Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
File: zDnmvkDYASiJbM0TH2WlWtmKQK8.mft (raw, json)
Hash identifier: u27BjxR1PlI33sQvlJjuOtrdg5BlGWLNeOQNrtS5qQU=
Subject key identifier: B1:57:57:4A:D0:60:B0:C1:D0:82:90:8C:07:F5:DF:36:16:44:16:30
Authority key identifier: CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
Certificate issuer: /CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Certificate serial: 0196C3B9E6C65C914DF675B51BE99956B5D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 09:01:02 +0000
Manifest this update: Mon 12 May 2025 09:01:02 +0000
Manifest next update: Tue 13 May 2025 09:01:02 +0000
Files and hashes: 1: 2gXpcecRRCZij4ZXTFv5wgCwpoc.roa (hash: XTp2a7d9Z4/ce0bBWK6Hs10N2L5hCV8LpzUzoDu0gs0=)
2: 6UlZFNCUrDjb89rguKwpyS9qT0g.roa (hash: D/Hmsl6tGFB+vz20t6vs0y0e3hMtr6xcd6Lxa8Hmltk=)
3: zDnmvkDYASiJbM0TH2WlWtmKQK8.crl (hash: rzAHuNvhBCEWp5jM34DfBPI2OFmJYg4LvFMYhy/l23w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:b9:e6:c6:5c:91:4d:f6:75:b5:1b:e9:99:56:b5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc39e6be40d80128896ccd131f65a55ad98a40af
Validity
Not Before: May 12 09:01:02 2025 GMT
Not After : May 13 09:01:02 2025 GMT
Subject: CN=b157574ad060b0c1d082908c07f5df3616441630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:89:29:19:a7:d0:10:ad:6e:a6:f3:e9:c7:
d0:c8:96:97:c8:c4:5b:1b:96:ab:b7:d6:4b:3e:de:
c8:91:9d:66:4a:e0:4c:86:0b:93:43:a5:1d:7f:e7:
24:e2:19:c3:72:75:62:8c:53:0f:29:d8:02:04:55:
ef:be:67:2d:e8:a3:e5:7f:b2:c9:59:01:9c:7d:3e:
bc:d6:a0:c6:6f:ba:00:67:b8:4b:4e:93:f0:99:c0:
41:92:22:8a:ef:be:41:ca:2a:28:c1:76:7d:84:3b:
f9:23:47:c3:99:5e:e2:d2:b9:3d:a6:20:94:12:8d:
67:02:f6:82:74:a8:7a:a6:2c:a4:02:e8:6e:22:de:
27:00:a6:de:9f:aa:97:ac:12:68:09:99:5b:26:d7:
35:17:25:09:cb:b0:3e:51:8d:18:7d:7e:2f:7a:3b:
b7:80:90:08:35:41:36:94:af:58:40:2e:23:9c:68:
98:e2:e2:87:c1:66:d5:96:8e:de:91:83:7a:0b:6d:
11:0a:ab:fe:64:e1:2f:09:95:af:81:23:b7:b8:6d:
5e:84:61:22:38:f2:f6:2d:67:bd:df:5a:58:9b:b2:
ce:82:96:90:10:91:93:43:85:32:43:43:94:b5:58:
3d:23:15:5b:03:34:80:72:b9:95:8b:d8:af:06:22:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:57:57:4A:D0:60:B0:C1:D0:82:90:8C:07:F5:DF:36:16:44:16:30
X509v3 Authority Key Identifier:
keyid:CC:39:E6:BE:40:D8:01:28:89:6C:CD:13:1F:65:A5:5A:D9:8A:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDnmvkDYASiJbM0TH2WlWtmKQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2ff91-d4ce-405b-bebf-609d8f565ffc/1/zDnmvkDYASiJbM0TH2WlWtmKQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2f:bf:a1:53:9a:b8:e4:58:1a:81:fe:8c:da:3d:07:8a:99:
33:e5:38:50:70:d3:99:69:e0:f7:8c:20:93:88:71:50:2d:7e:
1b:21:ae:87:2a:ed:91:ea:95:be:a5:d0:e6:94:26:6e:1d:25:
a9:f1:48:16:5f:a8:3f:c5:df:3c:66:9d:a0:28:f0:9b:9a:3e:
7f:a7:63:29:ec:05:4d:42:ec:50:c8:11:21:3c:92:fa:6b:79:
21:7b:3b:90:0d:06:79:5e:f7:b0:a9:b8:d0:fe:89:a0:23:d2:
4a:98:20:62:56:ad:e3:52:3c:b7:4c:0b:4c:44:05:7b:b3:17:
a1:ff:fb:c5:38:65:7b:c8:59:e2:41:51:66:aa:d2:da:fc:f7:
9e:d9:ae:17:2a:6d:b9:6b:65:d5:e8:9c:de:8f:04:9e:56:d9:
5c:b9:2e:66:e7:e2:82:fd:a2:64:2d:04:dc:d4:d5:51:99:ce:
a2:91:15:e0:fe:57:2a:2b:25:ad:8b:bf:77:6d:13:20:ad:1a:
e5:3b:6c:a7:a1:48:b1:c2:3f:bc:11:50:d6:bd:8d:63:84:98:
8c:35:a1:2c:93:97:5c:e3:8d:d3:dd:a7:b7:ac:eb:f5:32:a1:
8a:4d:19:2c:b0:b7:a8:a8:f5:89:f3:d4:bf:f8:58:cf:53:fd:
50:7f:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:10:09 2025 by rpki-client