Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
File: Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft (raw, json)
Hash identifier: voJ0+gco/xyIBYioZUQSU2VUWfzmFOaUXdOSABADr00=
Subject key identifier: 89:1E:57:F8:41:9D:8D:1C:0A:17:28:C4:D2:96:DC:6E:D2:F7:AA:21
Authority key identifier: 66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
Certificate issuer: /CN=668da92f99b5407f28a2f36613e849447a93f6b9
Certificate serial: 0196B10EB944AD04DE1D4E7C123636E2E075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
Manifest number: 1532
Signing time: Thu 08 May 2025 18:00:54 +0000
Manifest this update: Thu 08 May 2025 18:00:54 +0000
Manifest next update: Fri 09 May 2025 18:00:54 +0000
Files and hashes: 1: Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl (hash: fN5JfDC1Xejgkl+IYd+yXWQK8UOs5kREMpYiBym020k=)
2: kwXk5lchLSQusIqWIc1_LElpPmw.roa (hash: ruCSMnKApmMujFMc/KrEw7+q84O8Se1YB2oZOAhAAA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:b9:44:ad:04:de:1d:4e:7c:12:36:36:e2:e0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668da92f99b5407f28a2f36613e849447a93f6b9
Validity
Not Before: May 8 18:00:54 2025 GMT
Not After : May 9 18:00:54 2025 GMT
Subject: CN=891e57f8419d8d1c0a1728c4d296dc6ed2f7aa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:ae:c1:73:28:fe:1d:48:41:6b:56:5e:4d:
61:26:71:81:6b:3c:04:f8:0b:3b:55:3b:f8:34:6c:
9d:c0:b4:8d:67:57:82:62:d4:63:da:70:24:02:21:
a6:06:6c:b8:78:ad:75:47:65:e0:27:c1:79:a7:df:
aa:9c:5a:6c:ae:50:f0:d2:c5:3b:3a:fe:d0:12:ca:
51:cd:4a:cd:2b:04:16:9f:b2:bb:1a:3c:82:5d:79:
4a:1b:72:f9:df:6f:b2:60:a2:8d:5c:18:8c:23:0d:
60:bf:4a:f5:d3:4d:71:fd:98:c5:c7:9b:b3:87:9f:
ee:4e:4a:4c:30:64:78:17:fb:18:7d:4c:39:df:05:
49:41:f3:53:46:b6:60:d9:06:a4:77:e4:43:10:12:
da:4f:13:9e:c9:18:90:99:ab:95:4d:6e:94:98:d6:
67:25:e3:0b:80:6e:2d:71:15:ff:cc:f6:70:4a:aa:
32:a3:1f:64:93:af:e0:f8:57:c6:7e:be:51:69:93:
ef:f5:ec:bc:0d:45:2e:e2:ff:80:8e:41:20:86:25:
08:cf:da:a1:7b:34:bb:27:84:2b:40:8c:57:34:4e:
91:84:33:7c:67:44:94:2a:72:13:9d:1a:f6:b6:aa:
7e:83:e9:6d:51:1f:a8:0e:db:75:f2:cb:fb:d7:17:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:57:F8:41:9D:8D:1C:0A:17:28:C4:D2:96:DC:6E:D2:F7:AA:21
X509v3 Authority Key Identifier:
keyid:66:8D:A9:2F:99:B5:40:7F:28:A2:F3:66:13:E8:49:44:7A:93:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo2pL5m1QH8oovNmE-hJRHqT9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c6e00e-81cd-4c00-aff1-dc8e83e629f2/1/Zo2pL5m1QH8oovNmE-hJRHqT9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7e:4d:15:95:80:dc:11:78:1d:93:ee:3e:4e:a7:5a:1f:62:
98:0c:9b:e3:ad:92:7a:9d:35:5c:93:35:1e:2e:39:68:a3:80:
52:e6:da:b2:89:1f:e8:8f:01:3f:f3:b0:ae:04:fc:a8:45:29:
16:88:6a:93:53:d0:6e:cb:53:db:95:19:97:4c:c7:ff:7d:7f:
a3:65:d7:53:23:6e:b5:0e:e7:05:a2:a6:9e:16:c5:6d:1d:a2:
c0:00:ce:b1:22:54:ec:74:17:36:70:76:19:b1:cc:06:7e:eb:
75:47:10:1f:dc:0e:24:65:0e:dd:06:67:4a:01:3d:63:28:75:
d6:a8:b6:ff:5f:22:38:f1:26:f1:33:0f:1f:3e:41:28:12:32:
d2:97:3d:68:b8:dc:61:21:16:dc:45:39:06:29:17:99:ed:39:
49:b9:48:66:ad:44:a9:e6:25:92:fc:9a:be:5e:b1:2a:00:d6:
b5:d8:f6:bb:d3:d4:83:3b:71:61:90:bc:99:b3:81:57:b8:f9:
c2:2d:7a:f7:34:13:bf:50:52:48:8c:bd:38:71:a9:a6:5e:36:
fd:f3:de:ac:3b:08:c4:f6:47:de:50:7a:82:f0:df:25:1a:6d:
76:b1:14:63:34:67:03:23:f1:81:66:b5:37:84:b2:48:d6:d1:
ab:fd:2e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:41:38 2025 by rpki-client