Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
File: zIHVTcD9FqySU0uaeA4mdksvj3s.mft (raw, json)
Hash identifier: cejhwsCLh7wsK/ihj6SxxM/UJt/5p2q8/DfvDsg9FtE=
Subject key identifier: 96:5D:C1:8E:89:CD:97:EE:B4:A2:9F:76:E1:C3:CE:E3:AB:5A:71:B5
Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Certificate serial: 0196C34BE94044C2B324D093F9E513A50C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
Manifest number: 0F32
Signing time: Mon 12 May 2025 07:00:53 +0000
Manifest this update: Mon 12 May 2025 07:00:53 +0000
Manifest next update: Tue 13 May 2025 07:00:53 +0000
Files and hashes: 1: zIHVTcD9FqySU0uaeA4mdksvj3s.crl (hash: 6PCUJU1FDzwtLI+Ff7l4EfBmAUPlmhg/IVbfvgMMH90=)
2: zc4Ly4ZSumRQTJBfuAeYEW7TEYc.roa (hash: EgP68fSUBBXlJuUGr4bTlwk3uiBoJBQFQ6/v7VJHcgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:e9:40:44:c2:b3:24:d0:93:f9:e5:13:a5:0c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b
Validity
Not Before: May 12 07:00:53 2025 GMT
Not After : May 13 07:00:53 2025 GMT
Subject: CN=965dc18e89cd97eeb4a29f76e1c3cee3ab5a71b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:66:9e:8c:0e:87:5a:cd:24:3e:ae:aa:0e:
f8:c4:14:1e:96:57:d3:92:59:55:93:fc:43:97:0c:
f7:a5:1c:b9:df:62:6d:4d:88:1e:c7:d1:a7:d9:9f:
7e:53:29:a7:76:df:eb:fd:f1:38:c9:16:c8:38:78:
b4:bd:74:c1:74:e3:6b:ca:d2:57:10:32:26:bc:93:
6d:21:a2:ec:d9:85:dc:49:94:c8:79:b6:6a:85:e3:
b0:b5:0f:35:e5:e9:28:ac:91:06:e2:c1:5f:8c:e4:
af:6c:cd:60:d8:e7:93:6b:d1:7e:14:be:e1:29:e2:
4f:4a:09:4a:5c:b9:e8:6f:31:3e:99:11:d0:22:ea:
c2:74:59:49:a3:fb:25:67:d6:44:77:b4:ea:3a:1d:
4b:b4:98:35:8b:9d:9c:73:5d:1e:87:2a:00:01:3b:
ec:f2:dd:07:74:69:3a:09:f2:fb:41:04:ff:d7:fe:
68:2f:be:8d:78:2d:18:34:39:cf:f6:61:f9:21:f2:
87:90:22:dd:3c:c7:26:6f:81:ff:50:a1:7b:62:33:
ff:eb:92:25:a1:3f:d9:d2:fe:d6:bc:59:04:33:0b:
23:bb:12:b9:d6:9d:f0:28:0a:39:41:d3:00:17:a5:
40:97:e4:fd:23:28:4e:2b:7c:a7:bf:77:be:4d:d7:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5D:C1:8E:89:CD:97:EE:B4:A2:9F:76:E1:C3:CE:E3:AB:5A:71:B5
X509v3 Authority Key Identifier:
keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:3e:c2:ca:d9:1d:d5:4e:a3:65:f5:8d:cb:83:8d:ba:97:
41:36:1e:e2:4c:70:4a:65:0b:78:0d:5e:11:e8:91:af:34:e8:
9b:19:00:8c:74:ed:37:71:25:b2:c5:f2:08:42:37:38:57:04:
72:fa:2b:35:ae:c6:bc:a7:7a:a1:1a:d7:aa:cc:a3:a4:0e:06:
e6:18:f5:bc:8d:ef:39:40:b0:47:f2:e2:69:7e:22:b3:37:7d:
e0:50:58:56:3b:48:9c:8e:e7:86:c6:0e:25:3f:14:0d:eb:f0:
c7:11:6e:29:8d:9c:d7:a2:be:07:c0:b1:14:e0:13:9d:43:8f:
38:dc:d7:d1:c2:b4:2f:52:2c:21:09:6c:8c:8e:ac:df:65:b8:
bb:21:24:9f:51:26:09:d7:d1:f1:6f:82:8a:fc:55:51:47:a5:
8d:03:91:18:f3:22:a7:62:30:f9:c6:a3:40:97:86:04:2f:f9:
ec:a0:7d:3b:bb:3e:8d:d9:89:c9:bf:69:11:28:93:1e:f0:0c:
39:30:a5:82:fd:35:8b:6b:6d:64:19:02:30:26:c5:cf:4c:51:
b8:61:a5:75:c5:03:7c:ba:02:a8:c2:f9:e6:81:81:5a:4e:51:
b0:fb:c7:83:c3:37:8d:e6:ac:9b:3c:d3:ac:8a:b3:ad:f2:f7:
ba:22:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:51:38 2025 by rpki-client