Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
File: Z5dBLsSwuPst6dLfF6ascoPt7bU.mft (raw, json)
Hash identifier: IchTV4qEkYd+Jzvpli2nQfNuTtgEeXG2IlZ+0QzAqgs=
Subject key identifier: 40:F1:E6:23:4D:27:38:68:1F:85:5F:FF:35:C0:1C:C9:B1:48:C7:73
Authority key identifier: 67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
Certificate issuer: /CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Certificate serial: 0196C2025BB79E67D0875D23B7777C4807DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
Manifest number: 03AF
Signing time: Mon 12 May 2025 01:00:56 +0000
Manifest this update: Mon 12 May 2025 01:00:56 +0000
Manifest next update: Tue 13 May 2025 01:00:56 +0000
Files and hashes: 1: Z5dBLsSwuPst6dLfF6ascoPt7bU.crl (hash: GeIpg187zCFHF5sBDyln49q/PQeHqrbUNOtWUTHmQJw=)
2: Zr1pLK7AvEx7Cs76qNjhJbTFRB4.roa (hash: 5fNIeYhAsD92mNfB8kwG5sSqFg3x5U2buT5vjKuMGrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:5b:b7:9e:67:d0:87:5d:23:b7:77:7c:48:07:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6797412ec4b0b8fb2de9d2df17a6ac7283ededb5
Validity
Not Before: May 12 01:00:56 2025 GMT
Not After : May 13 01:00:56 2025 GMT
Subject: CN=40f1e6234d2738681f855fff35c01cc9b148c773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:be:9d:cd:39:bd:6a:1e:bc:d2:2d:33:d3:2a:
0b:63:bd:d3:61:d2:b3:69:02:50:56:9f:77:ec:e9:
c3:8d:3b:47:9d:08:b5:3e:36:14:79:76:43:45:b5:
8a:67:7f:18:16:ab:34:e5:a2:af:04:ed:f2:38:93:
da:fe:e0:fd:ce:42:86:27:e1:37:de:b6:70:21:fe:
6b:a2:c3:73:57:d9:ed:be:95:da:84:3c:f4:4e:44:
ab:33:28:6b:87:eb:74:2d:2d:f9:fa:9b:88:ee:0d:
89:6b:56:75:a6:54:ac:de:f7:e1:42:93:8e:59:25:
94:59:c2:4b:cb:12:a8:88:3d:9c:b4:43:e3:5d:54:
7e:cd:68:bf:b5:9b:e8:0c:0f:f7:c1:85:e6:fa:76:
2e:77:92:03:a9:92:b3:20:eb:1b:7f:42:ee:57:c9:
88:15:82:4f:32:36:91:0a:13:e8:5a:f0:af:b8:65:
5b:c3:de:45:1b:21:52:b9:39:2b:4d:b2:bd:83:ae:
57:c4:7d:c7:57:4b:00:0a:cb:12:10:94:61:cf:7c:
cf:7d:7d:81:a2:94:f2:ea:84:a4:0e:c8:3b:7b:90:
7a:91:bf:fb:02:7c:bf:6f:8f:69:cc:3d:c5:ea:04:
b5:aa:03:e3:bb:b3:5f:de:2d:7a:23:74:62:6e:e9:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:E6:23:4D:27:38:68:1F:85:5F:FF:35:C0:1C:C9:B1:48:C7:73
X509v3 Authority Key Identifier:
keyid:67:97:41:2E:C4:B0:B8:FB:2D:E9:D2:DF:17:A6:AC:72:83:ED:ED:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5dBLsSwuPst6dLfF6ascoPt7bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/cabead-f08a-415d-9937-53a8619b42f5/1/Z5dBLsSwuPst6dLfF6ascoPt7bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:5d:97:59:90:ae:b5:27:5b:55:52:28:88:70:ac:41:de:db:
82:e5:b6:9f:74:75:6f:22:e1:73:3d:95:ed:6d:6b:32:dd:2c:
4b:ca:8c:a4:6c:95:16:4d:6f:7b:1b:bf:79:cb:5a:a2:59:4f:
dd:9f:62:3e:aa:35:e6:fe:74:56:d5:e5:a5:1a:59:cb:3d:1b:
9e:0b:46:7d:99:55:bd:e4:85:b7:ee:6b:90:bc:2b:cc:25:cb:
d4:56:80:56:0d:98:4a:dc:9a:4d:52:a9:80:7f:85:33:db:34:
ec:bd:dc:42:2c:1a:a1:5f:30:5b:51:41:e7:42:64:40:a1:0a:
37:65:a1:99:5d:65:67:08:ee:ee:3f:d1:b8:6e:bf:04:4f:1d:
c9:92:c9:a9:88:2a:a0:6f:c7:d2:7a:3c:cf:66:af:46:9c:5f:
f9:9a:1e:18:e4:fe:b9:ca:53:49:50:98:59:a0:02:35:9f:7a:
c2:a2:f2:6a:a3:26:f3:13:d8:f0:41:0f:01:62:f9:1c:c2:0d:
51:94:e8:f5:68:31:03:a2:53:a2:b0:57:d8:bf:f0:ca:34:a8:
09:43:af:f9:a7:8b:f6:28:18:36:d3:b4:fc:9d:23:45:ca:b6:
f0:d9:5a:cf:14:c4:a0:32:60:a1:4f:53:66:e6:fe:ff:63:0e:
96:cd:c2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:44:55 2025 by rpki-client