Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
File: zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft (raw, json)
Hash identifier: J6tXrxVh1sdNc1DPTLNhKVs7v6Eltv+5hpM5IZ6jIZ4=
Subject key identifier: E7:8E:BC:4D:FC:D9:22:73:26:83:AE:94:8C:B9:E4:13:61:80:56:3A
Authority key identifier: CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
Certificate issuer: /CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Certificate serial: 01960F0DA68DBC80B3ABDDD3219A96278976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
Manifest number: 11E7
Signing time: Mon 07 Apr 2025 07:01:14 +0000
Manifest this update: Mon 07 Apr 2025 07:01:14 +0000
Manifest next update: Tue 08 Apr 2025 07:01:14 +0000
Files and hashes: 1: Njt0C_REwUu3SbLYdsWOldKXTok.roa (hash: FKU9goGKUIXguBLGBxGdYgnZkFhCbVsBMNq8D5V01Qo=)
2: zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl (hash: QHBlrGif3xhtt1Fm4aAppjbyUMCr1I99A9gsRYJN5nU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0d:a6:8d:bc:80:b3:ab:dd:d3:21:9a:96:27:89:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccffe64f42a9f04b9fd6cd758372a1db5cd8b191
Validity
Not Before: Apr 7 07:01:14 2025 GMT
Not After : Apr 8 07:01:14 2025 GMT
Subject: CN=e78ebc4dfcd922732683ae948cb9e4136180563a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:7c:85:64:f1:0b:b6:27:ea:3c:d5:c5:4a:
08:b9:52:d5:eb:76:48:d4:2a:5e:a5:4e:75:e4:52:
b5:80:8b:6f:44:c9:56:1b:dc:ad:7a:82:21:1c:ef:
98:26:e5:22:ad:4d:85:94:cf:1c:10:77:8e:e2:bd:
42:73:45:ec:4b:0b:f8:fd:0e:9e:85:5a:15:04:11:
a4:fa:45:9b:11:75:1d:7e:e6:3a:7d:72:3a:29:f1:
b8:02:12:9e:42:1e:90:19:0f:9d:32:70:e2:af:d0:
3c:ae:f3:50:85:e9:39:c1:f4:b4:5e:82:56:bc:65:
d0:54:bb:e7:95:e1:22:7d:99:51:d2:38:76:d1:93:
c4:35:d4:d0:10:25:b6:fe:4e:9b:2f:37:fa:5c:c0:
2e:bf:22:ff:e6:71:39:45:aa:ca:8d:b0:33:3e:6f:
11:bd:ae:a4:71:f5:b8:e4:96:21:03:c3:a8:2b:8f:
b2:bb:ed:09:6e:21:bd:af:3e:7e:85:7a:d0:7a:a8:
08:99:17:aa:45:2f:1d:8e:d2:1f:a6:ee:a6:7e:8d:
7d:88:b8:74:2c:88:4b:16:42:4e:63:15:48:04:0e:
87:7b:8c:d6:a2:f9:ca:1e:68:2c:da:90:c1:61:9d:
07:b5:9b:85:e9:c2:48:70:12:7e:18:0b:5f:f0:70:
2d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:BC:4D:FC:D9:22:73:26:83:AE:94:8C:B9:E4:13:61:80:56:3A
X509v3 Authority Key Identifier:
keyid:CC:FF:E6:4F:42:A9:F0:4B:9F:D6:CD:75:83:72:A1:DB:5C:D8:B1:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zP_mT0Kp8Euf1s11g3Kh21zYsZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/364ab5-de95-4259-8927-9d2e42f7f9ac/1/zP_mT0Kp8Euf1s11g3Kh21zYsZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:01:37:ff:10:48:ec:91:60:b3:9c:7e:9a:8b:6e:f0:d2:b4:
e4:3c:91:bc:3e:50:10:23:f9:e9:bd:b1:a7:58:ed:7c:26:08:
1d:bf:4c:c9:86:eb:a9:af:a3:bd:19:72:53:23:d9:38:81:f8:
64:9b:a0:f3:1e:86:4c:b1:98:5c:23:af:59:38:b7:5c:dc:83:
68:00:f6:49:1d:48:26:c1:6d:80:f2:fc:15:34:a5:9d:34:f5:
fa:17:2a:9c:9b:81:56:cc:9a:b3:c5:59:24:ae:6d:bc:23:45:
96:44:ac:61:b8:a6:ca:d1:4f:50:3f:0d:52:9a:cd:65:16:f7:
c0:4d:b4:2d:d0:9c:4e:e7:ba:97:49:37:04:fa:bb:01:90:14:
28:bd:00:ef:f9:12:cd:d6:8c:b7:13:7a:25:8c:7d:ff:b9:5f:
58:01:0b:58:d0:28:a0:f7:83:2f:7d:86:e3:f7:c4:0b:b5:b2:
9a:47:1d:a4:45:fd:87:ec:41:63:1f:e6:98:e7:45:a4:8a:8f:
9f:6d:0d:63:4a:f3:cc:10:cd:48:29:a3:4e:b6:7b:45:ee:5a:
82:67:27:ec:51:0b:ef:88:ec:94:60:62:64:42:c9:6b:62:57:
7e:40:5c:72:01:96:ed:47:0d:a9:ab:e0:84:83:59:20:d8:34:
45:11:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:06:53 2025 by rpki-client