
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
File: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft (raw, json)
Hash identifier: qpHl+Ceiy9pLLVY5DIy4f2vznCyPPURYb7QM20zgxkw=
Subject key identifier: C2:F6:3E:03:AC:96:C7:7C:17:AD:CC:7F:C4:C8:CB:A4:96:32:F9:BC
Authority key identifier: CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
Certificate issuer: /CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Certificate serial: 0196CA97656F741AE7658C3F81FD724C6A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
Manifest number: 03C6
Signing time: Tue 13 May 2025 17:00:41 +0000
Manifest this update: Tue 13 May 2025 17:00:41 +0000
Manifest next update: Wed 14 May 2025 17:00:41 +0000
Files and hashes: 1: R7JjHxkLaRMAq-eNFDHFR56Dyhw.roa (hash: QknjqXJUcPnKm7YDFtc8WvDMm5i4FQMrmsy86E9cK0o=)
2: dcPmo2XYjicBKISwFo1ah0M8EAk.roa (hash: dxaAbmfm7We1eLkAnEaZ1vpiKLgIut7Bw847FmfAdkc=)
3: zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl (hash: 3bu9BvSsjXz51LFiaAIR1330XioMTVw5mQ9GIxKMvgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:97:65:6f:74:1a:e7:65:8c:3f:81:fd:72:4c:6a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd398f7f3d5b3b82dcfdec902b03f733d895dae7
Validity
Not Before: May 13 17:00:41 2025 GMT
Not After : May 14 17:00:41 2025 GMT
Subject: CN=c2f63e03ac96c77c17adcc7fc4c8cba49632f9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:8c:69:63:df:4d:79:62:09:03:c6:35:e6:
12:60:e4:87:72:83:3d:38:d3:62:e3:8d:d4:7b:d1:
31:99:41:c4:67:24:71:7d:5a:be:7c:77:93:b2:b2:
34:cf:08:56:56:93:0c:2a:d7:d4:e8:3e:f7:3c:d7:
2b:6a:a3:70:30:47:ef:3e:09:65:e5:57:3a:5f:af:
18:72:15:b5:63:22:ce:6a:17:b7:4c:68:6c:b5:a0:
81:fd:c6:a9:a6:67:86:52:06:f2:5d:c3:b9:d7:ab:
f9:8c:a9:96:98:9a:6f:ad:93:5e:81:fb:07:bc:05:
66:f4:95:0d:04:ca:ee:82:8b:e2:b0:bf:f2:74:c8:
bf:7b:ea:cc:b8:98:1c:8a:71:6f:c3:0f:f5:1a:dd:
62:86:4c:5a:6f:3e:4e:99:f5:05:c8:47:04:c9:f9:
19:48:30:a9:3f:e5:c8:79:dd:b6:d5:98:23:15:65:
03:d7:6d:81:ff:52:e5:04:77:15:8e:27:c6:a7:38:
d1:16:92:d2:e1:56:2e:a8:a0:09:7b:e5:64:d8:54:
1c:18:0b:f7:d0:0e:7a:99:94:5e:8b:48:6c:14:cb:
2b:33:6a:47:a7:38:e5:46:d3:09:67:c2:1f:13:94:
60:b3:da:09:f8:8a:83:65:bb:bb:14:7e:dd:7c:54:
14:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:3E:03:AC:96:C7:7C:17:AD:CC:7F:C4:C8:CB:A4:96:32:F9:BC
X509v3 Authority Key Identifier:
keyid:CD:39:8F:7F:3D:5B:3B:82:DC:FD:EC:90:2B:03:F7:33:D8:95:DA:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/18d955-e992-4fa0-bba0-ac58b287fb64/1/zTmPfz1bO4Lc_eyQKwP3M9iV2uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:26:8c:d7:01:23:ee:12:e8:0c:fa:2d:3d:18:4c:94:1b:3f:
07:2e:46:02:48:e7:6f:df:b7:fb:56:e3:4f:f1:75:b4:0f:07:
45:c3:dd:0f:ff:88:62:e4:08:1f:44:1b:ee:56:2f:ba:8a:b3:
83:f1:60:e1:34:10:19:0d:13:83:9e:4a:50:a5:98:9b:fd:12:
5d:2f:bd:bc:ac:94:91:eb:27:a8:2f:ea:4b:20:29:e1:05:18:
6f:3c:2d:dc:5d:2d:3b:14:43:a2:bd:bb:89:05:d6:1a:c8:89:
23:4d:1e:c9:b4:4a:16:7a:15:5d:9e:3a:2a:2d:6d:94:6c:40:
6b:d7:d9:e6:67:b7:3e:ac:eb:27:2e:7d:9a:78:2e:28:74:2c:
2b:dc:36:ca:9b:26:1d:dc:54:2c:84:23:ed:54:df:fa:ce:b2:
3c:5f:d1:78:e2:f2:6a:2f:44:a3:a5:a3:04:5c:35:29:42:27:
4b:4e:00:89:d3:57:a0:95:be:bc:92:cf:0a:c7:81:f2:57:10:
3b:99:a3:38:d2:4e:8e:31:04:f2:eb:25:ca:43:6c:64:a9:77:
6a:aa:a4:68:02:c5:d4:25:76:9a:2f:77:f4:ed:4f:4d:5a:74:
46:dc:a3:0b:4d:a2:ee:2e:15:ad:2a:17:ac:9c:8c:a7:f0:44:
70:9a:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:31:23 2025 by rpki-client