Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: RtlKVBLbDfH+X2SIOukvaAkM5S5Z6CLEOIozP7cly5k=
Subject key identifier: FC:0A:7C:25:F6:A7:4E:17:DF:B7:27:3C:86:33:9C:59:F8:25:7D:16
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 0196C15CF75B5CC54795800A248FA7C2BED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 22:00:17 +0000
Manifest this update: Sun 11 May 2025 22:00:17 +0000
Manifest next update: Mon 12 May 2025 22:00:17 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: RwkpJSu9Xb2tBGsnzREjwoqDbPNUR4cXWKDHaq5bveQ=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5c:f7:5b:5c:c5:47:95:80:0a:24:8f:a7:c2:be:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: May 11 22:00:17 2025 GMT
Not After : May 12 22:00:17 2025 GMT
Subject: CN=fc0a7c25f6a74e17dfb7273c86339c59f8257d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:21:fa:f0:69:0a:e6:a8:a9:3f:5d:d1:68:ad:
71:35:fd:9a:ab:62:83:32:b4:8a:59:bc:df:a0:ab:
56:61:88:72:97:96:7a:66:02:c6:11:5d:77:df:ec:
fa:d3:e9:bc:ed:d7:e1:51:15:6c:c8:33:00:67:73:
09:46:6f:de:3d:e3:ff:1f:f1:77:fb:0d:88:74:5b:
69:7c:6d:9f:73:66:e5:a1:ad:42:38:2c:9b:1d:15:
af:4c:4a:db:64:89:1e:06:62:f1:f8:36:47:75:6c:
56:b6:53:22:11:3b:ee:c7:0e:48:02:bd:7a:fe:f9:
c3:d6:aa:ad:5b:73:87:84:23:27:73:b4:12:73:74:
c5:c8:81:2f:f6:cc:ec:1e:90:85:83:ca:4c:d8:5d:
06:29:31:d0:0c:66:c4:ee:38:8d:a8:2f:e1:6b:ec:
f9:72:6c:d9:45:c2:38:92:2b:cc:a4:be:1a:c5:c6:
bc:7b:27:c4:a9:3f:23:f9:0b:b3:4f:9f:c2:9f:97:
46:17:65:c8:fd:33:d7:41:f9:02:80:5b:88:9f:18:
ae:34:e7:35:96:f1:7d:9c:78:66:43:e1:4b:9e:b4:
b9:04:1a:1d:42:77:5c:0d:88:af:5a:c9:83:c0:ef:
d6:4b:2c:eb:1b:eb:0c:af:37:da:aa:19:b2:54:69:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:7C:25:F6:A7:4E:17:DF:B7:27:3C:86:33:9C:59:F8:25:7D:16
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:65:a9:a0:5c:99:58:b8:65:27:4f:93:b5:bd:ea:14:89:75:
49:cb:cb:0c:6a:2c:9a:98:13:a2:f0:8a:f4:0a:e2:d7:0f:b7:
f6:24:e3:4f:61:97:0b:42:5d:ff:7a:d2:77:34:6d:24:f0:7e:
0e:8d:a7:fe:65:31:89:99:2f:d3:59:84:75:d4:35:ec:9a:66:
ad:cf:1a:89:cd:4e:a2:31:ec:bb:ed:c4:72:e9:4d:f7:51:ea:
5d:47:3c:91:39:79:78:39:b9:15:ed:94:f2:04:46:7a:f4:c3:
0f:ac:13:96:62:6c:d2:c2:4e:76:b1:af:05:bd:a3:af:b7:6e:
16:03:fa:2b:4a:13:e6:13:9e:3f:53:59:33:14:68:8a:5f:65:
5d:e3:45:39:a4:75:4b:15:c0:d6:77:e0:27:24:1f:d7:96:4d:
96:28:c4:72:1e:bb:b7:66:ca:01:5e:2a:fb:10:9f:d3:16:b4:
cb:d5:72:b9:98:f9:26:1c:3e:f2:1d:ca:f4:6c:62:84:93:92:
9c:8f:35:4f:26:13:a6:e2:39:4e:79:7d:b5:05:4d:0a:c3:9b:
17:33:f6:38:ef:bd:59:32:16:74:9a:65:65:8f:a2:52:39:16:
db:36:60:1d:7c:56:95:d2:94:e5:5f:b9:e2:80:63:9e:e7:3c:
41:a3:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:34:35 2025 by rpki-client