Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json)
Hash identifier: REgnGOAwq1NChtK535IDVa4QT8STiQBQ2EdsuwYtPOc=
Subject key identifier: 1C:E8:30:04:E5:A5:AC:6D:3E:27:3F:25:FA:66:76:A2:75:53:E9:27
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 0196A352DC5789C03861FB69124B40D21625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
Manifest number: 12AB
Signing time: Tue 06 May 2025 02:00:38 +0000
Manifest this update: Tue 06 May 2025 02:00:38 +0000
Manifest next update: Wed 07 May 2025 02:00:38 +0000
Files and hashes: 1: gKb9DdcRj4oYqZaFfZwKZ6H8uc8.roa (hash: M1RBMZHaP3Km0XU28EIx6tbbE88px/SIXZiJC9Utof4=)
2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: SEMeGlWhi4Ex1uhXzVRg/NWehSIq5zXdbQyRUIS58NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:dc:57:89:c0:38:61:fb:69:12:4b:40:d2:16:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: May 6 02:00:38 2025 GMT
Not After : May 7 02:00:38 2025 GMT
Subject: CN=1ce83004e5a5ac6d3e273f25fa6676a27553e927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:6a:bb:35:47:64:3e:41:c3:9b:06:85:3c:
07:72:cf:93:1a:42:15:3d:ba:d5:ce:be:7c:51:14:
7c:53:63:ee:c3:09:26:9e:fe:95:a7:8c:33:9b:e6:
84:6b:d0:30:9d:8a:9c:9d:71:4d:79:22:06:12:1b:
1c:77:10:e1:37:bf:02:79:27:f8:5c:90:5f:f7:cd:
69:2a:de:e2:7b:b7:73:2c:d3:6a:88:f8:5a:77:a0:
3e:e3:ec:f6:01:21:fc:94:50:b7:4e:1d:d3:7e:eb:
b7:cd:43:0c:e0:e4:f4:fc:0c:d2:b4:bd:fe:79:e5:
a0:00:5f:4d:ab:ff:23:9e:7e:14:ec:dd:51:22:d1:
0c:74:ee:9e:a5:70:45:c5:d5:11:bd:48:18:94:d3:
c4:10:60:63:89:bb:4a:fd:56:e4:ca:d8:bf:11:8d:
25:c2:ba:9c:24:61:64:6f:e0:b3:ba:2d:b7:ba:aa:
c0:e4:59:75:06:7b:12:1c:18:a4:3f:44:ba:d1:49:
66:39:d0:18:d5:74:4f:15:22:e2:8e:80:6f:30:f9:
c9:e4:ac:36:07:b8:fd:b2:ba:5b:d2:fb:1c:e8:2a:
40:76:d8:9d:58:92:9c:2c:41:f9:72:cb:61:46:61:
78:79:62:e0:75:62:36:9c:7e:19:1c:21:88:a5:5b:
df:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E8:30:04:E5:A5:AC:6D:3E:27:3F:25:FA:66:76:A2:75:53:E9:27
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f5:c1:08:52:f8:db:e7:98:cb:c0:25:0d:8e:e8:72:44:ad:
86:77:6b:d7:a9:cd:d5:28:e0:61:48:f9:00:90:5a:58:a7:9b:
19:15:21:26:ba:c6:9c:38:74:f0:da:0c:cc:e4:1b:76:ac:e3:
e8:61:42:17:d5:b9:90:84:36:1e:0b:d3:d6:85:6f:de:50:03:
2d:22:29:56:8c:ec:91:41:61:16:8e:58:e5:54:1c:12:86:01:
cf:b8:07:dc:e0:c1:a9:ba:48:4b:9d:b3:61:91:a0:2e:ae:ca:
20:ef:dc:a3:e1:30:c1:53:14:5c:e0:5b:d8:e5:95:f8:bc:e5:
03:fa:58:73:2b:f3:0f:7a:00:f1:40:e6:46:ef:b8:51:94:e8:
13:36:00:cd:e2:f8:c7:ac:37:46:cf:7c:d3:cb:43:ff:30:d0:
68:5e:25:54:50:aa:08:14:16:df:50:6e:2a:d0:2b:b8:fc:4a:
ba:2d:82:cc:d3:de:bf:9f:f6:72:5d:22:68:19:1c:d3:97:bd:
12:d2:1c:2b:71:16:0a:07:c2:7e:dd:b6:1b:37:0e:fd:a6:64:
52:f5:a7:77:4a:d7:18:f4:7a:3a:7b:c8:87:95:0c:29:36:b7:
99:f5:9d:96:96:5c:bc:dc:70:93:8e:05:5a:a8:12:2d:c3:47:
5c:98:7d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:56:51 2025 by rpki-client