Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
File: zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft (raw, json)
Hash identifier: dq3uN4xaJeK/ARe2uEdLIGy5CnueZRVZQ/ieXtWzcMo=
Subject key identifier: 8F:32:E7:07:E7:19:99:E0:BB:C6:28:2F:B6:57:C0:7D:51:FF:29:89
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 0196C1CB8C61269512EF54FBDE655024212B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 00:01:04 +0000
Manifest this update: Mon 12 May 2025 00:01:04 +0000
Manifest next update: Tue 13 May 2025 00:01:04 +0000
Files and hashes: 1: 3TjgfHBQ3TSR3m9y0lvASlg8xJE.roa (hash: xhRBJVrNxo2QfSSHQs80HTy1SPE+Tw63EIyLJNfW+98=)
2: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (hash: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=)
3: zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl (hash: dhh4Myf20X6bCsnEdNfFll3fQ5EjwPHqJUcRSrXana4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:8c:61:26:95:12:ef:54:fb:de:65:50:24:21:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: May 12 00:01:04 2025 GMT
Not After : May 13 00:01:04 2025 GMT
Subject: CN=8f32e707e71999e0bbc6282fb657c07d51ff2989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:5d:04:38:6d:c9:98:b4:ee:8a:94:87:e5:
4a:9f:72:ee:27:48:44:e2:ab:e6:b3:b6:84:2e:c6:
b4:21:9d:91:bc:a1:e8:f4:ae:18:05:f1:da:02:f8:
1e:c2:cc:53:e0:f3:aa:c0:ec:97:34:f5:56:c2:98:
a7:6f:30:84:0b:98:02:f6:8f:0b:cd:5a:d2:8d:54:
63:96:d4:7e:e1:5b:34:84:15:c7:2b:8d:2a:0e:66:
73:16:2d:01:fb:5a:cf:f2:30:f3:af:72:29:cd:e4:
5b:48:34:11:4b:9b:38:9d:89:20:8f:99:e6:67:e2:
88:c6:fa:17:1b:aa:5a:a8:ad:3f:e0:7c:2c:23:95:
a1:63:c7:43:16:5e:c5:95:2a:bf:00:37:78:50:4d:
da:3d:fa:15:dd:d0:70:15:5b:eb:ec:30:20:63:6b:
93:50:ab:71:05:7c:99:20:d3:44:12:8e:1e:1c:9a:
38:c0:18:df:ac:6b:0f:ba:15:8a:d9:ad:e6:fd:ad:
93:e0:75:b1:58:fd:e1:7e:4e:ea:e5:43:d6:aa:96:
63:4d:42:6d:f1:9a:1e:9b:fb:5f:ae:30:25:5e:7a:
53:46:f6:55:8f:b7:47:35:33:ab:f4:27:d3:a9:54:
11:64:17:e6:65:42:e4:44:8e:21:c7:b8:f7:1b:ca:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:32:E7:07:E7:19:99:E0:BB:C6:28:2F:B6:57:C0:7D:51:FF:29:89
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:98:29:7f:64:29:f2:9d:63:f9:48:ce:41:9d:33:84:81:d4:
b0:0d:50:ab:75:d0:2e:b6:04:03:69:6a:f8:d2:97:f4:6d:90:
93:82:78:ea:99:43:de:8c:c4:eb:32:e1:3c:7f:cb:79:62:2f:
d7:82:55:05:4f:5a:2f:6b:c4:7e:d0:05:1e:9b:e6:4c:20:c0:
aa:1d:70:86:b3:3f:e2:a5:82:40:24:a8:e9:29:1f:91:56:2a:
ee:53:11:be:79:33:8c:ed:68:9a:3f:36:a8:71:79:aa:3a:a0:
77:00:d1:04:8a:cb:12:e2:34:f7:56:3d:cc:71:fb:a3:bf:74:
15:69:83:8a:07:f5:89:1b:22:fc:c6:13:a6:43:c6:dd:79:25:
04:3d:9f:b8:dd:fd:26:89:f2:ac:8c:85:f4:7b:fe:77:ce:4e:
1c:60:60:22:3e:38:41:08:6f:87:4e:80:bd:58:3b:d0:18:15:
2b:64:1e:ee:c1:29:4a:2e:b4:b9:15:f3:ab:2f:87:cb:c3:a9:
09:67:91:d7:0e:9f:f7:4c:d7:7e:c2:37:a3:03:d5:6c:15:8a:
77:83:0e:a1:2b:9a:1f:d1:14:7f:09:fa:91:40:63:ea:2b:33:
fb:bc:e3:ee:75:03:c1:dd:d8:a9:8c:ea:3a:78:05:6b:83:78:
ba:e8:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 02:22:03 2025 by rpki-client