Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: MR8wqt7SM+T1MhRB3/oljnU840bpUHjg2Z45aIci1m4=
Subject key identifier: 6A:69:3E:53:73:79:0B:79:49:50:73:F2:EC:49:65:59:85:D8:AC:F5
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 0196BBFFBD7A2CFCF0473D5CCD72E486F4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 1248
Signing time: Sat 10 May 2025 21:00:21 +0000
Manifest this update: Sat 10 May 2025 21:00:21 +0000
Manifest next update: Sun 11 May 2025 21:00:21 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: 3gNb5rHXvRsLVahUfEeO1PUB2da4xACEp4v9DgILd0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:ff:bd:7a:2c:fc:f0:47:3d:5c:cd:72:e4:86:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: May 10 21:00:21 2025 GMT
Not After : May 11 21:00:21 2025 GMT
Subject: CN=6a693e5373790b79495073f2ec49655985d8acf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:53:0c:97:08:90:59:6b:d4:4f:50:51:3f:6f:
47:55:cc:88:dc:85:95:36:91:10:cd:b1:c5:c4:44:
9b:46:a2:4b:b1:71:cd:b2:93:bb:58:85:cc:a0:32:
95:2c:69:c6:5e:1c:fb:d3:76:b2:0d:d6:30:64:2c:
d7:50:3b:bb:4a:23:2c:a5:c1:fd:b6:ea:18:a5:7b:
3f:d9:05:d5:0b:b9:45:1b:be:cb:21:d7:55:18:92:
b9:f5:08:9a:3d:47:41:63:88:9f:87:4b:73:3d:90:
04:9e:0a:90:d8:f4:f4:c4:74:f4:cd:b3:ff:39:a7:
bb:22:ed:e3:6e:d6:71:f0:f1:56:0c:3f:aa:a2:0b:
fd:84:15:38:b8:57:e9:1f:b0:6d:2b:c5:dd:d4:69:
fb:6d:16:d7:0a:e2:5c:06:a6:16:82:43:46:10:15:
43:fb:e9:ed:d1:a0:c5:45:ce:91:4c:97:14:fe:9f:
f6:20:fd:5d:1d:3f:28:2b:f1:a4:ef:74:53:94:57:
c6:a1:df:10:a9:2a:eb:2a:a3:d9:2d:c7:d2:85:80:
e2:cf:24:10:7d:bb:ce:45:f1:42:8a:39:71:47:71:
e6:22:b9:e3:0a:79:2d:d9:99:99:28:a4:4d:d0:d5:
56:3f:dc:ab:66:f7:47:6a:11:ca:39:45:7b:bc:11:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:69:3E:53:73:79:0B:79:49:50:73:F2:EC:49:65:59:85:D8:AC:F5
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:40:61:32:c5:95:ab:21:23:ff:ff:69:d1:ed:d5:d7:0c:38:
a8:a5:16:f1:2c:88:1b:70:ec:af:e6:73:9f:63:83:80:af:7e:
73:bc:f5:ff:06:e2:c6:da:9b:8a:0f:93:cf:a3:25:42:0f:45:
51:77:24:9c:df:c7:85:03:49:c1:c5:ad:0f:6e:8d:74:d0:37:
7a:83:92:fe:af:bd:88:44:c9:3c:75:f7:cb:10:47:50:df:b9:
af:64:76:ee:70:a7:1d:ec:d2:f0:15:29:c4:12:9e:c2:c4:f1:
47:34:f6:21:81:8b:41:78:a3:fd:3a:cc:fd:2a:95:d0:19:e2:
17:3e:07:fe:c3:2b:74:d1:ab:f8:ad:bc:c0:72:8f:2a:c3:26:
d6:97:48:f1:80:72:70:7c:92:02:df:82:ad:30:94:b3:d2:3e:
53:63:42:d0:69:9a:8b:b5:fa:7b:0a:a6:31:a4:35:ed:c7:fd:
98:da:76:8b:e9:f9:fc:c8:b4:47:ae:bf:3a:53:d1:dc:c6:49:
7e:a0:d1:35:ad:2e:0a:8b:90:ce:f2:50:0f:db:dc:90:17:ee:
78:e5:6e:b2:73:a0:64:40:9f:fe:52:46:5c:11:04:51:97:5a:
a5:ef:42:e6:89:64:ba:05:4a:a6:dd:57:31:67:ee:fd:70:a6:
64:2d:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:37:25 2025 by rpki-client