Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
File: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft (raw, json)
Hash identifier: 62iapZzZocEZ0Ja4LOSOo4DlXXRIuWwk6ZdkjJ+pK2c=
Subject key identifier: FF:6C:F4:19:8C:63:34:FC:A5:A6:CA:8D:84:C7:57:F0:9C:D1:52:B1
Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Certificate serial: 01958EF35F969AD29FC5D9EAA38A8110C7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
Manifest number: 149E
Signing time: Thu 13 Mar 2025 10:01:09 +0000
Manifest this update: Thu 13 Mar 2025 10:01:09 +0000
Manifest next update: Fri 14 Mar 2025 10:01:09 +0000
Files and hashes: 1: DXjpRwrIr-AIU-hjz60qwKsBalA.roa (hash: NfCytqVNN1dq1MNjUSUhA2/UwSVyFAKlp8j11E9ydcQ=)
2: zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl (hash: 9iDmdRo/oHYttD6WeTwv9ym1KNMv8K1fdSZZ8iGbleU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:f3:5f:96:9a:d2:9f:c5:d9:ea:a3:8a:81:10:c7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea
Validity
Not Before: Mar 13 10:01:09 2025 GMT
Not After : Mar 14 10:01:09 2025 GMT
Subject: CN=ff6cf4198c6334fca5a6ca8d84c757f09cd152b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:91:b7:f0:d5:69:69:30:58:ff:2d:40:1a:
16:b3:d3:9e:66:96:1c:55:a1:d6:99:30:c2:ea:fe:
9e:a2:f0:3d:df:18:19:0e:61:1d:b9:17:8d:ac:95:
22:6a:fa:82:98:07:42:ff:b9:41:f7:76:46:0b:58:
ba:65:a0:1b:ab:07:81:04:89:44:f3:ca:fd:da:1f:
fa:31:ed:fe:68:c6:61:1c:ee:11:b3:c8:27:8f:30:
4a:35:b2:23:3b:42:1f:aa:17:6a:00:f4:a9:db:44:
08:4f:6d:78:bd:33:43:db:4d:d1:b7:5c:c3:d8:c6:
35:bc:86:d9:ba:93:fc:59:80:26:e3:74:ac:68:41:
17:53:9a:a9:99:ea:bd:ed:58:89:07:a5:33:44:56:
a5:52:45:eb:2e:fd:7a:67:4c:25:5d:25:ea:3a:ef:
b7:f0:7f:20:d6:b4:3b:80:3b:e4:f3:91:5c:7d:8e:
f9:6d:9a:6b:e9:30:5e:22:bf:b2:93:99:5a:2e:28:
6f:bc:bb:b9:75:19:94:6d:cb:48:c1:4e:b6:0c:c5:
5f:a4:bd:d8:d5:3a:67:cb:17:98:e4:47:12:89:da:
a4:2e:fc:75:06:d8:1c:6b:0c:65:7e:66:21:94:7f:
2b:2f:60:4a:b7:a9:3c:39:8b:58:b3:aa:78:26:b6:
5c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6C:F4:19:8C:63:34:FC:A5:A6:CA:8D:84:C7:57:F0:9C:D1:52:B1
X509v3 Authority Key Identifier:
keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0e:04:33:0d:94:2b:35:ad:8d:a4:af:92:80:5a:a8:fb:20:
8e:53:47:19:c6:30:b2:d3:d0:71:b7:01:75:b4:0c:1a:09:73:
b1:b8:eb:ff:bf:ab:24:3f:f6:b3:8c:47:96:e6:f3:05:ef:a2:
bc:67:d6:a9:34:c6:fe:3d:39:78:a7:0b:b4:b8:a7:28:cf:d2:
f7:7a:47:48:5b:21:6b:72:0a:e0:02:e4:25:5c:d3:94:54:b7:
e1:cb:69:98:de:91:d3:2e:1f:3a:5b:74:07:44:4c:d9:27:eb:
62:55:34:d6:0b:e9:47:57:a8:3b:64:b3:11:8b:7e:11:a4:50:
7d:4c:cc:f1:da:a6:d4:0f:0f:a2:01:4d:c5:73:39:4b:b4:ca:
da:d8:7d:8b:36:b4:5b:bd:ca:e1:13:54:d6:f5:6e:a8:14:74:
ec:34:c2:3d:d6:ad:6f:f3:b2:94:5a:0b:bb:41:1f:31:2a:bb:
c1:6b:61:1d:4c:84:2b:93:97:80:3b:67:94:54:cc:45:ce:c5:
74:aa:ea:a1:98:fa:f4:a5:c1:e9:31:02:9b:f5:97:40:f0:8d:
f4:3b:89:a5:83:58:b9:9e:3a:fc:14:a4:b3:75:5d:16:d2:55:
1b:7e:ea:50:e0:5a:b2:7d:5f:d0:3c:0f:d1:e4:ec:11:74:6b:
ae:3a:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:33:20 2025 by rpki-client