Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json)
Hash identifier: u+Ug3DyUnI7SY8woIYnhiLEpnLLA9ph1Wur/IgcnJSQ=
Subject key identifier: 26:36:ED:37:00:E9:E1:29:C8:81:79:95:FE:7D:F2:D5:E7:55:7B:D3
Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Certificate serial: 0196C34B468953AF8EF2B2F8F8C34AAD2D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
Manifest number: 0626
Signing time: Mon 12 May 2025 07:00:12 +0000
Manifest this update: Mon 12 May 2025 07:00:12 +0000
Manifest next update: Tue 13 May 2025 07:00:12 +0000
Files and hashes: 1: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: BIzpbolfNjYG9NAvj638eFNdTXjU+NM/ZaXYNtCeMl4=)
2: mhg5tcfc8zTLY1L3UB7WoiOaiSs.roa (hash: hMa9fvero/jvRHGFY757SYKGm5IxN7CAX+N4uzSWh9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:46:89:53:af:8e:f2:b2:f8:f8:c3:4a:ad:2d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556
Validity
Not Before: May 12 07:00:12 2025 GMT
Not After : May 13 07:00:12 2025 GMT
Subject: CN=2636ed3700e9e129c8817995fe7df2d5e7557bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:96:77:e6:a1:e8:5b:0b:61:f0:db:e8:f7:72:
8a:64:9d:e9:e8:cb:57:2b:e8:10:dc:33:32:6d:4e:
b3:30:4a:bd:d9:d3:62:5d:1a:a4:a4:73:6f:89:07:
cd:d4:48:0c:d0:33:15:74:cb:6d:d4:d6:1f:47:68:
c8:c6:7d:c4:ed:09:a1:f9:98:a3:12:ab:48:3a:44:
80:0a:71:27:0b:5e:cb:99:06:1d:bf:12:ee:ad:2e:
ae:6b:c4:67:82:9a:b6:9b:e1:63:cd:eb:78:07:ea:
2e:3e:0c:29:6c:73:75:60:23:e3:09:9c:6c:43:a1:
7b:6d:05:61:25:7a:6c:53:b5:ea:de:91:e8:90:07:
cb:a4:a5:3e:7c:d6:3b:0e:ce:31:a8:c1:01:c9:ec:
f7:32:05:8c:b4:8b:48:ab:4a:a8:12:42:b3:c7:7c:
5a:fa:7c:37:eb:80:7f:fa:10:fb:37:ec:90:78:d3:
69:30:a9:17:25:e4:4c:b5:72:96:5b:d4:36:0e:f3:
24:82:38:21:57:7a:4c:eb:32:76:b5:6e:1e:b7:eb:
08:aa:57:0c:ed:22:d2:f1:86:c8:06:1d:27:40:49:
15:1d:ca:ea:a8:b3:4b:eb:12:1f:a3:af:3a:6a:d4:
9b:79:a6:b7:ea:84:23:aa:cd:02:b0:a7:ec:c7:81:
bd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:36:ED:37:00:E9:E1:29:C8:81:79:95:FE:7D:F2:D5:E7:55:7B:D3
X509v3 Authority Key Identifier:
keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:d8:a0:42:d4:51:d9:ef:5d:02:a6:f6:43:52:9f:50:02:
2b:71:fe:bf:4e:42:e4:d3:3a:3c:f9:6f:84:b1:18:3d:96:9f:
5d:b2:11:0f:bf:28:19:87:f7:d8:47:70:1f:c9:b5:86:84:50:
64:30:83:06:8c:3c:e3:80:a3:a7:2a:16:8b:b4:b5:e4:40:ad:
e5:79:0e:a4:2b:ff:2d:24:cf:b5:7d:5c:f2:4d:4c:ca:7e:3a:
49:8e:2a:59:61:fb:fa:2c:c6:56:8e:b0:c2:ec:ae:00:c8:3d:
9f:7c:38:61:0a:91:e1:5c:28:10:cf:93:b7:08:9f:56:61:84:
dd:47:66:e1:87:3a:da:f8:0c:11:19:2e:98:26:0e:81:1f:9c:
bb:2e:a9:d8:b4:7c:76:99:f6:93:43:d4:80:a3:60:d9:97:b5:
f6:ac:12:4c:d0:45:ac:ef:22:20:4c:06:e6:ae:58:e4:c2:0d:
fa:fd:27:75:d1:1b:34:ce:c7:d4:20:0e:2e:6a:4d:d4:be:7d:
42:ae:d1:73:5d:7a:86:17:97:7a:c6:fe:72:59:69:fe:78:2e:
fa:22:c6:11:c5:b7:d4:e4:8c:bc:01:1d:92:63:3e:71:12:99:
c2:08:e3:52:d0:61:a1:f0:3b:a6:32:9b:a7:dc:4a:ed:d0:75:
95:24:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:56:20 2025 by rpki-client