Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: 2+gm3VUe9KF+yyGxr/KTDoV0Ud1YzeLnai9mmjEqgtw=
Subject key identifier: E6:94:97:D1:39:C5:84:DE:FD:E2:F6:B2:C4:83:53:54:D4:63:88:E2
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 0196A6F89B58E4CDA99F9A5FF5126D8EC931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0B16
Signing time: Tue 06 May 2025 19:00:32 +0000
Manifest this update: Tue 06 May 2025 19:00:32 +0000
Manifest next update: Wed 07 May 2025 19:00:32 +0000
Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: abjluTGMdpqte8HtHpUDp+yI+Mvjkk47zuQcw5Bbyw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:f8:9b:58:e4:cd:a9:9f:9a:5f:f5:12:6d:8e:c9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: May 6 19:00:32 2025 GMT
Not After : May 7 19:00:32 2025 GMT
Subject: CN=e69497d139c584defde2f6b2c4835354d46388e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:c4:04:7a:bc:59:71:8a:5e:b2:ba:47:9b:
18:5e:53:b6:89:c0:7d:6e:8a:ae:4e:82:b8:43:cc:
db:e4:02:8e:21:9d:d5:9c:e2:f1:45:8a:50:6f:e2:
bc:d1:b0:26:9f:f7:b0:a7:9c:c5:1e:0f:97:6a:fe:
b3:67:ed:01:ef:54:5d:17:6e:7b:dc:24:24:f2:62:
40:a3:54:8b:5d:a7:a0:1c:60:40:3c:f5:63:cf:cb:
0d:68:6c:4a:83:f0:3c:b3:e1:2e:c3:ec:4a:dd:86:
80:f3:75:eb:91:54:7c:4c:47:77:b9:53:19:97:8b:
69:15:c9:d0:0c:a3:46:07:2e:0e:0c:f0:33:d2:5c:
d5:96:83:43:7d:8c:4c:61:04:f3:df:70:fd:9f:fc:
67:22:e6:43:34:a9:6a:57:a2:82:8e:c1:a0:ff:fd:
7d:55:3c:e5:d6:06:32:1d:c7:24:ad:7e:69:89:dd:
5a:56:70:b1:78:e5:13:6f:bb:9b:13:7e:5c:5c:55:
5b:1e:d8:c0:9a:ef:34:a5:a8:ca:3d:e2:a6:90:f3:
70:51:06:1f:7b:34:e8:43:86:94:95:85:e8:7f:73:
8c:ce:9c:28:ce:45:5a:f5:cd:ec:f2:8f:c3:59:ef:
e8:ad:44:28:1e:08:a6:3e:a3:52:fc:d7:26:6f:7a:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:94:97:D1:39:C5:84:DE:FD:E2:F6:B2:C4:83:53:54:D4:63:88:E2
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:85:0d:5d:5f:15:52:65:bd:09:c8:e9:bb:15:f1:2d:bf:cb:
6d:83:04:8f:06:38:ff:09:ef:3c:f9:ce:4d:e2:18:c8:58:49:
0c:2a:fc:b7:0a:d0:32:d8:6d:89:3e:49:ff:93:5b:c1:af:1c:
75:91:22:5f:86:df:cc:eb:26:74:f9:f0:2a:e8:c7:cc:b5:a6:
f4:03:34:c5:17:86:3b:d4:3e:49:d6:6b:e7:38:14:7d:18:10:
bc:8b:ea:b7:19:9d:b8:c9:a2:8c:e1:01:72:66:20:b6:41:75:
d1:d5:64:57:14:a4:25:b3:cd:13:1e:f9:f9:b6:ec:b5:c7:e7:
99:90:e9:71:17:65:aa:a0:71:36:23:bb:39:11:3e:ce:4c:c1:
2f:c8:e4:9a:02:37:7a:8e:94:47:ec:e4:0b:1d:01:38:18:41:
86:99:78:88:73:a5:9d:fb:db:c1:84:ae:18:da:4a:6c:ca:4f:
72:c3:91:d0:b2:6a:e7:27:94:49:1d:31:72:b8:22:74:f7:c3:
ad:c0:3f:84:4a:3e:3f:0b:ed:1b:ba:4d:5c:a3:d0:5f:b8:e6:
0f:5b:a3:3b:a1:e7:75:6a:09:f6:be:86:72:0e:55:47:5a:ae:
dc:0b:69:46:60:95:26:42:7c:11:40:82:ee:6c:83:bd:25:0e:
8f:49:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:19:06 2025 by rpki-client