Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
File: zsyfK4Jf2WfpeMQgknlZX88zLFo.mft (raw, json)
Hash identifier: N9r8IT3AujxJp5qJ+RyFgWTouSSQ4yHSTpG7wblVM/o=
Subject key identifier: 99:F7:B3:5B:E9:84:AF:55:91:04:CA:C1:27:66:90:1D:D9:E3:BB:9F
Authority key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Certificate issuer: /CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Certificate serial: 01965C4C632E9FA2D5AC7CD6EB8E946BC04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
Manifest number: 1494
Signing time: Tue 22 Apr 2025 07:00:32 +0000
Manifest this update: Tue 22 Apr 2025 07:00:32 +0000
Manifest next update: Wed 23 Apr 2025 07:00:32 +0000
Files and hashes: 1: r-LFYkPYLB9SHC2Z1B_qz_trgHY.roa (hash: te2VOfUQNAnLZdAmjhbUK4WhCj5kkTOTXCATaV2iEvM=)
2: zsyfK4Jf2WfpeMQgknlZX88zLFo.crl (hash: hv1juc1/tPW/e2ptZi+LEVdlx46P00MWPKCdt/gGrlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:63:2e:9f:a2:d5:ac:7c:d6:eb:8e:94:6b:c0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Validity
Not Before: Apr 22 07:00:32 2025 GMT
Not After : Apr 23 07:00:32 2025 GMT
Subject: CN=99f7b35be984af559104cac12766901dd9e3bb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:86:ac:b4:ae:e2:81:a6:e6:ee:de:9b:5c:
1c:29:e2:be:d5:e0:d3:ee:1f:8d:51:e4:28:bd:45:
f3:92:b0:78:f0:26:9a:e6:2e:3f:ef:4b:ee:eb:e0:
ac:1f:79:25:0c:0d:f2:54:18:a9:c3:40:e9:68:37:
d5:e4:17:bc:18:64:58:88:37:47:4f:bf:39:51:ba:
95:1c:a7:d2:86:ff:c3:93:47:7f:d8:6e:67:07:f9:
13:60:bb:21:10:98:1a:e4:ff:de:01:aa:02:06:52:
af:90:ab:20:0c:74:f4:eb:66:85:0d:e5:a2:e6:d2:
c7:56:77:df:ee:7a:d1:60:44:f1:77:d1:60:0d:64:
04:89:4f:00:9b:f1:57:2c:98:d2:f2:25:31:44:cd:
c7:84:16:c6:5f:6e:03:e3:1b:d2:e1:93:c1:03:1f:
83:fc:8c:ff:3c:a2:90:38:1e:82:7d:38:78:62:e8:
ee:73:95:da:37:64:e6:b4:5f:39:9c:a1:98:2f:10:
7e:fb:8a:3b:bd:56:44:03:61:c1:a1:73:8c:91:03:
ec:2f:83:bd:f0:ea:cb:61:fc:e2:03:33:66:cd:c9:
57:3d:73:21:cc:95:6f:98:7e:14:90:b7:89:8d:11:
37:94:f2:8e:1e:17:f1:23:61:db:5a:90:7d:c5:ed:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F7:B3:5B:E9:84:AF:55:91:04:CA:C1:27:66:90:1D:D9:E3:BB:9F
X509v3 Authority Key Identifier:
keyid:CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dd:2a:d8:dd:98:7b:c3:64:98:8b:b1:f7:12:ea:fc:3e:e0:
44:cf:48:a6:cb:88:5e:49:19:12:25:c0:71:4e:98:a1:cb:fc:
5b:f4:86:ab:e5:fc:41:50:77:98:76:14:c7:01:8a:4d:6d:b2:
31:cd:58:59:26:3c:dc:22:b5:ce:a7:4c:a6:ac:8a:6e:58:e3:
43:41:f9:bf:a4:b0:4e:7c:1c:76:ba:91:9f:f7:3c:50:95:7c:
94:60:2b:c7:dc:1d:bf:f0:08:88:55:48:98:03:54:6c:a4:65:
5b:00:c0:0a:9d:a8:e5:2c:fb:d3:88:82:c8:7a:f9:eb:93:66:
99:71:a9:59:4c:4a:3c:ac:44:b9:d8:95:12:d8:8d:62:f5:53:
f7:0d:e1:51:21:15:34:89:c7:dd:29:71:46:7d:e3:84:b0:22:
73:47:12:7c:99:76:d4:fc:2b:d8:fc:04:49:7e:ce:ab:fa:38:
7f:8b:b1:cb:d8:6c:27:18:01:4c:40:d9:a6:6d:16:d4:73:aa:
5d:28:f1:b1:8c:90:2b:c4:c1:fe:8d:8d:09:70:8d:3c:9d:e8:
4d:d8:92:c9:e5:de:22:6f:80:a9:6e:fd:57:ff:84:7e:2f:bd:
92:d4:4d:c5:f2:87:2d:ef:7b:55:71:40:e8:08:3c:63:2d:e7:
98:3d:62:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:55 2025 by rpki-client