Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
File: zPmm0vbNWIp39CNiLmuNHGVLzfI.mft (raw, json)
Hash identifier: pR5fI6dHHFtP/8fWma62RBP6EU/HB91/I4lGQB783fk=
Subject key identifier: DA:71:ED:23:CB:64:F8:FC:6B:C9:B1:9A:92:74:9F:EC:7C:0F:C0:8A
Authority key identifier: CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
Certificate issuer: /CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Certificate serial: 019658DD6434B9B12E88F84DEDB42926C267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 15:00:26 +0000
Manifest this update: Mon 21 Apr 2025 15:00:26 +0000
Manifest next update: Tue 22 Apr 2025 15:00:26 +0000
Files and hashes: 1: 8AaX1oZur1xLUT7FOH4w1HiClyE.roa (hash: ZmZVR5duIhKlHeRuLvV8xQewe9xOIP6Io6cn8nsn8x0=)
2: x51a-tBphj5oeqxqtMYJ9_3xAwg.roa (hash: dokuT2vkCwkEoIqbgmJLQO0fZKjjInT+5d9CuE+kfOE=)
3: zPmm0vbNWIp39CNiLmuNHGVLzfI.crl (hash: lUPrCCRVEsPFxieV499puRXQR24QkhV4PX+1n8A52eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:64:34:b9:b1:2e:88:f8:4d:ed:b4:29:26:c2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf9a6d2f6cd588a77f423622e6b8d1c654bcdf2
Validity
Not Before: Apr 21 15:00:26 2025 GMT
Not After : Apr 22 15:00:26 2025 GMT
Subject: CN=da71ed23cb64f8fc6bc9b19a92749fec7c0fc08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:68:77:0b:57:df:f7:08:22:e3:a4:e9:d9:
0c:bb:a8:13:b4:cd:8f:78:7b:2d:2f:a4:70:47:e9:
cb:53:a5:ad:34:39:4e:65:0d:cd:93:01:92:6e:4e:
38:31:da:1a:f5:7f:99:b8:73:79:8a:7d:9d:c3:a2:
ae:42:d6:29:34:09:a9:df:b6:8e:3e:1d:d0:88:8f:
3a:54:a0:60:1b:4f:08:19:50:6a:97:cc:47:94:48:
5b:5b:5d:63:ae:41:04:69:36:7a:79:3c:a4:ef:e9:
98:8b:47:32:9f:14:9a:05:d6:0a:68:07:45:14:de:
68:6a:7d:8c:5e:c6:24:32:31:f2:7e:32:50:b6:eb:
47:a4:c3:15:bc:55:8c:87:a2:f3:00:a4:47:c3:2d:
67:da:7e:6b:e8:15:63:00:31:5b:f0:26:9a:67:a7:
99:56:3f:f6:6a:8a:e4:d1:c0:e7:51:6b:e8:8f:7f:
6f:a7:b0:12:c4:1a:ec:90:31:d5:3e:d9:03:a6:44:
2f:d4:67:15:0c:40:c7:8a:95:a4:4b:db:86:cb:52:
1e:f9:15:fc:55:75:7a:22:0d:eb:c5:63:1b:1b:1a:
80:aa:eb:70:58:9d:75:5a:df:59:32:70:bd:77:9b:
67:bc:c0:3e:88:c0:2b:e1:c5:32:16:ab:ec:d7:21:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:71:ED:23:CB:64:F8:FC:6B:C9:B1:9A:92:74:9F:EC:7C:0F:C0:8A
X509v3 Authority Key Identifier:
keyid:CC:F9:A6:D2:F6:CD:58:8A:77:F4:23:62:2E:6B:8D:1C:65:4B:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPmm0vbNWIp39CNiLmuNHGVLzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/421e40-edf6-47aa-9abe-1b0f254de619/1/zPmm0vbNWIp39CNiLmuNHGVLzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:43:72:86:d0:30:f9:5a:d5:c9:41:d8:b9:08:de:fb:77:
63:4e:1b:9a:c2:5f:0a:3a:81:75:2f:41:97:4e:b3:ce:71:bf:
4b:dd:48:4f:57:d0:39:c7:fb:a9:50:d7:1b:a2:00:60:35:19:
59:a3:68:95:5c:6d:a6:43:c4:02:a1:2d:bc:fa:09:93:24:39:
21:66:24:12:52:10:25:c5:43:72:e4:fb:09:da:bd:75:43:fc:
12:04:3b:20:f5:c9:3a:dd:c1:02:58:96:e9:1d:b0:da:7d:ab:
9d:2f:84:b9:0a:f0:66:e7:bb:38:64:05:2b:bf:5c:9a:af:cc:
bd:e7:73:78:f2:69:0e:e3:b0:e5:44:01:52:6b:77:f4:0e:ef:
a6:4a:0e:44:b1:1f:bd:95:6e:d8:da:d1:34:0e:6a:cd:06:b1:
c6:4e:3c:72:cd:c9:6e:84:13:79:10:71:e6:66:d2:1b:01:c0:
19:94:53:27:0a:82:10:69:1f:f5:95:c1:07:8a:2c:43:b8:54:
02:e9:aa:70:66:45:7d:7f:43:6a:15:3f:66:cf:38:e8:a2:e5:
90:db:b5:cc:0f:74:b4:f1:49:d1:69:92:ca:87:ff:2a:0e:4e:
fd:bf:d0:50:79:5a:c4:60:bb:c0:e2:2b:92:55:34:dd:91:ef:
36:98:34:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:44 2025 by rpki-client