Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
File: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft (raw, json)
Hash identifier: Zq8GHpeG5iXvuD9pPgCDB1ZWrbrXmYqBVkwtVN8vzMQ=
Subject key identifier: 44:F7:7E:C8:33:20:CD:FC:8E:D5:18:D9:C7:05:D7:A7:67:06:51:F8
Authority key identifier: CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
Certificate issuer: /CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Certificate serial: 0196AA9EEE3D6BE524B32BA86D8B2840E119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
Manifest number: 152C
Signing time: Wed 07 May 2025 12:01:04 +0000
Manifest this update: Wed 07 May 2025 12:01:04 +0000
Manifest next update: Thu 08 May 2025 12:01:04 +0000
Files and hashes: 1: d_ez2cyGpZurFZ-hpnWjbzeo_AA.roa (hash: BKsaK8mj+d0uYjbNGmD8zcdEWfPMS3oZwiGIKYpkp0U=)
2: z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl (hash: u2NsslX74Bj1pSW7v09oD0wIMUQR7UCNJ14xIXf7pYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:ee:3d:6b:e5:24:b3:2b:a8:6d:8b:28:40:e1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf58cbc4aae3f80c49b372911a8d44861cdfeecb
Validity
Not Before: May 7 12:01:04 2025 GMT
Not After : May 8 12:01:04 2025 GMT
Subject: CN=44f77ec83320cdfc8ed518d9c705d7a7670651f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:22:bf:cc:fc:f7:01:28:9e:de:95:8d:aa:
fb:a9:2f:b3:ef:8e:90:d5:3d:42:ea:01:b2:03:6a:
ce:8a:0e:00:6e:eb:9f:21:6f:7e:c5:bb:c6:60:13:
c7:eb:5b:13:eb:1c:f1:b4:ac:af:14:88:35:25:e4:
9b:5a:a9:83:70:2e:a9:33:66:98:83:ac:f0:89:ab:
87:3f:5a:78:19:a5:97:61:e1:b7:9a:b8:78:5c:a1:
8d:e5:72:4c:be:ef:ab:3a:76:26:eb:8a:49:9e:4f:
6e:a4:21:8f:53:34:3c:f7:b3:0a:0d:93:50:44:7a:
6d:c9:9a:df:c0:fe:78:5f:fc:3b:0e:72:21:1c:fc:
cb:94:c5:7e:e6:62:df:6e:37:fc:fd:90:2b:5c:84:
2b:ab:05:a5:48:4e:bb:2c:ef:24:1b:78:47:29:83:
68:02:88:7f:8b:31:37:9e:d0:d6:a5:0c:ac:6b:96:
19:0d:88:8a:13:ef:07:0b:6a:7c:f0:99:ce:99:e3:
23:ab:61:d4:71:c7:54:d2:00:c4:58:f6:89:ad:98:
25:76:74:50:3a:54:1e:2b:e4:de:04:85:fa:36:c6:
97:f5:a0:1a:78:76:01:fb:40:38:f6:1a:4c:cf:cf:
2e:98:4b:6f:18:f7:20:45:0f:8f:ba:7d:d7:b8:19:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F7:7E:C8:33:20:CD:FC:8E:D5:18:D9:C7:05:D7:A7:67:06:51:F8
X509v3 Authority Key Identifier:
keyid:CF:58:CB:C4:AA:E3:F8:0C:49:B3:72:91:1A:8D:44:86:1C:DF:EE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5ca328-f114-4b3f-b8ba-50d7d94e2b9f/1/z1jLxKrj-AxJs3KRGo1Ehhzf7ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c9:35:40:bf:e9:3f:a9:ad:a8:3a:f9:20:53:4d:38:bc:96:
13:0c:e4:fb:23:d3:bf:a5:39:fa:6c:dc:05:b4:e8:a0:13:d0:
7f:4a:53:01:b8:86:b3:ed:40:bc:1c:0e:d1:8b:a9:0e:c7:78:
5b:af:7b:00:6d:29:6b:e5:39:fe:26:45:d6:a4:d1:9e:5a:b1:
df:41:8f:88:a5:76:3a:51:96:2b:6b:1a:ab:a9:2f:5e:a1:1a:
c8:1c:c9:75:41:e9:36:82:3d:19:3b:6f:f9:e7:95:62:5a:d2:
35:db:20:3f:a4:9b:90:6f:c9:73:b2:be:89:70:d6:77:cf:a3:
cc:9e:fa:0e:e2:ea:88:ae:0c:57:07:04:8d:b9:81:c5:32:5d:
3f:77:09:6d:b0:2f:15:79:94:fc:41:17:d0:ad:8c:14:fe:79:
fe:48:85:7f:4e:ff:d3:59:2c:4d:0f:d4:31:20:d1:89:a1:f9:
eb:62:bb:09:13:bd:5b:9c:28:c6:ad:80:20:7e:4f:94:46:d5:
10:67:f4:53:af:0d:00:71:4b:77:d4:0f:0c:24:60:e5:a0:6e:
17:24:df:90:bf:9c:d6:11:5f:15:b2:9d:80:7d:0b:67:0d:d0:
ee:12:28:c1:91:f0:25:89:7e:63:97:7c:dd:fc:a6:09:2b:71:
aa:6a:26:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:22:28 2025 by rpki-client