Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json)
Hash identifier: ynsx7rEEvl9zqaGb//W1Xuwdjc5iI2i2o7ZPyrV3rxQ=
Subject key identifier: 3D:18:F4:37:E9:E6:C9:48:7B:2B:53:65:34:A9:5B:D7:31:37:B7:5A
Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Certificate serial: 0196BB91BBBDA03CACB050DACD390C4E299A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
Manifest number: 0E86
Signing time: Sat 10 May 2025 19:00:12 +0000
Manifest this update: Sat 10 May 2025 19:00:12 +0000
Manifest next update: Sun 11 May 2025 19:00:12 +0000
Files and hashes: 1: 393YoA_-TG1rJW7pJiXVZZOcLRE.roa (hash: /h7+NJqveZtwZnIhU53gy4Hhcp46zP11eq1lYDwDpdg=)
2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: UGaCSEScsdTfBiQbgFAEXxN/Kw3lXJKUv/jR0EWbo7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:bb:bd:a0:3c:ac:b0:50:da:cd:39:0c:4e:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1
Validity
Not Before: May 10 19:00:12 2025 GMT
Not After : May 11 19:00:12 2025 GMT
Subject: CN=3d18f437e9e6c9487b2b536534a95bd73137b75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9b:e9:63:53:f1:59:87:4d:0f:54:a6:00:d1:
ef:3e:7b:77:5c:16:2c:d0:13:2e:3a:f3:93:a9:fb:
dc:2b:07:8c:12:b3:70:d3:05:01:31:bc:29:3f:1d:
0e:6f:82:3f:cd:64:80:0f:17:03:ae:40:46:b4:75:
79:00:21:64:53:cd:27:20:55:9a:20:f2:cd:17:9c:
5d:3e:d9:74:c5:46:e7:e7:be:7f:12:d0:5d:e1:97:
fd:b4:e4:74:86:59:58:13:26:fa:a1:9d:97:5b:2c:
1e:4d:3e:b2:5c:4f:a1:4f:05:09:e5:a8:44:3e:bc:
be:00:ed:b3:57:6d:1b:77:df:53:f3:f3:71:47:f9:
86:f3:d9:e6:5b:ee:23:88:49:2e:71:4a:63:86:8e:
80:37:ec:36:99:14:4c:c8:45:65:f7:e9:4b:e1:76:
72:70:fd:e5:0d:e3:70:61:66:7d:1b:78:03:87:45:
be:67:74:00:53:01:3f:d1:ab:03:b1:69:65:18:b7:
f4:ae:24:cd:70:7c:cd:69:f9:a9:8c:2c:36:c6:04:
cf:ba:04:68:da:f7:14:42:f8:55:b9:c7:63:9d:73:
10:99:45:9e:54:4b:e9:41:5e:d0:02:ad:72:63:4a:
df:87:a4:1d:17:9d:c4:8c:8c:94:14:9e:a0:5d:12:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:F4:37:E9:E6:C9:48:7B:2B:53:65:34:A9:5B:D7:31:37:B7:5A
X509v3 Authority Key Identifier:
keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a7:92:e1:4e:b3:9e:be:66:c2:48:ee:c8:70:3b:5b:db:10:
69:a6:34:fe:18:60:8e:59:6e:b0:09:1b:2b:3f:1e:2b:b6:c2:
55:63:2c:f0:21:6c:68:b4:f9:40:72:4e:45:88:f3:1d:9a:d8:
e5:b5:dc:cb:ce:82:22:f1:e6:39:b9:cb:78:dc:9a:6f:1e:0f:
61:f6:41:ab:97:33:a6:ca:43:59:1c:fc:28:ec:78:35:39:8a:
cc:71:c8:06:7d:ac:9a:89:fa:03:ca:f4:e1:8d:b6:49:50:3e:
b4:8c:7a:88:45:4c:c8:e0:55:b8:d9:16:5d:08:d6:01:7c:3b:
c6:48:15:4b:87:1b:e4:f6:68:a3:33:64:57:43:c6:b3:01:77:
05:86:fd:d1:e4:81:91:e9:11:55:c1:f9:92:e6:0f:a3:db:49:
3e:bf:33:e3:b7:78:d8:c4:c0:e5:5f:af:bc:8e:12:81:71:2c:
bc:42:97:a0:c7:b8:33:6a:48:5a:a6:b4:2f:30:db:6e:58:7d:
ad:8a:5f:20:43:d3:db:0e:3c:31:c6:87:77:1d:fa:f6:fd:d3:
a2:fd:3c:21:f4:3a:48:41:94:a6:b7:86:ed:f9:d6:a6:92:e7:
a8:d3:92:90:f9:c7:6c:6d:da:76:f4:b0:a3:dd:0e:a5:ab:02:
dc:2a:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:33:46 2025 by rpki-client