Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
File: ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft (raw, json)
Hash identifier: dBRB6On91uMwjWsnCKpPk1czH1ffQvcjwuBeujIxfSE=
Subject key identifier: 7F:A4:8F:47:74:74:DF:E8:DB:B1:73:90:21:D2:55:6E:37:AA:2D:76
Authority key identifier: 65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
Certificate issuer: /CN=65c293380bc41f52d9131585a8580038f92f5dcc
Certificate serial: 0196A1642305461B014F97BB57773A3A80F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 17:00:16 +0000
Manifest this update: Mon 05 May 2025 17:00:16 +0000
Manifest next update: Tue 06 May 2025 17:00:16 +0000
Files and hashes: 1: DXSMQQoNY6zl2bbt_Qxl4yUZpo0.roa (hash: W1Qix1yXYt7eEDSw6BnO5hmas15FwfPB8Nypx8uQBss=)
2: ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl (hash: UIzViVl9zr7SJsj1hxW4V5zq6Z13EaIX4XjoKT/dij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 17:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:64:23:05:46:1b:01:4f:97:bb:57:77:3a:3a:80:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c293380bc41f52d9131585a8580038f92f5dcc
Validity
Not Before: May 5 17:00:16 2025 GMT
Not After : May 6 17:00:16 2025 GMT
Subject: CN=7fa48f477474dfe8dbb1739021d2556e37aa2d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:67:94:7a:f9:81:7a:d4:e0:f4:70:be:29:
3d:be:9d:f9:d4:23:fe:c6:5d:14:c8:a2:55:ae:27:
19:d6:9a:4c:dd:43:db:89:36:b8:00:33:75:e7:a1:
3b:87:7c:62:d9:6a:b6:b9:4b:6e:ff:41:8f:14:c1:
42:7b:38:c1:34:d0:81:05:ca:f5:38:5c:f5:ab:6f:
cb:88:b7:df:dc:57:ed:ac:ba:d4:5f:ae:d4:57:37:
78:9f:e8:83:61:ac:53:30:ac:97:b1:6f:6d:75:39:
fa:4d:99:a8:0a:14:99:9c:2f:ab:7b:05:3c:d2:7b:
89:9c:ad:0f:8d:b1:88:15:1b:53:d9:fb:fb:b7:ef:
94:a3:e1:f8:9a:a7:d0:53:66:de:f2:53:f8:72:ce:
89:56:89:97:7d:56:cf:85:7a:01:17:c1:a1:44:9e:
82:e9:a7:13:51:6a:ab:05:07:84:6f:0c:64:d2:b1:
c4:2b:f7:22:8f:e3:90:8e:49:63:a1:0b:52:f9:0c:
41:69:f4:29:29:87:6f:a2:ae:f5:56:e3:c6:1d:3e:
74:9c:14:28:c3:b6:f7:10:84:6b:35:76:55:69:90:
07:eb:2f:d4:01:b6:18:4d:3e:e8:c1:91:6c:1f:ca:
b0:4e:89:5b:5e:fb:25:1a:4d:01:42:e4:01:60:9a:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A4:8F:47:74:74:DF:E8:DB:B1:73:90:21:D2:55:6E:37:AA:2D:76
X509v3 Authority Key Identifier:
keyid:65:C2:93:38:0B:C4:1F:52:D9:13:15:85:A8:58:00:38:F9:2F:5D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcKTOAvEH1LZExWFqFgAOPkvXcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b170fb-a1be-4bd9-adb6-fe6dc17583e3/1/ZcKTOAvEH1LZExWFqFgAOPkvXcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:10:27:fb:83:3c:03:cf:c3:9a:3a:71:91:6a:37:5e:8c:c4:
87:a6:f9:51:20:f3:67:d4:b4:60:ef:b1:a1:ca:40:ed:af:5b:
f7:09:55:4d:ee:fb:41:f8:82:09:8c:aa:c7:d6:d2:ad:4b:2a:
b5:aa:00:c5:34:0b:03:01:a7:7e:26:a0:44:17:80:1b:c9:a3:
a8:01:92:28:84:cb:0b:d3:5c:fe:47:18:1c:01:97:fc:ef:27:
3e:bd:76:1a:a3:3c:b8:7f:e6:80:ef:ea:01:33:2f:c7:c7:9c:
d5:34:72:da:12:69:e5:30:6e:be:be:42:28:58:72:01:53:f0:
7d:cf:f7:fe:a5:62:63:33:65:c8:74:20:6c:21:ae:0b:8c:d0:
c5:5f:8c:cd:33:3a:9c:35:20:90:38:21:16:a9:db:1a:13:9c:
7a:23:9f:cc:9d:74:6f:87:d7:62:53:d9:35:09:72:dd:38:d0:
bc:03:72:68:0a:a6:04:a2:53:e7:05:56:bb:9e:3e:e4:de:0f:
8c:07:15:c8:62:6c:09:4b:8b:cc:44:f1:33:38:47:f8:fc:ea:
91:98:b0:02:42:ab:c8:8d:1f:70:c9:d1:0a:06:22:ff:a0:ce:
c3:32:2c:b2:8d:20:bb:36:8a:63:7e:dc:68:d4:3d:30:54:f4:
b2:7c:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:34:56 2025 by rpki-client