Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft (raw, json)
Hash identifier: lmzdLm+B2U92B+wOw1ZR4N0nvsC5/Ceh0LswU46knrg=
Subject key identifier: 6E:7E:70:FD:3A:8B:EC:70:53:05:60:26:CD:E5:8E:8E:89:5C:AD:F1
Authority key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Certificate issuer: /CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Certificate serial: 0196C9F2B291DA0FAD526934CFA09BFFA447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 14:00:47 +0000
Manifest this update: Tue 13 May 2025 14:00:47 +0000
Manifest next update: Wed 14 May 2025 14:00:47 +0000
Files and hashes: 1: NJmmW764rdnW_zIUswA3g-8-n2M.roa (hash: uNbv9sZggt1kjUfoR4Ji7KAa4WT9RRySZVjN33ZdWTA=)
2: ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl (hash: uBAJGeQAcI8PrUN2ljgd2E8cgYw4XRwy/p9uZGjXlFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:b2:91:da:0f:ad:52:69:34:cf:a0:9b:ff:a4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Validity
Not Before: May 13 14:00:47 2025 GMT
Not After : May 14 14:00:47 2025 GMT
Subject: CN=6e7e70fd3a8bec7053056026cde58e8e895cadf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e1:00:81:ef:a6:dc:11:c6:99:59:e7:c6:d2:
6c:b3:64:45:bb:af:c4:20:ce:45:b6:0b:66:a3:09:
5e:93:37:99:8d:58:e0:6a:14:84:42:76:cc:83:ff:
cb:41:52:a2:ed:c1:46:64:26:91:97:9d:4b:3a:c5:
b1:fa:de:d5:0e:c5:52:c2:57:34:be:55:45:ef:0c:
a4:14:65:85:1b:09:88:e6:de:ce:da:4f:25:45:21:
68:c0:ef:d7:60:49:02:ea:4d:cc:74:d8:b5:5b:9a:
f3:45:71:39:f5:95:f9:f4:5f:e3:5d:0a:8f:65:f8:
37:f9:08:7e:8a:86:38:1c:3a:d0:b5:5a:c4:a4:05:
b1:e5:96:4d:8b:06:55:cd:ae:21:69:e5:44:d5:d0:
93:8c:07:36:a9:27:84:9d:cd:ef:82:f9:9f:25:c9:
8c:d2:33:d2:03:08:6b:37:03:c3:1f:11:48:48:cb:
1a:4f:aa:1f:b2:f7:76:be:c9:b7:97:0d:05:1b:da:
9b:cc:73:d3:b3:ca:78:e9:e7:a2:e9:4a:86:cb:f8:
29:2e:58:30:4e:b3:3c:1c:a5:6d:65:dc:fa:73:a2:
74:90:5e:e3:ad:81:31:24:b2:24:da:d6:d8:5a:60:
60:6a:98:8f:cb:0f:86:49:0f:3e:5a:3d:c4:6b:8d:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:7E:70:FD:3A:8B:EC:70:53:05:60:26:CD:E5:8E:8E:89:5C:AD:F1
X509v3 Authority Key Identifier:
keyid:CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6b:65:97:b2:39:1e:c7:55:ea:11:4c:e6:c3:7a:00:16:eb:
27:05:f6:b6:83:cf:28:d6:32:ad:fe:29:cb:11:34:43:4a:1a:
dc:cf:06:2f:5b:28:4b:7b:c2:22:14:d7:84:80:bf:88:64:dc:
7a:43:c8:1e:f1:33:43:0b:de:40:fc:47:a3:9c:ac:ec:c8:0d:
2a:30:a8:64:d5:a3:09:c1:9b:6d:d8:5a:98:a9:17:0d:d5:71:
ed:52:75:29:3f:fc:81:08:d0:f0:43:95:fb:8f:c1:0a:32:f6:
59:ce:0d:c4:94:8b:a1:79:33:54:da:3d:0f:a8:1f:6c:fb:47:
89:37:3c:a3:89:11:f8:c7:74:8f:97:5b:ae:31:f1:7e:4c:83:
fb:8e:36:0c:c8:fc:70:ed:72:3f:ee:c0:7c:25:a2:21:93:ff:
9f:24:e0:3b:84:79:52:da:a6:ca:f9:03:18:f4:d9:ce:cc:4b:
b3:d1:39:51:04:a9:a0:ad:de:9a:93:f5:53:56:95:70:70:1d:
26:5c:c8:dd:0b:b0:0e:3b:34:c1:f8:a8:bc:1f:94:59:02:ce:
a8:f8:a3:da:25:54:62:b1:37:09:81:fc:e8:ae:ad:d8:56:73:
ff:cf:8c:e4:52:f2:92:eb:d6:79:7c:c8:c4:ab:7f:7b:b8:df:
ca:aa:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:50:16 2025 by rpki-client