Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json)
Hash identifier: Y4bKJ1PHT9lhcZU636P5SYLgb0v7TxqA9aFdzefJHeM=
Subject key identifier: 60:61:0C:0C:F1:EF:14:34:B4:BC:5A:18:EE:7F:DA:01:E4:16:B7:6C
Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Certificate serial: 0196DE8C0C6F08DCE5BA08664B2666505518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
Manifest number: 01CB
Signing time: Sat 17 May 2025 14:00:42 +0000
Manifest this update: Sat 17 May 2025 14:00:42 +0000
Manifest next update: Sun 18 May 2025 14:00:42 +0000
Files and hashes: 1: PCsNRmePbsa0e_oFwYPynvY9VHo.roa (hash: RquScR+SoymapgsuHQnGU+jgf18EzJeo/wdLZPwz40M=)
2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: JiIDfaQUxZ70+6bICEIl/HRLRMpHkJoRpqy+Od1LL4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:8c:0c:6f:08:dc:e5:ba:08:66:4b:26:66:50:55:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5
Validity
Not Before: May 17 14:00:42 2025 GMT
Not After : May 18 14:00:42 2025 GMT
Subject: CN=60610c0cf1ef1434b4bc5a18ee7fda01e416b76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:87:dd:01:4f:54:b1:20:65:36:6d:fe:15:
17:bf:f9:aa:12:f2:e2:90:31:c2:01:4c:24:d2:5f:
f1:6a:71:96:e1:22:01:62:a9:31:c7:63:8d:bf:34:
7b:4b:21:0f:7b:54:c4:54:60:0a:52:fb:f3:da:31:
21:1e:17:d6:43:98:79:b5:c5:1f:67:93:7c:e6:a2:
eb:44:33:07:38:b9:ad:59:58:fd:f4:40:9e:cb:72:
08:ff:97:a3:69:35:bb:f4:8a:06:69:57:ee:6c:db:
69:fc:ab:c6:53:bd:76:20:38:85:9f:6b:1c:62:7c:
f9:3e:32:91:fd:f2:3b:9e:01:fd:c0:18:6a:50:64:
aa:04:dc:14:29:b1:1b:12:39:f5:a8:c3:6a:0f:db:
96:1e:d6:14:db:87:34:75:7a:3c:6d:f8:8b:f2:a9:
c6:a4:f0:f6:e9:7d:de:18:d5:5c:4e:5a:02:d9:6a:
82:0a:81:f3:cd:21:3a:28:08:f1:31:1d:e6:30:a7:
8d:f3:a2:a3:9e:2b:7b:bc:7d:81:d5:5e:b6:e4:26:
39:86:07:e3:0b:85:b3:73:70:04:55:e1:e8:c9:2a:
b3:a5:5d:4d:6d:b1:b1:9b:a5:4d:66:78:3e:f2:94:
c6:65:70:17:7b:e9:16:eb:c9:e8:3e:52:da:9d:44:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:61:0C:0C:F1:EF:14:34:B4:BC:5A:18:EE:7F:DA:01:E4:16:B7:6C
X509v3 Authority Key Identifier:
keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:26:27:f9:d7:6b:38:dc:be:6a:b5:e2:cd:61:d2:40:5a:6b:
08:ed:ca:e3:82:33:aa:ee:3a:b0:3d:50:41:72:75:59:fc:1d:
31:e1:f9:1e:36:f3:05:2e:e8:86:6e:ff:dd:22:04:67:b8:1c:
d9:fe:7e:31:ae:db:bd:79:09:ef:be:49:03:e1:04:db:80:c3:
c8:69:e8:52:57:66:9f:64:b6:18:48:f2:26:3c:ad:85:5c:0f:
0a:5c:cf:14:aa:cd:79:54:80:2e:64:3f:af:00:06:5f:27:1b:
c4:88:82:e8:3b:57:61:42:55:a8:08:8f:86:3a:b8:8a:ce:85:
db:a8:52:7d:f6:70:66:8f:e7:82:d0:81:b3:02:a2:3f:36:bb:
52:87:eb:8a:bf:db:b5:b8:44:08:55:42:ad:c1:5a:2e:0f:a2:
3d:03:f6:6d:79:7e:ae:39:12:dd:bd:5e:b9:c2:c4:37:a3:79:
f8:f5:84:1d:04:3a:7e:1f:1a:1d:da:38:65:13:98:39:c1:d3:
0d:06:39:a8:42:df:79:49:60:6d:94:29:b7:00:b2:dc:7f:a9:
43:bd:7c:4a:1e:0c:05:bb:2a:2e:50:67:c5:46:77:95:28:7e:
70:5c:ff:e8:d7:18:99:71:2e:15:04:00:4d:08:93:55:e7:d5:
ea:29:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:50:34 2025 by rpki-client