Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
File: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft (raw, json)
Hash identifier: iHppi9h9tddSybrBE9+ONDTIP0IzL15RzBKfOoTXn+g=
Subject key identifier: 72:8F:5F:1D:52:3A:B0:6C:97:CA:E1:E6:58:8E:2B:B0:A9:98:31:02
Authority key identifier: 64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
Certificate issuer: /CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Certificate serial: 0196C0EF049325625F5449C829EF1706A1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
Manifest number: 0878
Signing time: Sun 11 May 2025 20:00:11 +0000
Manifest this update: Sun 11 May 2025 20:00:11 +0000
Manifest next update: Mon 12 May 2025 20:00:11 +0000
Files and hashes: 1: ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl (hash: 4Wv21gByjaXYKuKsUu4nKvAPrw+fiP8FHrNrFqss0ZI=)
2: iZsQcVJmfkhAcYH19cli-30jJSk.roa (hash: 5op4VZIOL+EirxQSg7kSyPAbPkqJzG43PAru2qFB904=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:04:93:25:62:5f:54:49:c8:29:ef:17:06:a1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642c7a4e9f02b2f4e664d7d0d72a52e51261de54
Validity
Not Before: May 11 20:00:11 2025 GMT
Not After : May 12 20:00:11 2025 GMT
Subject: CN=728f5f1d523ab06c97cae1e6588e2bb0a9983102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:c2:fe:55:c1:d3:b7:3b:e3:31:5e:d3:27:
2e:68:31:6f:d3:78:65:7d:8b:86:6a:c6:4c:b0:3c:
8b:5e:e8:5c:49:6d:ea:98:2c:a0:4e:b5:ac:df:1f:
85:b5:17:dc:46:d3:ef:64:8c:e8:2d:f3:0f:f1:48:
5f:1c:3c:35:ad:ef:57:7a:93:7e:18:2e:51:60:e4:
e8:f3:7d:21:f7:9d:3f:04:30:b1:df:9b:b2:1d:17:
35:a4:c3:d9:ad:5d:d8:d4:a8:97:b9:fd:a9:86:82:
a8:9e:c4:46:a1:0a:c6:c9:89:6d:d8:fc:ad:96:7e:
45:8b:a2:eb:c0:df:8f:83:f5:ce:8d:f6:8c:df:71:
80:c9:05:f7:c8:a3:1e:f3:95:e3:1c:be:4b:b3:3b:
ff:e0:75:7e:27:a4:49:cd:8f:33:1e:bd:98:8f:7b:
ca:a7:37:4a:1c:61:10:a4:42:c7:b8:2d:18:1b:3f:
98:80:d2:f8:49:d8:98:34:1b:8a:90:de:c8:9e:30:
44:3a:78:f5:1b:7b:3f:bb:b6:a4:52:7e:9d:8b:b1:
e5:41:23:0a:97:a2:97:7e:d1:3b:bd:a3:72:b6:57:
38:77:11:ca:9f:b1:6c:1c:19:a3:2a:9e:dc:c8:f2:
51:cb:8b:44:7b:79:9e:35:d7:51:e2:35:da:95:ad:
75:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8F:5F:1D:52:3A:B0:6C:97:CA:E1:E6:58:8E:2B:B0:A9:98:31:02
X509v3 Authority Key Identifier:
keyid:64:2C:7A:4E:9F:02:B2:F4:E6:64:D7:D0:D7:2A:52:E5:12:61:DE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/991fd8-2d85-4cf9-9036-5e02c4653e50/1/ZCx6Tp8CsvTmZNfQ1ypS5RJh3lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a3:bd:e7:53:63:ca:6e:66:44:0f:5a:ef:a8:8d:2c:a7:9b:
80:c5:96:00:56:3e:6f:84:1a:9a:80:59:13:72:e0:07:5d:ae:
58:24:c2:68:d3:c4:57:5b:16:68:67:84:a0:45:66:66:87:83:
3c:27:c1:54:8b:8f:07:be:78:b5:95:20:24:77:4d:59:eb:35:
eb:e1:2f:69:52:3a:0a:55:78:9b:ac:38:7c:2e:f0:b8:7b:79:
86:99:60:b8:86:0f:db:b9:0b:13:48:ef:48:b0:57:4f:60:59:
03:25:ae:3b:c6:89:db:6b:3b:fa:63:9c:10:48:c8:85:5e:13:
18:c4:10:e9:87:7f:3f:4f:e3:49:d2:ee:4d:dc:00:bb:8f:59:
e7:bf:0b:b9:17:be:de:29:d1:2b:27:1c:66:51:b9:9b:05:b1:
f3:c9:f6:78:30:a1:62:0f:84:87:6d:83:6c:51:71:f1:d3:16:
d0:44:39:f1:d6:76:6a:af:a7:d8:23:5d:81:5e:58:10:d0:cc:
e3:46:c4:c6:fc:21:3f:f6:db:b9:ec:e3:68:2d:db:2a:8a:b2:
2f:3c:d6:cc:98:e9:d8:12:e6:be:31:e3:43:ac:32:c3:39:5f:
fc:63:f9:84:bc:30:e2:47:a3:b6:ef:41:e7:f1:cd:37:a8:a7:
24:84:60:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:13:29 2025 by rpki-client