Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
File: ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft (raw, json)
Hash identifier: 18bOtu7YWcuDQ5Zub8LEJY/FowdOTmw2DW5hPjj/ipY=
Subject key identifier: 8A:C2:EF:19:7E:2D:0F:86:82:9D:95:BD:1A:3A:21:1E:FC:5A:34:96
Authority key identifier: 64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
Certificate issuer: /CN=642794c2d2cfa054638ba950a5f668e87601412d
Certificate serial: 01969DF5E19BBA6CC2DFA43A0C42F1802B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 01:00:59 +0000
Manifest this update: Mon 05 May 2025 01:00:59 +0000
Manifest next update: Tue 06 May 2025 01:00:59 +0000
Files and hashes: 1: ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl (hash: 5qgxpW+kXoL6lq0GD6Rd8MFgcGbgAep2PfUkHoK77yk=)
2: b6QMF74wF01wlBWgUywRsmP3cGw.roa (hash: mCNVR2N9fZow4RurrMaom9Uu+qamMdZIjWplYZcfRCk=)
3: gVLVKsEHBgFO0HBzlpPgO1QXFuY.roa (hash: fKAtB5hizqASF48vAvN9nOmMRZOKAzC8UCmGWDZ4vi0=)
4: nCahf5trEXt1Ll4GxNBIlQJyFoQ.roa (hash: jcflcFSB0gGF5Eobckb0cDmbAhuF6soPeVbl+/qaprQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:e1:9b:ba:6c:c2:df:a4:3a:0c:42:f1:80:2b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642794c2d2cfa054638ba950a5f668e87601412d
Validity
Not Before: May 5 01:00:59 2025 GMT
Not After : May 6 01:00:59 2025 GMT
Subject: CN=8ac2ef197e2d0f86829d95bd1a3a211efc5a3496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:6e:2d:b5:a7:15:d7:62:59:a5:b7:fa:b6:
04:f1:b6:0f:ec:40:cc:5a:61:b7:a3:d3:dd:d4:e7:
ae:93:bc:48:46:02:8f:49:f1:c2:3d:19:8f:3d:cf:
a0:c0:c5:f4:4b:3e:26:0d:eb:89:c2:bf:1a:3a:a4:
ae:e9:94:35:f3:54:98:4c:01:bd:d4:b2:d1:c5:60:
fd:88:a6:50:bb:8a:82:b0:a7:bc:57:73:20:45:1d:
b9:00:50:cc:67:f5:1c:6b:c7:e2:e9:d1:2a:7b:a2:
34:3e:c8:bc:13:ee:58:2d:df:f8:c7:ae:ad:e4:e2:
2c:f8:bf:0d:45:e8:eb:53:2f:b8:c1:89:ab:3c:d7:
97:76:d9:d6:95:f7:8f:b1:f8:98:95:ee:82:fa:4d:
8b:84:e2:82:b4:c4:2b:5d:8f:cd:f9:62:4d:47:49:
c1:b1:6b:ef:3a:ac:10:6f:38:00:13:5c:3a:5d:02:
bc:7e:26:02:04:f3:76:a3:b4:05:94:c8:d3:56:f3:
e1:2b:13:21:ce:59:66:41:b8:69:6a:e4:65:ba:ce:
ac:af:37:29:14:4c:fd:d9:54:5f:43:4e:53:9a:1a:
b8:3b:72:77:4b:11:2a:0b:e6:23:d2:91:22:dd:37:
09:15:76:72:d9:14:70:f2:09:83:36:89:eb:6d:d4:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C2:EF:19:7E:2D:0F:86:82:9D:95:BD:1A:3A:21:1E:FC:5A:34:96
X509v3 Authority Key Identifier:
keyid:64:27:94:C2:D2:CF:A0:54:63:8B:A9:50:A5:F6:68:E8:76:01:41:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCeUwtLPoFRji6lQpfZo6HYBQS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f70a9c-1528-4e66-b7a6-061639812c74/1/ZCeUwtLPoFRji6lQpfZo6HYBQS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b4:3b:93:90:c5:a5:ce:44:33:56:64:ef:d5:77:49:3e:5d:
fa:bb:5e:ba:6f:4e:e3:e1:bc:47:6a:50:20:86:e9:34:2e:77:
24:b1:bd:d9:21:0e:de:d9:2a:49:8a:95:2c:cb:f7:c7:c9:4a:
47:6e:27:84:e3:de:4d:66:28:2a:da:5b:58:01:e5:a6:7f:9f:
21:ec:b9:ed:55:a5:d9:e3:98:ef:68:cf:a6:11:a2:ab:fd:cb:
63:3d:6e:a6:c2:f6:d1:af:34:4d:45:ee:83:85:e0:0a:04:57:
00:0c:72:19:76:84:a5:52:64:07:39:bd:83:78:b7:f4:45:14:
96:a0:4c:96:ec:ad:66:2a:0b:0a:88:ed:e1:57:47:29:49:13:
48:42:d9:69:a2:a3:d9:e8:eb:fb:3c:8b:5e:bf:28:98:88:0b:
ab:3e:32:80:6a:4e:14:13:05:f7:3e:79:4d:94:52:24:a5:d6:
78:88:36:f4:86:b1:f7:e2:22:3a:c2:83:a0:f6:99:7f:41:d6:
6c:9f:9b:44:31:5c:25:ce:2f:92:5b:57:45:47:71:99:bb:ec:
8a:af:fe:d6:e2:8c:11:1c:97:43:bd:76:65:31:1f:df:e6:55:
10:bd:25:cd:dc:af:12:d0:52:87:1c:3a:18:db:a4:49:9d:cf:
8f:13:ed:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:58:10 2025 by rpki-client