Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
File: ZCOaUQhPGytcaEZDysFGIXx5-NE.mft (raw, json)
Hash identifier: 03uFCjBPgzz0uwWiRXmyJ67pAnRKrCWFWAbKr6hfhYI=
Subject key identifier: D0:39:E3:DF:AB:B2:5A:F5:A6:AB:97:1E:4D:3D:7A:D7:FA:93:53:87
Authority key identifier: 64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
Certificate issuer: /CN=64239a51084f1b2b5c684643cac146217c79f8d1
Certificate serial: 019655A5529742595ACE486D307EFB4554ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
Manifest number: 0839
Signing time: Mon 21 Apr 2025 00:00:19 +0000
Manifest this update: Mon 21 Apr 2025 00:00:19 +0000
Manifest next update: Tue 22 Apr 2025 00:00:19 +0000
Files and hashes: 1: 1WnsILYxjGfpft24w4cU0Z9HVy0.roa (hash: mXH7nwV2vIU6tKBb8bErNfD249HtR3Br3nGu9VJRl4A=)
2: ZCOaUQhPGytcaEZDysFGIXx5-NE.crl (hash: lT8aU4wQGoBSMW5k/YXFjTtwy32+xIvKtJ1sJeJ8ZeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:52:97:42:59:5a:ce:48:6d:30:7e:fb:45:54:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239a51084f1b2b5c684643cac146217c79f8d1
Validity
Not Before: Apr 21 00:00:19 2025 GMT
Not After : Apr 22 00:00:19 2025 GMT
Subject: CN=d039e3dfabb25af5a6ab971e4d3d7ad7fa935387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:b3:a2:46:4c:0a:39:96:c8:2d:d3:f1:b1:
e1:36:99:e0:f7:b8:99:69:c4:99:96:fc:73:6a:6a:
d0:44:e8:56:b5:84:55:3e:40:5f:d6:7b:09:d9:3b:
04:b1:a4:bb:64:39:96:e1:00:ff:1c:08:54:1a:3f:
19:a9:62:73:f4:9f:a6:2b:c1:57:b5:c6:30:d4:fa:
9b:6c:4d:4a:40:d5:e2:f3:e4:bf:b6:84:35:2c:d3:
86:c9:ac:ca:d8:c2:e3:15:ee:58:05:6d:de:7b:7e:
9b:0a:18:11:ee:fb:2b:96:72:28:02:d4:b0:be:b3:
78:b0:44:cb:16:86:ae:97:e4:25:6f:a2:ad:5e:93:
67:44:68:d7:21:7a:f4:6b:b1:e2:fe:f9:10:b3:f0:
d1:85:e2:7b:21:07:22:d5:5d:57:39:c7:d1:1a:00:
f6:20:8c:67:e9:c4:49:1a:9b:ee:cc:59:79:ac:9c:
0b:64:b5:61:38:63:80:db:dc:bf:aa:79:ba:67:fa:
44:8a:2e:c3:6c:53:46:0c:84:ec:6f:30:49:47:29:
2f:aa:9d:38:38:2b:e5:64:0a:bd:99:da:c6:93:ec:
2f:28:3f:56:1f:12:bc:b9:ec:21:0b:f4:ed:8e:e3:
6c:dd:ad:34:12:4a:10:2c:6f:4a:c3:37:37:d0:0b:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:E3:DF:AB:B2:5A:F5:A6:AB:97:1E:4D:3D:7A:D7:FA:93:53:87
X509v3 Authority Key Identifier:
keyid:64:23:9A:51:08:4F:1B:2B:5C:68:46:43:CA:C1:46:21:7C:79:F8:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCOaUQhPGytcaEZDysFGIXx5-NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/31dc10-5663-4555-a806-4e9305caf1a3/1/ZCOaUQhPGytcaEZDysFGIXx5-NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8b:5a:15:75:a8:83:54:3c:b0:e4:fd:fa:ad:01:aa:f8:d0:
21:1f:28:35:49:d9:8d:71:9a:2b:61:35:d0:16:6e:71:e6:e8:
b6:ea:4b:8b:48:91:ae:b4:80:29:f2:7b:7e:66:45:cb:85:fc:
8c:bf:61:ac:56:d2:0b:1f:3e:a7:aa:fe:58:41:76:45:7d:d8:
d6:84:b6:d4:f4:eb:74:ae:66:0c:75:0e:b9:0d:88:a0:96:d7:
37:71:5f:ee:22:65:d5:28:67:f4:31:bf:cf:4a:0e:3b:fb:7c:
84:a7:23:f4:4d:f2:77:76:99:9a:3c:7e:74:dc:b5:96:65:3d:
2b:30:da:81:02:d7:97:bf:a3:9f:be:59:50:db:09:2d:5f:23:
69:bd:c0:ea:46:75:a0:7f:ab:16:d6:6c:e8:ae:e0:fb:db:04:
12:cc:7a:67:eb:4f:da:ef:75:81:73:e9:1b:10:cc:d9:b3:22:
72:9c:0f:63:b1:80:7d:65:8f:90:b4:eb:5f:cf:4b:34:b0:ed:
c0:ac:12:fa:32:c6:10:e1:71:bd:28:a7:05:41:44:36:e1:c0:
60:b0:07:b9:d3:97:03:43:b3:5e:92:4c:a3:1d:a8:26:8b:ae:
fe:17:87:d9:71:f3:ac:af:ed:bf:5e:f0:00:86:ff:68:0d:23:
5e:65:35:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:45:20 2025 by rpki-client