Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
File: zsY7h6iuwJPb5H3MqShg6oQSKOA.mft (raw, json)
Hash identifier: zrASCh0vSkrYAva0T1qEMBxs4DOyNmU2Z0QpH+qzohQ=
Subject key identifier: 4C:44:94:EA:6A:96:0F:A8:D3:29:58:A4:C7:F3:F3:6C:3B:D9:6F:FE
Authority key identifier: CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
Certificate issuer: /CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Certificate serial: 0196B8FEC05A4E7F81F3E72C653C46DF4A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
Manifest number: 0A3A
Signing time: Sat 10 May 2025 07:00:25 +0000
Manifest this update: Sat 10 May 2025 07:00:25 +0000
Manifest next update: Sun 11 May 2025 07:00:25 +0000
Files and hashes: 1: oDVjxYPm7vPq-9FQVAv-wdPcmhE.roa (hash: SVNTWU/SFE8BeAZ7Bb0M+S0ysWhdx0WLLM1QECYtWDg=)
2: zsY7h6iuwJPb5H3MqShg6oQSKOA.crl (hash: SwuXx02N1ZmsoffslQkiBOQvQ69Ha7pMw+xG8vp1Z9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:c0:5a:4e:7f:81:f3:e7:2c:65:3c:46:df:4a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec63b87a8aec093dbe47dcca92860ea841228e0
Validity
Not Before: May 10 07:00:25 2025 GMT
Not After : May 11 07:00:25 2025 GMT
Subject: CN=4c4494ea6a960fa8d32958a4c7f3f36c3bd96ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:ba:b2:08:c0:85:e9:98:ee:e4:a6:31:31:
7b:c7:be:9b:91:c3:69:7e:6f:cf:4b:fd:dc:cd:4f:
3c:aa:d4:ee:c6:f3:3c:fb:67:dd:45:66:18:9d:e2:
2f:0b:0c:3b:34:2e:cb:ea:03:5a:af:84:60:25:a5:
56:be:5e:92:8a:e3:89:a3:e2:b7:a7:80:4d:4d:73:
84:58:f2:eb:df:36:86:46:8b:d5:d9:f5:1c:59:94:
01:e3:00:c2:69:74:c1:14:cc:e7:f4:2d:35:b3:2c:
f8:03:75:26:02:ee:3c:93:11:3c:4e:68:7b:f9:a8:
37:a7:ad:1a:79:73:9a:15:65:9d:4b:4f:b7:a4:b1:
ce:0e:75:3d:ec:d1:a3:d0:f7:1e:6b:9e:95:3d:ca:
e0:67:77:80:3f:21:a5:50:40:1f:9f:63:20:bf:d3:
58:e1:a4:91:69:3e:71:09:25:e9:87:31:4d:a6:0b:
d3:8e:48:4b:19:19:91:04:d8:be:f1:e3:6c:0d:1f:
8c:84:4c:b5:c3:c0:49:11:dc:25:e1:e7:f2:cb:23:
8d:f5:54:c3:98:09:39:e1:3a:3b:f3:38:0a:64:f4:
cd:58:30:6f:cd:23:e3:c6:60:91:f3:bc:71:37:fe:
af:81:e8:cb:76:6c:1b:ee:e8:70:8c:66:cc:6a:51:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:44:94:EA:6A:96:0F:A8:D3:29:58:A4:C7:F3:F3:6C:3B:D9:6F:FE
X509v3 Authority Key Identifier:
keyid:CE:C6:3B:87:A8:AE:C0:93:DB:E4:7D:CC:A9:28:60:EA:84:12:28:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsY7h6iuwJPb5H3MqShg6oQSKOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a82f43-502b-42fb-88eb-83bd66f4e6f6/1/zsY7h6iuwJPb5H3MqShg6oQSKOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:de:7c:0c:be:84:63:fa:10:5c:9a:21:d6:eb:34:0e:80:e7:
65:5e:ea:62:64:86:9f:b1:c7:a7:8d:f2:03:c3:fa:9e:d5:a3:
1e:6c:c6:c2:02:41:72:aa:92:20:fa:c3:a8:23:0b:7a:a6:fe:
ad:c6:0d:8f:e0:c2:ae:f3:b2:56:ff:d8:f6:e6:df:e9:10:0c:
51:b2:2b:50:f5:40:42:59:96:94:08:3f:cf:92:09:5f:13:bc:
73:25:07:0b:45:db:c2:70:e6:5a:6b:39:96:c7:f7:1d:dc:51:
51:a7:0c:5b:7f:6e:8e:59:46:00:e7:dc:aa:11:1a:89:13:e6:
b3:06:fd:c5:55:0e:1f:bd:37:31:b2:d8:24:f0:b2:5e:c9:c2:
d3:f7:bf:9a:65:5a:9d:98:71:f6:0e:6b:bf:30:f5:36:34:cf:
71:cb:74:cc:7c:02:c1:b2:8c:ae:fc:54:e1:c4:c1:df:93:02:
3f:03:bb:19:78:4b:a6:36:63:4b:7e:ec:fb:db:a1:d2:fd:76:
ea:4d:4b:95:21:a7:ac:02:20:59:4c:9b:2c:12:6e:3e:12:e5:
89:28:b3:c1:a3:bb:76:d9:56:88:e4:60:ac:c1:1b:f4:30:71:
42:a3:23:25:04:78:5e:f2:4f:b8:1f:05:01:25:30:fc:48:e4:
be:10:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:12:43 2025 by rpki-client