Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
File: zM32UWI31CXprjgX7LFB9IF3PBI.mft (raw, json)
Hash identifier: kCWM54SnECYzM1xZ7uhZIArMkOfUAYhMgokXqhdkQCw=
Subject key identifier: 95:89:36:91:70:4A:79:6F:7E:C5:F2:EB:CE:0B:5E:D1:C7:62:B0:B5
Authority key identifier: CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
Certificate issuer: /CN=cccdf6516237d425e9ae3817ecb141f481773c12
Certificate serial: 01969F75B18CFF564165E7A7A357A6159B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
Manifest number: 0E90
Signing time: Mon 05 May 2025 08:00:12 +0000
Manifest this update: Mon 05 May 2025 08:00:12 +0000
Manifest next update: Tue 06 May 2025 08:00:12 +0000
Files and hashes: 1: pDhGAUUYTY1UyjFCug_VA9YXDfc.roa (hash: 6QASzR15fgb6kzzjuyGG0IHeby7n6I+Zv7YlWcP1xhM=)
2: zM32UWI31CXprjgX7LFB9IF3PBI.crl (hash: 4SojaeYE1oO62VTE9X4zQlx6q4rhBS3fCctxE91QdBM=)
3: zX5SsCvbtwgH75QXuBUCbtdy6Ww.roa (hash: wvJG3iztzAVZHUfCx2K+W5TdCzTlwS3eoby1xR0ldnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:b1:8c:ff:56:41:65:e7:a7:a3:57:a6:15:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccdf6516237d425e9ae3817ecb141f481773c12
Validity
Not Before: May 5 08:00:12 2025 GMT
Not After : May 6 08:00:12 2025 GMT
Subject: CN=95893691704a796f7ec5f2ebce0b5ed1c762b0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:9d:d0:13:ec:77:cd:82:9e:65:14:1c:6c:
44:15:d7:e3:9f:e5:9a:b8:e2:8d:c6:e2:8b:1a:13:
04:03:10:fb:06:6f:da:80:de:9e:2a:29:1d:28:8e:
78:59:de:99:2a:77:9d:b8:8e:ba:c4:22:ee:4f:87:
83:43:8f:2b:5e:33:54:9e:2a:db:ed:83:74:5f:d9:
54:4d:4f:9c:a4:00:f5:a4:ab:81:41:e8:ed:bb:22:
13:cd:0f:c8:7d:47:dd:42:f1:2d:3e:1d:e1:51:27:
47:61:ba:44:e8:15:80:19:19:01:ac:25:2d:a0:4d:
1d:ee:80:65:46:21:6d:5c:95:3c:c2:6c:99:b3:44:
3a:ed:47:5b:2c:17:2f:99:dd:dd:f3:9c:b3:94:a5:
a4:94:ec:0f:88:4f:ba:38:e7:7f:86:28:ff:76:e3:
81:82:2a:c3:6d:e9:f1:29:cc:63:d9:0d:1d:09:14:
45:49:c1:93:43:c7:aa:a1:00:f0:f0:a7:8f:cb:a8:
75:c7:58:71:4f:51:39:88:35:f7:4f:aa:c7:38:52:
bb:f1:02:51:03:e2:a3:84:70:8b:c8:87:3b:d9:52:
4d:f7:85:6b:93:31:b4:83:97:d7:ca:13:cf:d9:d6:
f5:6a:2e:90:89:cc:03:e5:af:bc:f6:c4:3b:9a:c9:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:89:36:91:70:4A:79:6F:7E:C5:F2:EB:CE:0B:5E:D1:C7:62:B0:B5
X509v3 Authority Key Identifier:
keyid:CC:CD:F6:51:62:37:D4:25:E9:AE:38:17:EC:B1:41:F4:81:77:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM32UWI31CXprjgX7LFB9IF3PBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3b7485-8b74-4d50-974a-1b501520532b/1/zM32UWI31CXprjgX7LFB9IF3PBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:80:b2:62:da:5f:47:af:5e:6c:8e:14:dd:51:60:79:ad:10:
51:c7:e7:59:ca:68:df:9a:68:a1:a8:ec:ce:dc:df:8f:4f:02:
47:9c:40:f6:d5:02:77:23:92:b5:ad:38:0e:40:b9:92:43:33:
6d:5f:14:a3:52:99:55:2b:38:c5:9f:30:6b:29:40:ae:19:c0:
07:f0:ac:03:21:74:cf:fd:7b:6b:ea:08:51:c5:60:86:53:c5:
2f:64:1f:cb:9a:81:1b:f4:97:e3:92:ff:de:1b:88:ec:59:1b:
a7:f1:23:65:28:09:bc:87:bd:b8:9a:5e:1e:20:38:fe:c2:fb:
ab:7f:a8:fb:5a:82:b6:78:df:c4:0c:65:77:c8:a2:91:3f:f1:
89:9d:a4:20:8b:f6:88:01:a6:ae:e9:2c:1a:7a:88:e5:59:b8:
ae:f9:f1:44:2e:e7:a9:ef:6a:c9:52:f1:c6:fa:db:9e:c5:05:
33:27:32:f3:d3:07:d3:dd:9e:f3:72:64:3e:17:c1:23:e1:b4:
ac:66:a3:9e:a0:00:30:0a:bd:10:35:b5:ee:5a:8f:75:a6:b6:
20:c7:7c:ef:0d:33:0b:e3:62:fd:5a:df:45:8d:f3:f5:63:c4:
b4:d9:04:e0:d9:b3:b4:92:ef:e1:ef:f6:21:ed:2f:5e:f5:a5:
5e:5b:70:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:58:37 2025 by rpki-client