Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft (raw, json)
Hash identifier: 1QPK6Av4yJMKGl0/rwiExCUJdJV6RB4x5BP1t95xwQ4=
Subject key identifier: AE:52:EE:07:86:6A:40:26:A6:49:CE:7A:96:A4:15:31:84:86:B1:3B
Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Certificate serial: 0196BC6E0304B9EB27CB60215F1891F4139A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 23:00:48 +0000
Manifest this update: Sat 10 May 2025 23:00:48 +0000
Manifest next update: Sun 11 May 2025 23:00:48 +0000
Files and hashes: 1: KB39bYqIMJokJ-KK1JHEqLNlJ44.roa (hash: phEsVyJYnJtq6yuZEFal91oSzWP2tqwsWq5VAN0UDT0=)
2: Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl (hash: YeKgm2M4EtumGuMsViaA5WcdDUz5cWPM5g4wlrGWiMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:03:04:b9:eb:27:cb:60:21:5f:18:91:f4:13:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Validity
Not Before: May 10 23:00:48 2025 GMT
Not After : May 11 23:00:48 2025 GMT
Subject: CN=ae52ee07866a4026a649ce7a96a415318486b13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a5:dc:6d:99:34:94:32:1a:d5:17:f3:37:dc:
5a:ea:31:db:13:3e:d9:6b:94:a8:2c:37:32:29:df:
f3:16:b7:06:c3:ef:f4:bc:07:42:38:42:72:96:09:
bb:f0:0d:32:74:fa:71:71:23:b4:06:15:a5:b9:2d:
fb:ab:7a:e9:56:12:7f:0e:10:b1:f4:c5:f7:95:8e:
36:ee:fb:a4:34:81:ca:85:d7:5e:7e:27:c6:56:fb:
46:36:96:69:81:fe:b4:7a:39:50:be:13:b6:cf:e1:
2c:a7:95:19:41:bd:eb:ae:81:db:b2:51:1c:a3:25:
6f:42:ef:a8:f1:72:f4:02:1b:1a:4e:45:2b:93:a5:
fb:15:01:0f:7c:c8:13:84:2e:e0:db:ee:27:6f:22:
33:1c:c6:fb:f3:5a:ad:25:64:3d:57:83:90:b2:51:
5a:f0:b9:c4:f2:2c:e5:fa:88:5b:d5:6c:c2:95:cb:
df:09:54:ee:42:6d:4d:64:8c:d1:8d:73:d1:d2:a7:
c5:79:8a:c1:b4:2e:d5:00:2d:43:4c:e2:5e:6c:cf:
dc:07:0f:c5:bd:20:43:5a:ff:67:ce:91:ea:dd:8f:
eb:99:13:67:d6:ed:48:1a:e3:51:04:f8:0a:c2:9c:
48:e4:07:21:b4:67:30:6a:69:ca:fd:c3:48:14:0f:
d9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:52:EE:07:86:6A:40:26:A6:49:CE:7A:96:A4:15:31:84:86:B1:3B
X509v3 Authority Key Identifier:
keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6a:bd:8e:cb:d0:fa:db:cd:ef:e2:69:e2:80:99:d3:03:07:
06:49:d6:48:e3:27:61:be:7c:78:c4:5f:70:0a:39:36:b8:b7:
5c:f1:fb:42:25:fb:02:fe:b6:3b:61:c6:e8:14:00:c8:9d:b0:
43:2b:5b:79:42:e1:04:e3:67:29:37:28:8d:b8:6d:a8:fa:8f:
d6:59:5a:b2:55:e7:38:d3:26:b7:15:b3:73:43:c5:99:e5:cf:
36:b3:11:ba:7f:f2:5e:24:a6:76:0d:ac:74:e7:62:54:af:f5:
58:7b:8a:22:ff:5d:9d:8b:2b:7f:af:97:71:23:05:32:ca:a5:
b4:f2:a2:7d:4c:27:5e:a8:63:d6:4f:49:05:e2:4d:00:30:6a:
d7:17:ab:1a:a7:71:fc:e5:42:c5:30:e9:10:c7:57:38:69:da:
79:ec:87:a8:0c:59:cc:e3:9e:f7:c8:85:fe:4d:a6:6c:aa:62:
e3:f6:8f:43:6e:3d:2a:e6:59:19:c0:c0:83:93:45:f4:14:11:
b4:17:70:4d:9e:d7:24:ef:1c:dd:b2:89:10:5f:65:8b:75:76:
6b:39:f9:b8:d4:4a:21:1a:82:db:ed:aa:e4:c7:78:fb:6d:f0:
2d:91:a9:83:f6:a8:57:bf:d2:42:8c:fb:75:0a:6f:ef:13:d1:
81:2a:27:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:10:16 2025 by rpki-client