Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
File: zpeYqNqZmd31OjyNOPNvF-zUVDI.mft (raw, json)
Hash identifier: Lcfni6Adk7wBkpKZR6qelBxqS5NIkGu/f6ht6LwbGps=
Subject key identifier: 00:4B:3A:81:FD:16:55:4E:4F:3C:04:88:28:93:3A:24:AC:B6:81:F2
Authority key identifier: CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
Certificate issuer: /CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Certificate serial: 01969F763CF3A75062780A07768C0DC8639C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
Manifest number: 0B8D
Signing time: Mon 05 May 2025 08:00:48 +0000
Manifest this update: Mon 05 May 2025 08:00:48 +0000
Manifest next update: Tue 06 May 2025 08:00:48 +0000
Files and hashes: 1: pIpJ8fNC27Y24CDWefynJuipkU4.roa (hash: 6TIE6c441FOI06dUbKpONLjnig+SLG5qUyYpphuhQRA=)
2: zpeYqNqZmd31OjyNOPNvF-zUVDI.crl (hash: gOoeGhzqSY3u6vG8ofF5n9AtI1HqnlNF38UcpNfkW18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:3c:f3:a7:50:62:78:0a:07:76:8c:0d:c8:63:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9798a8da9999ddf53a3c8d38f36f17ecd45432
Validity
Not Before: May 5 08:00:48 2025 GMT
Not After : May 6 08:00:48 2025 GMT
Subject: CN=004b3a81fd16554e4f3c048828933a24acb681f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9f:0e:e6:d1:f0:b6:78:75:f5:fc:25:c8:bb:
c5:95:c9:29:b6:85:e2:87:30:6a:c0:2f:c8:59:5f:
01:e6:d2:07:0c:8a:79:a8:f5:5f:be:dd:ad:03:67:
d3:8b:0e:f6:fc:6c:96:55:c6:88:fa:53:6f:9d:89:
5b:ad:7f:22:c4:62:36:96:79:d1:c9:a8:62:13:e4:
f6:6d:93:dc:81:7f:54:99:c7:ce:89:21:3a:5b:6d:
55:2d:2d:d3:f8:73:b1:51:b7:fd:ae:4f:7c:c3:82:
45:cf:a8:bc:e5:c8:53:5e:91:02:ea:a0:25:b5:e8:
0c:44:e4:d6:59:fa:88:9d:a4:70:28:bf:f7:d8:99:
ce:16:3c:9d:0b:f9:9c:e1:fc:32:cb:e0:8c:33:94:
d7:da:b5:5a:83:ec:cf:18:05:f5:27:8e:84:59:2f:
3a:50:a2:6d:3f:57:99:9c:6c:2f:c9:51:5a:89:65:
33:6c:92:42:05:a2:eb:b9:48:a2:78:a3:31:d3:ed:
3b:b2:61:42:d4:13:f5:e6:4c:93:02:23:6f:00:e6:
d7:7f:4f:c3:4c:82:be:32:93:62:0b:f0:9f:60:d0:
79:3f:7f:62:fd:a4:f9:a4:91:bb:3f:48:4f:b8:54:
b7:de:58:6b:c3:cf:3b:bc:b2:9f:20:eb:70:e8:17:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:3A:81:FD:16:55:4E:4F:3C:04:88:28:93:3A:24:AC:B6:81:F2
X509v3 Authority Key Identifier:
keyid:CE:97:98:A8:DA:99:99:DD:F5:3A:3C:8D:38:F3:6F:17:EC:D4:54:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpeYqNqZmd31OjyNOPNvF-zUVDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc864-718c-4217-ab5f-98fcb3a8bc9e/1/zpeYqNqZmd31OjyNOPNvF-zUVDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:93:c3:15:31:e4:63:85:b4:85:9e:ce:86:e7:44:73:a6:7d:
5f:1f:c1:4d:8b:88:2c:84:b6:f3:76:29:7f:df:c4:f3:07:82:
dd:1e:18:e2:03:df:25:a1:b0:a1:50:6c:88:b3:c9:e1:39:08:
2d:1c:7e:82:ea:6b:94:ae:df:5a:27:c8:57:b0:4d:56:8d:75:
57:cf:5d:36:d3:0e:d4:45:df:9d:47:24:e9:c2:0c:b8:52:22:
7d:75:b2:d7:bc:33:0b:95:71:94:d4:41:ab:c8:89:a7:d9:d8:
b1:45:47:8a:09:12:18:6a:eb:da:f4:68:62:86:7e:e9:e8:39:
38:aa:37:28:2e:c2:1b:8d:e6:06:00:c5:02:c2:22:a0:cf:15:
a6:57:16:33:1c:dd:62:32:43:2d:61:e4:6b:73:35:2f:54:59:
e8:fb:71:c3:83:2f:dd:15:29:b4:a5:3b:db:28:a9:7f:2f:a2:
b0:5d:6a:c2:5c:88:db:bb:4b:27:1e:21:f2:c0:b7:f1:62:7f:
d7:af:b3:dc:06:fa:1e:d1:eb:e3:63:69:07:13:e9:ec:02:f5:
db:a7:b6:1d:40:fb:6c:dc:7a:c3:ae:95:5b:b1:98:17:fd:2f:
93:24:cc:ba:09:09:cf:da:ac:18:c8:79:5b:76:e4:40:d9:52:
91:f1:46:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:00:44 2025 by rpki-client