Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: vRpQLdeRYk12l3fOK08G6prMhsg3i0pMq/KhKtfaWeo=
Subject key identifier: 26:F6:DD:76:C7:ED:DD:9B:54:A8:C6:7C:45:9D:A1:32:21:F5:93:17
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 0196B7EC5EE48505F35804228987B6A7CC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 1436
Signing time: Sat 10 May 2025 02:00:43 +0000
Manifest this update: Sat 10 May 2025 02:00:43 +0000
Manifest next update: Sun 11 May 2025 02:00:43 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: YBgXrzTLkFNBdP9XrpwXg3WUW6PJMcxi6LdFnmLst8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:5e:e4:85:05:f3:58:04:22:89:87:b6:a7:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: May 10 02:00:43 2025 GMT
Not After : May 11 02:00:43 2025 GMT
Subject: CN=26f6dd76c7eddd9b54a8c67c459da13221f59317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:d8:51:e8:9b:f0:59:f9:09:44:bd:0f:9b:
36:d9:b3:2b:34:b7:c8:0d:35:1a:01:69:1c:6d:79:
1b:f7:00:91:0a:b9:ff:e9:68:61:ac:a2:9d:68:3f:
da:8f:7f:36:07:f2:68:98:71:7c:3d:48:07:ac:61:
48:d6:6f:23:0b:6b:7e:a6:9a:ba:b5:fe:1a:0d:db:
3d:3a:5c:4c:5c:65:a8:4b:8b:06:40:b3:25:19:fa:
15:93:ae:e0:aa:81:c0:f0:a2:aa:82:40:30:ee:99:
d5:28:07:d1:32:4c:d0:8b:72:3a:5c:f1:60:79:60:
fe:bb:4c:dc:b5:de:08:3f:48:9d:13:1e:e6:ce:33:
9e:c5:9f:68:69:69:3f:e6:ac:78:dc:04:f7:81:27:
db:3b:0e:72:a6:c8:ca:e0:80:ce:85:07:a2:98:49:
3d:a5:d2:e9:ad:b2:4a:a4:70:73:7b:42:36:ff:9a:
9a:d7:60:b3:a0:1c:cc:4a:84:44:5a:db:39:ab:b9:
47:08:19:05:94:65:a4:4b:3f:7f:58:0c:fd:46:32:
c3:ed:fd:ab:3f:4f:9b:32:50:5e:eb:eb:53:3e:a2:
88:41:7b:ab:22:c8:e5:9d:c2:05:85:dd:99:8c:99:
36:59:16:92:81:dc:f7:96:5a:53:6a:bd:e1:4d:aa:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F6:DD:76:C7:ED:DD:9B:54:A8:C6:7C:45:9D:A1:32:21:F5:93:17
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e5:84:30:69:93:24:84:b9:69:66:a3:b9:b2:cf:a7:88:75:
b2:90:ea:12:8e:f4:43:49:71:fc:cc:20:b3:f0:59:f7:41:a8:
77:a3:48:0c:67:a3:88:19:e6:9c:dc:7b:2b:e6:b5:03:93:fd:
42:43:64:b3:b0:aa:b9:21:5c:ac:23:22:7c:a7:ef:a3:97:d3:
03:3f:50:af:c9:3d:9b:e0:ae:52:bb:d5:4e:95:8e:92:19:87:
a4:d6:93:59:d5:4e:24:0f:cf:9d:cb:ff:0c:21:83:ea:1d:37:
52:5a:61:ca:f9:c8:0c:9a:4c:ca:6a:d9:6f:1f:72:9a:a5:1b:
e8:95:5e:07:a1:42:63:1d:37:f0:c5:23:d3:e3:da:12:55:ed:
d4:c2:ed:4a:ee:9f:29:6c:cc:b1:13:f0:cb:90:19:ff:26:d4:
aa:5b:8d:61:0e:9c:9b:4b:d4:1e:2f:84:c2:df:a9:50:c8:76:
1f:64:9f:a9:89:7d:ac:5d:38:9e:f8:9c:96:79:12:50:69:b1:
d8:5e:0d:5d:a3:4f:69:48:22:0f:18:22:dd:3b:26:94:0b:d7:
d6:03:2f:6c:64:44:43:cc:c8:73:6c:73:41:a4:ec:5f:33:f9:
8c:f9:27:7b:3e:bb:6a:11:a0:82:06:f0:50:c3:fa:32:02:e0:
58:f5:a8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:13:07 2025 by rpki-client