Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
File: zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft (raw, json)
Hash identifier: hY5jGwcseQPSorC7lvdIPbZuL8vIPmjmyQKjoHiAn2Y=
Subject key identifier: DA:40:18:42:F9:92:29:F2:73:B6:B2:AD:1A:0B:D5:45:8A:37:14:67
Authority key identifier: CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
Certificate issuer: /CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Certificate serial: 0196BBC8D9F6B2DD033B45D2CB50FCA1863C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
Manifest number: 0C1B
Signing time: Sat 10 May 2025 20:00:24 +0000
Manifest this update: Sat 10 May 2025 20:00:24 +0000
Manifest next update: Sun 11 May 2025 20:00:24 +0000
Files and hashes: 1: _ykmB8_Y7rV7LJO7Uqan6jxlQmA.roa (hash: uD0z/UcxlE1jmEUcgqOHRJNkK/WACwxETiV1r9T8BLM=)
2: y51o00vmMmDa9uJz_3L1BZLX_PQ.roa (hash: LvQhqTjW7YqOwVZx2t2Ku3OS7msZkNZO3NpDM/DXjLU=)
3: zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl (hash: IxxLIT7u8E3Surqi5avR9mbug8ffLwQJ848J1PwNIGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:d9:f6:b2:dd:03:3b:45:d2:cb:50:fc:a1:86:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb75341500807a9750a8cf55bf4e45ff03f312a
Validity
Not Before: May 10 20:00:24 2025 GMT
Not After : May 11 20:00:24 2025 GMT
Subject: CN=da401842f99229f273b6b2ad1a0bd5458a371467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:b7:65:dd:c4:00:0e:c8:c8:a7:90:15:86:
2a:32:c5:02:74:cd:ed:bf:c4:37:22:b3:e8:76:39:
d8:fc:a1:71:24:a0:26:fa:47:02:42:f4:4e:a9:53:
08:ba:5f:03:d0:23:6a:8d:07:6a:e0:00:9d:24:ef:
84:a1:b9:7a:9e:ce:d5:d3:37:e9:ce:63:b7:8c:98:
24:68:e3:ed:c5:d0:ff:4b:96:09:57:a4:1d:53:0c:
88:0f:d4:57:0a:0a:47:9a:fb:d6:1e:0e:ba:ad:f9:
43:2d:5e:9a:4d:81:44:2f:e1:5d:aa:02:2a:fc:47:
14:39:3c:ed:d2:c5:67:86:27:6e:3e:28:ba:94:61:
55:51:40:28:ed:82:06:09:71:88:e2:06:6c:02:6a:
91:84:d9:ae:38:28:60:71:b8:4a:f4:c9:83:82:7a:
88:b8:82:8c:e8:3f:61:bd:37:2e:a6:97:29:0b:4e:
d2:78:8b:9d:c4:ef:62:7c:97:fb:af:95:62:2c:ce:
9f:58:56:fe:72:0c:8b:2a:7c:28:25:33:29:ba:26:
ef:5f:b1:2d:35:1f:de:aa:a7:43:e2:cb:f4:90:4b:
af:20:fe:47:4e:91:ed:db:7b:cf:9e:dc:e0:89:d7:
90:22:50:43:2e:fb:29:29:f3:93:4a:99:3f:78:ec:
d3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:18:42:F9:92:29:F2:73:B6:B2:AD:1A:0B:D5:45:8A:37:14:67
X509v3 Authority Key Identifier:
keyid:CC:B7:53:41:50:08:07:A9:75:0A:8C:F5:5B:F4:E4:5F:F0:3F:31:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLdTQVAIB6l1Coz1W_TkX_A_MSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/effb2f-9fbf-488b-9315-a99a21015937/1/zLdTQVAIB6l1Coz1W_TkX_A_MSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c9:ea:09:d8:e5:14:bd:fe:f1:cb:80:f5:2e:21:e2:a6:72:
03:50:ad:20:a9:0d:7e:b8:ce:71:c2:39:2b:19:5e:58:d3:33:
50:11:45:24:3e:00:dc:e1:f5:88:27:69:ae:d1:de:3e:54:77:
7a:de:49:39:bf:02:3f:1b:b0:ae:e7:1a:c5:4a:77:47:a0:e5:
49:91:eb:ff:6a:0a:b5:ab:c6:40:5f:14:96:02:54:30:b0:25:
6f:0f:05:df:33:21:a1:41:f8:05:0c:06:63:1b:69:8e:d7:c7:
c2:ed:3f:4f:f9:67:b1:41:78:4b:81:59:cb:6b:8c:1b:83:9b:
5e:db:27:a3:94:06:9c:8b:80:99:b3:d9:0b:24:43:c3:6b:54:
5b:e4:ed:7b:e2:0f:0a:17:14:2c:86:dd:4e:14:2e:e3:6f:c1:
55:e5:dd:2d:8f:ca:9c:6e:3e:25:fd:46:0a:ce:74:16:61:c1:
18:df:0c:51:03:4d:bb:28:30:11:e2:8e:56:9e:e6:e3:39:5e:
4d:7f:5a:27:fa:23:4f:10:23:33:a9:10:c5:f0:a8:c7:7a:7e:
c7:0b:e4:c1:f8:55:5d:14:46:ab:1a:c9:82:aa:3e:d5:e5:3e:
0e:c3:79:68:a3:6a:50:6f:e5:e7:9f:9f:90:6a:e9:89:94:39:
b4:50:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:01:35 2025 by rpki-client