Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
File: zEDZYkKwgu_ltPIliCCzBZOWGY0.mft (raw, json)
Hash identifier: 85kxgGXI7K/q9R87AqMRD3kL8hXMMKXYNtJQNFyyWmo=
Subject key identifier: C0:68:01:F3:2A:A8:9E:A2:72:14:8B:E4:E5:3F:37:1D:41:ED:DC:7A
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 0196A954C122DA655E9C3724261A88D0CA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
Manifest number: 152A
Signing time: Wed 07 May 2025 06:00:25 +0000
Manifest this update: Wed 07 May 2025 06:00:25 +0000
Manifest next update: Thu 08 May 2025 06:00:25 +0000
Files and hashes: 1: E-7nk5OKQny9W_bEEmUe46EIcfs.roa (hash: cEU0S6nlC1/hdoqfbgIZpy0a5hGCyF6U3fW531GaMKQ=)
2: Jb_gFPV2he7uZ_D9dGgBvUqstrY.roa (hash: 76/q3p10jkYhjXz60HYg6xHRHGQY02emHt13PPRY/0Y=)
3: zEDZYkKwgu_ltPIliCCzBZOWGY0.crl (hash: J10CddnhdRsm+7nweDdZgJmxlx05ubbf2dQ5W62RCxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:c1:22:da:65:5e:9c:37:24:26:1a:88:d0:ca:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: May 7 06:00:25 2025 GMT
Not After : May 8 06:00:25 2025 GMT
Subject: CN=c06801f32aa89ea272148be4e53f371d41eddc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:d7:5b:85:25:4f:fe:59:a0:f7:c6:a9:bf:
77:56:a2:9b:1b:56:f9:77:8c:7c:5a:e1:9f:ee:22:
08:45:d4:1e:6f:c0:0b:e1:ef:8f:48:e4:12:68:e0:
35:2f:a0:93:f2:92:b3:8a:85:a3:b7:ac:18:91:f3:
c8:0d:83:98:0a:60:a7:f6:22:6c:17:88:ba:24:7a:
8d:98:47:75:07:05:a0:63:2e:32:ef:d9:9b:98:db:
82:4e:b9:13:18:9c:ed:49:7d:71:10:cd:87:eb:c7:
c5:2f:e4:b1:f7:88:49:d9:da:a9:22:a9:cd:bb:27:
af:c9:16:9d:92:f7:42:cb:30:4a:95:6a:91:48:91:
c6:08:3b:e0:89:03:f5:3e:13:1e:8c:ae:17:28:21:
24:34:23:a3:01:84:dc:fa:7c:65:a3:65:7b:05:11:
64:32:40:59:74:67:86:b9:77:04:95:78:63:92:d9:
cd:42:1f:05:55:67:a2:0f:45:1d:8c:8c:b1:59:8f:
8e:b6:6f:20:53:53:19:d4:df:ec:8c:78:9f:73:36:
2a:00:4c:fe:6b:64:86:1b:47:0a:76:94:ef:a4:62:
bc:95:b0:75:ef:ab:bc:3b:ca:e9:61:b3:a6:86:46:
3f:88:a3:ff:17:15:76:28:d2:36:61:b8:62:53:af:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:68:01:F3:2A:A8:9E:A2:72:14:8B:E4:E5:3F:37:1D:41:ED:DC:7A
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ec:aa:86:86:df:db:48:69:c8:d3:96:01:00:96:8e:e1:a7:
2e:04:1b:52:f8:15:09:60:94:3d:e3:30:27:3c:c9:7c:41:c9:
f7:77:5e:04:3c:f5:1b:6f:32:d6:73:c4:d1:e7:ef:f8:51:a1:
30:0f:ef:d3:99:05:55:02:9b:6e:09:ad:c3:ac:66:c4:15:a3:
fa:5f:96:e1:a5:b3:48:7c:f3:53:09:1e:db:ea:8e:fa:be:da:
74:3c:cc:ea:fd:e6:59:ce:35:bb:1c:56:94:4e:e3:02:c0:c3:
51:0f:94:f7:5f:b3:0c:f4:04:3d:b3:5b:0c:61:4e:cd:6c:84:
d5:78:e7:48:3b:25:ae:97:7a:03:9c:7e:e6:0d:ce:55:f1:aa:
0c:f9:e6:5b:ab:22:cc:a1:e5:2b:70:47:22:ad:d9:ea:8a:54:
4d:23:ca:0e:12:5e:b9:e4:f2:10:1a:7f:37:49:49:0e:4f:31:
99:7c:58:18:ec:88:29:b4:2a:8f:d8:01:36:47:04:3a:d8:e5:
83:29:31:95:af:0c:9f:02:a2:3a:2c:30:2b:c4:62:4e:76:91:
6c:c4:0a:9d:31:fa:3a:d6:e9:24:ec:52:55:80:b3:4e:4b:a6:
95:96:bc:45:97:2e:f0:03:80:fe:e5:4b:b9:31:7f:1e:b7:8b:
35:11:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:50:40 2025 by rpki-client