Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json)
Hash identifier: 6sXSXcbjaJ5/lAjRuuFFMFml21V1E9uRtYyqLcmuMa0=
Subject key identifier: 56:BD:FD:C2:F8:54:BF:4F:F3:42:20:64:E0:5A:18:E7:50:0C:A6:70
Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Certificate serial: 019651C927FFAEACE025F245B27186E9A8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
Manifest number: B1
Signing time: Sun 20 Apr 2025 06:00:59 +0000
Manifest this update: Sun 20 Apr 2025 06:00:59 +0000
Manifest next update: Mon 21 Apr 2025 06:00:59 +0000
Files and hashes: 1: ckBMIFhsxRrJd8g3723Ngrkob0E.roa (hash: 2+AxiQZG50JBBA5rPTQbIhRHNAnVw7yeAiKa0FFBttM=)
2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: TCYYo9gXM6eVdT6HyfYvRfyZZKCPQM564BWBUXrBans=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:27:ff:ae:ac:e0:25:f2:45:b2:71:86:e9:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832
Validity
Not Before: Apr 20 06:00:59 2025 GMT
Not After : Apr 21 06:00:59 2025 GMT
Subject: CN=56bdfdc2f854bf4ff3422064e05a18e7500ca670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:d6:d7:32:aa:e9:b3:d9:cd:ad:93:f4:59:
3d:a9:73:bf:62:a5:cf:52:7e:ab:77:e5:24:dd:22:
1e:b0:25:28:db:0b:06:56:de:1a:d5:0a:63:4a:86:
91:91:ba:91:fc:28:d0:ef:24:fc:78:aa:43:c4:3b:
a5:4f:91:31:87:dc:69:c1:a6:8e:92:be:27:46:d2:
68:fe:27:29:35:bb:52:6b:4f:67:c9:35:30:61:d3:
81:9e:c1:df:f7:c2:4f:e7:1b:5c:f0:ed:00:88:65:
40:cc:47:9c:41:ee:5d:61:b7:1a:6c:00:9d:64:16:
87:51:87:90:1b:97:5a:66:ab:f8:b8:13:77:21:c4:
e0:34:a7:bb:09:d0:96:cb:fa:ce:bb:de:0f:61:b5:
50:f3:41:77:ea:82:45:9e:ec:22:d7:7e:d2:03:35:
51:77:12:d9:5b:af:a0:23:3b:ef:a7:f7:2d:ce:52:
e7:73:7e:57:0a:92:55:eb:b1:9b:0e:ab:46:c7:3b:
b0:23:b2:d9:c9:1a:ac:22:4b:62:83:ff:58:0b:d9:
8a:ce:b3:b3:1e:d8:f4:e1:36:4e:88:1d:97:56:88:
c8:26:38:ca:62:63:5f:a5:44:e2:14:31:1c:a8:e1:
bb:6b:28:62:f2:ad:7e:bb:79:a1:bb:54:3c:d3:5d:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BD:FD:C2:F8:54:BF:4F:F3:42:20:64:E0:5A:18:E7:50:0C:A6:70
X509v3 Authority Key Identifier:
keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:94:45:88:27:ca:f9:79:2c:c5:78:e6:58:57:5e:98:0c:ba:
31:23:11:83:57:66:79:a3:42:3a:ba:1f:c5:13:16:35:c6:84:
30:65:0e:da:bf:74:ab:e1:d4:5d:2c:fd:b4:c0:ce:c1:1e:ca:
60:19:db:41:91:f4:8e:46:4d:4b:32:5b:be:0f:de:05:42:fd:
ba:8a:70:45:45:2f:da:66:44:3e:8e:4c:d0:79:44:bb:81:5b:
af:29:81:06:28:53:8b:e3:0c:cf:67:d7:64:79:0a:2d:fd:7a:
a4:9d:b3:4e:c7:59:f2:47:ff:da:9a:74:cf:13:bb:b5:f8:77:
88:6b:0c:42:04:8d:f3:de:c8:16:f6:5f:a0:46:42:67:51:ec:
7e:fa:5d:86:0f:5b:6d:9b:8b:2a:2a:4d:a4:c6:1d:2e:e8:08:
b0:bd:fe:8c:97:31:4c:15:8d:1b:50:0f:77:10:87:e8:f9:53:
d2:e5:48:73:7d:42:58:93:f4:8e:52:6e:92:88:04:38:60:7a:
47:2d:47:d0:1d:30:e6:dc:d5:6c:1e:39:d0:4c:f3:22:40:9f:
ed:9b:95:04:4f:3f:f0:e9:5c:98:05:9e:b5:3f:98:84:3b:2b:
e4:3c:f1:c1:ad:a5:a9:7a:3f:ed:bf:a4:1a:db:81:90:b2:ec:
2f:32:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:54:56 2025 by rpki-client