Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
File: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft (raw, json)
Hash identifier: DJE/rnHm31KWccJQlQKwSQSc+zWLfdQLWb7K9Tsoz9Q=
Subject key identifier: 39:86:44:9A:7E:36:9C:1C:B8:6F:12:56:84:C8:6F:76:F6:85:C7:EB
Authority key identifier: CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
Certificate issuer: /CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Certificate serial: 01969E2C4E17EE2A023299F4BC26170052A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
Manifest number: 0AD6
Signing time: Mon 05 May 2025 02:00:25 +0000
Manifest this update: Mon 05 May 2025 02:00:25 +0000
Manifest next update: Tue 06 May 2025 02:00:25 +0000
Files and hashes: 1: pbWUlF6kph4C-luLlJFzTT778aw.roa (hash: FFtm0Ye7lx+oD8pt9jf446A0y5P8uQmRXJuEy3Pug1Q=)
2: zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl (hash: mjtYJaNQffHFltPJHuscFeY82jLhSowLUlCapG+GFsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:4e:17:ee:2a:02:32:99:f4:bc:26:17:00:52:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8e8ebd80fcf884975e42b46bf4e548793f29cb
Validity
Not Before: May 5 02:00:25 2025 GMT
Not After : May 6 02:00:25 2025 GMT
Subject: CN=3986449a7e369c1cb86f125684c86f76f685c7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:6d:2b:74:98:c0:d6:5c:ea:6f:ac:38:8e:
eb:e2:80:5e:a8:03:df:d1:04:9b:62:78:c3:f1:a2:
62:4b:90:f0:c9:a2:b3:ba:d2:5d:51:d6:e3:75:aa:
7f:98:9f:fe:72:7a:4d:b1:b1:aa:77:38:14:94:d8:
7e:a1:1d:87:94:88:8a:2f:27:d3:99:a4:6f:81:02:
47:cc:e0:75:a2:35:cb:c8:5d:97:4f:0c:6a:4d:cd:
f2:d7:c6:6f:52:04:4f:17:99:fc:8c:c2:72:01:89:
b3:ae:c3:c0:b4:11:08:68:28:73:87:e2:c9:e5:d0:
0f:08:78:e4:91:27:f0:42:5a:f3:a5:87:54:65:93:
ba:46:f6:0d:14:48:0c:91:36:9e:e1:a6:07:02:f3:
c8:45:24:99:b5:1e:2b:e2:e3:ad:4e:fc:67:e8:d7:
bc:37:61:07:24:a7:0c:99:08:ac:08:ce:c1:41:43:
48:06:90:b8:74:3d:c4:90:46:06:93:b3:16:55:07:
3a:8b:db:2d:44:1d:ff:b9:7b:de:3c:3a:35:63:5c:
ed:ff:e9:43:e0:88:8e:e4:51:8c:67:51:df:32:32:
46:ef:66:6d:e4:8b:df:61:d4:49:49:50:34:3e:a0:
be:cd:58:b5:a3:5c:01:af:63:ac:42:b3:b8:d7:c0:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:86:44:9A:7E:36:9C:1C:B8:6F:12:56:84:C8:6F:76:F6:85:C7:EB
X509v3 Authority Key Identifier:
keyid:CD:8E:8E:BD:80:FC:F8:84:97:5E:42:B4:6B:F4:E5:48:79:3F:29:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/dc8f9b-06d6-44d3-9a38-286a5ee6e043/1/zY6OvYD8-ISXXkK0a_TlSHk_Kcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0a:a1:9d:28:d6:11:0c:b0:c2:75:83:a5:04:2c:b7:b0:cf:
1d:4d:57:98:89:d3:21:0d:94:f9:ae:0d:25:b1:8a:8e:4b:f4:
63:94:dc:53:48:f9:c5:d5:f3:ad:bb:b7:c8:0b:9b:13:5a:1b:
c3:ce:f5:1c:42:a9:47:8f:10:1d:20:77:5d:15:94:fb:f7:f5:
56:90:42:b7:90:68:43:44:9f:f1:47:8d:a2:10:ac:54:85:f8:
ea:53:e3:75:01:80:7f:55:d5:12:5e:24:b2:59:7e:39:dc:61:
08:79:8c:bb:28:d7:fb:f3:8d:ac:ab:35:a5:77:04:b8:fa:af:
97:5d:21:c6:f1:23:e2:1a:b4:f6:7a:1b:39:02:4d:79:ef:3c:
6d:2e:20:c5:4e:a9:e4:39:19:5f:1a:31:7f:20:b6:55:6c:24:
d1:e6:22:3d:14:6a:5c:43:d4:d0:92:d6:c9:0f:41:6d:83:42:
5f:e5:f4:6e:06:ca:ff:1c:4a:10:cc:d8:93:a8:e8:b9:c1:5d:
ca:00:0f:df:a1:a1:37:2b:45:38:d9:96:73:aa:62:51:38:de:
09:c6:07:3f:c9:16:e6:ea:b0:6b:ca:ef:cc:88:39:ba:b5:91:
dd:1e:47:b3:62:58:07:63:33:bd:b4:ce:30:65:cf:d2:a5:d8:
74:5a:36:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLE4X7ioCMpn0vCYXAFKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkOGU4ZWJkODBmY2Y4ODQ5NzVlNDJiNDZiZjRlNTQ4Nzkz
ZjI5Y2IwHhcNMjUwNTA1MDIwMDI1WhcNMjUwNTA2MDIwMDI1WjAzMTEwLwYDVQQD
EygzOTg2NDQ5YTdlMzY5YzFjYjg2ZjEyNTY4NGM4NmY3NmY2ODVjN2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA109tK3SYwNZc6m+sOI7r4oBeqAPf
0QSbYnjD8aJiS5DwyaKzutJdUdbjdap/mJ/+cnpNsbGqdzgUlNh+oR2HlIiKLyfT
maRvgQJHzOB1ojXLyF2XTwxqTc3y18ZvUgRPF5n8jMJyAYmzrsPAtBEIaChzh+LJ
5dAPCHjkkSfwQlrzpYdUZZO6RvYNFEgMkTae4aYHAvPIRSSZtR4r4uOtTvxn6Ne8
N2EHJKcMmQisCM7BQUNIBpC4dD3EkEYGk7MWVQc6i9stRB3/uXvePDo1Y1zt/+lD
4IiO5FGMZ1HfMjJG72Zt5IvfYdRJSVA0PqC+zVi1o1wBr2OsQrO418CzSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmGRJp+NpwcuG8SVoTIb3b2hcfrMB8GA1UdIwQY
MBaAFM2Ojr2A/PiEl15CtGv05Uh5PynLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgt
Mjg2YTVlZTZlMDQzLzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kYzhmOWItMDZkNi00NGQzLTlhMzgtMjg2YTVlZTZlMDQz
LzEvelk2T3ZZRDgtSVNYWGtLMGFfVGxTSGtfS2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgqhnSjW
EQywwnWDpQQst7DPHU1XmInTIQ2U+a4NJbGKjkv0Y5TcU0j5xdXzrbu3yAubE1ob
w871HEKpR48QHSB3XRWU+/f1VpBCt5BoQ0Sf8UeNohCsVIX46lPjdQGAf1XVEl4k
sll+OdxhCHmMuyjX+/ONrKs1pXcEuPqvl10hxvEj4hq09nobOQJNee88bS4gxU6p
5DkZXxoxfyC2VWwk0eYiPRRqXEPU0JLWyQ9BbYNCX+X0bgbK/xxKEMzYk6joucFd
ygAP36GhNytFONmWc6piUTjeCcYHP8kW5uqwa8rvzIg5urWR3R5Hs2JYB2MzvbTO
MGXP0qXYdFo2qA==
-----END CERTIFICATE-----
Generated at Mon May 5 04:08:23 2025 by rpki-client