
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json)
Hash identifier: ++7I5d84duPDzTMrYvp2S0DOJZHFxW1IEXJ8Z9xN/Ag=
Subject key identifier: 94:E8:9B:8D:E2:8A:9F:C5:0E:E5:E2:AE:74:76:AC:4D:D3:09:E0:BC
Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Certificate serial: 0196458D62E7F4FA3C377C085BFDD7950B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
Manifest number: 13B6
Signing time: Thu 17 Apr 2025 21:00:15 +0000
Manifest this update: Thu 17 Apr 2025 21:00:15 +0000
Manifest next update: Fri 18 Apr 2025 21:00:15 +0000
Files and hashes: 1: AuI1_5gu81vs3cIDXIzNbaWND-I.roa (hash: lsSEgLcY/ack618oc/9NRlphXCxEIj/Wq+gUEc772OI=)
2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: wh3ymqaJ0Ezac1Ub/vO3LuMYyY6DX4KzVuYeIfxFpEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:8d:62:e7:f4:fa:3c:37:7c:08:5b:fd:d7:95:0b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e
Validity
Not Before: Apr 17 21:00:15 2025 GMT
Not After : Apr 18 21:00:15 2025 GMT
Subject: CN=94e89b8de28a9fc50ee5e2ae7476ac4dd309e0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:e8:cd:48:0f:43:07:be:8a:af:af:3f:36:
6a:8f:06:a0:48:44:62:5b:e0:9b:fc:a0:d5:35:46:
c4:93:65:26:bf:af:54:1c:d1:d0:86:4b:32:5b:7b:
4b:b4:88:c4:62:7e:2c:96:63:8e:84:12:b1:29:f6:
41:66:92:91:df:76:2d:c9:b6:e0:73:bc:22:2d:99:
1b:13:b4:64:bc:7b:e4:89:38:d5:8c:ba:c1:3c:0b:
d9:4b:f0:f2:5f:c8:e2:ed:b3:a2:98:46:86:73:b2:
d9:11:95:67:1f:d9:75:98:bd:89:d1:07:5d:19:8e:
75:df:4b:eb:bd:50:70:b9:a9:23:2a:39:3b:68:84:
ee:22:34:cb:e6:ab:92:2a:62:03:37:27:79:4e:f4:
be:bd:ba:3c:5b:01:95:7f:7b:42:35:f2:fd:2a:23:
ae:36:81:b1:4a:fe:d6:46:42:6f:93:37:bc:2a:15:
08:e6:38:c4:74:65:cd:cd:ca:b8:3e:d3:45:eb:e8:
6c:a5:83:bc:a2:29:ee:fa:1b:70:6a:0e:66:37:a4:
88:0f:58:28:52:2f:3e:05:5d:0c:c3:bc:e0:98:79:
e8:d6:79:61:5d:96:9f:f6:90:02:07:ef:43:22:33:
13:32:c6:fc:aa:68:29:ad:02:f2:ca:0b:66:e2:a8:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E8:9B:8D:E2:8A:9F:C5:0E:E5:E2:AE:74:76:AC:4D:D3:09:E0:BC
X509v3 Authority Key Identifier:
keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:db:4e:57:e0:24:da:9e:97:aa:04:06:92:a8:1b:0a:ab:a9:
1d:65:68:9c:b1:d1:19:9c:35:8c:50:cb:23:b2:8e:e7:ff:60:
3a:83:43:96:a6:58:fe:c1:87:58:f8:56:a7:5c:10:e9:10:b8:
91:0a:a6:98:5d:5f:e5:aa:d4:31:04:55:43:f3:37:4a:6b:53:
a1:4f:f6:bb:5b:a0:c7:c9:13:7c:39:14:a4:44:b6:6a:db:b8:
a2:54:e1:96:6b:34:24:28:35:a6:18:0d:bd:44:74:9d:cf:13:
2b:25:a9:28:ff:2f:46:c2:43:1e:02:4a:b9:79:b5:43:94:74:
ae:8d:a2:ba:45:b0:3f:ff:84:0a:55:9f:bf:59:01:22:c4:7b:
42:27:4c:b3:69:b9:d4:28:06:dd:6e:68:b5:3c:5e:0b:0d:eb:
63:1d:3c:9f:d8:63:e1:04:62:16:5f:0a:b8:ae:c8:78:99:92:
43:86:96:a0:57:bc:5d:f8:33:3b:fc:b7:30:dd:fe:7b:65:85:
55:bd:0e:19:dc:b9:bb:98:65:45:75:59:aa:23:0d:ae:b9:b2:
30:82:d9:e7:d5:f7:91:f0:c8:b4:85:f0:fb:23:b8:ef:2e:56:
75:93:00:57:23:9b:0f:75:9d:ae:ad:56:b4:b8:75:46:a3:c0:
09:db:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:03:17 2025 by rpki-client