20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:86:37:25:e0:40:4f:35:1d:b0:a9:0d:44:
bf:01:0d:0e:44:d1:82:10:79:95:a3:40:2c:ec:7c:
e0:49:d9:cb:59:64:27:84:a0:d5:86:88:77:03:e9:
09:e6:53:9f:cc:29:63:17:21:77:08:cd:16:f9:22:
58:ed:b6:6f:9d:5b:6e:a7:7b:f8:78:e5:ac:1f:64:
cd:5c:ab:96:a0:61:49:4c:ac:8f:96:fc:66:4c:77:
b7:6d:b5:d1:2d:e6:62:c3:3f:8b:f7:33:37:65:ff:
6c:9d:f5:22:51:0d:4d:86:31:14:90:78:35:23:dc:
e2:96:b0:db:f5:73:3c:57:f9:1a:fd:20:78:26:36:
fa:d3:d5:84:e6:70:4d:db:b3:36:04:3d:49:ea:1f:
32:0a:5f:93:ce:b8:be:bd:ae:84:f4:6f:11:c9:e9:
a1:0d:df:0e:1a:8a:d7:11:ae:21:d3:62:f0:c9:2d:
75:f9:84:a0:ad:e4:b4:78:e5:11:21:9f:b9:9d:c3:
4c:8d:d4:0d:84:b7:6e:8e:da:ad:6e:ed:5e:84:b6:
31:cd:89:a4:33:11:a7:ee:d4:aa:fe:a5:92:97:7a:
fe:23:a7:1d:58:fb:40:b1:82:81:be:a3:42:fb:4f:
b0:cb:f4:83:72:6a:0b:4d:c3:66:96:82:c5:99:e6:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4C:23:81:CC:3A:3A:86:50:B2:EE:C7:74:44:D8:E1:63:16:A2:0D
X509v3 Authority Key Identifier:
keyid:CC:F9:48:14:13:9E:50:CF:0A:D1:38:F0:3D:CC:7F:35:B8:B4:DF:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPlIFBOeUM8K0TjwPcx_Nbi037Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c008-dfdf-47ba-a7e6-25eded73fc70/1/zPlIFBOeUM8K0TjwPcx_Nbi037Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:44:86:43:03:a8:00:59:e7:dc:c5:48:2f:40:74:89:59:ef:
d1:50:3e:5f:d9:7a:94:6f:7a:66:af:20:21:64:36:af:48:9e:
9e:a2:6d:0a:c7:34:b6:8b:c1:8f:f0:78:a4:9b:ca:73:44:db:
1e:fa:73:77:5f:1f:c0:f2:5a:7f:61:49:92:43:a8:c4:57:ec:
b1:fe:96:64:3b:bf:22:46:65:fa:8a:f6:6b:b8:97:d7:95:2a:
91:cb:07:e6:32:f1:a1:78:37:7a:cd:33:43:9b:f0:d5:a6:78:
75:dc:b6:0d:dc:cf:7f:44:42:94:b4:0c:9a:d5:b4:d0:1b:bd:
9b:6f:33:26:ec:30:9d:b8:e2:fc:5d:e9:f0:37:a9:81:cf:09:
8b:6b:49:6a:0c:3e:91:74:80:a8:32:76:80:ce:bd:ae:25:2f:
28:c1:1d:47:db:47:9d:08:b4:a7:95:e1:66:79:13:6d:7b:22:
33:e0:43:ef:d8:0d:78:b7:92:0c:7a:86:64:ac:82:1a:4a:ee:
a7:30:b6:8d:86:db:ae:e3:97:1a:aa:22:b6:99:03:7b:3f:5a:
79:80:1d:8b:36:a9:bd:fe:3e:9b:6a:5e:df:9b:36:b2:8e:ba:
b1:c0:55:f7:77:06:08:00:66:3b:72:1b:d4:b1:a3:4a:5e:47:
78:0f:08:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:39:00 2025 by rpki-client