Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
File: zEa__4uQ43SFVboUR_1O3sw0ChM.mft (raw, json)
Hash identifier: lDZK9rSTLTRHVZLXx4u69tOEbTQNyNPACc1xaY5zfMA=
Subject key identifier: 8F:2E:FC:5E:D7:0D:97:D2:50:30:9E:56:E4:87:84:0B:31:7B:CC:82
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 01960FE955876C918FDB7A97E79FB0618972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
Manifest number: 14DE
Signing time: Mon 07 Apr 2025 11:01:12 +0000
Manifest this update: Mon 07 Apr 2025 11:01:12 +0000
Manifest next update: Tue 08 Apr 2025 11:01:12 +0000
Files and hashes: 1: F0jtKGP40uC6UeGFBvx9vjMBKeg.roa (hash: /o36By5Q83qZbeXySOjiZ7fpjLFdoyPEIY6paV+aTiU=)
2: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (hash: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=)
3: zEa__4uQ43SFVboUR_1O3sw0ChM.crl (hash: cIDfx77wF19HG/UVCKfMcrgj+vRWxBwF7P01+OyVQtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:e9:55:87:6c:91:8f:db:7a:97:e7:9f:b0:61:89:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Apr 7 11:01:12 2025 GMT
Not After : Apr 8 11:01:12 2025 GMT
Subject: CN=8f2efc5ed70d97d250309e56e487840b317bcc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d6:79:fe:db:09:01:7a:59:24:d8:9a:55:ed:
04:5c:3c:a4:bc:e7:c8:2f:47:21:af:36:2e:bc:8b:
61:1b:f8:06:8d:58:0c:e1:f4:af:d4:76:f8:f7:57:
8e:b9:d2:36:47:5f:55:79:97:6c:13:1b:7a:95:b8:
6b:ca:d3:a1:52:50:16:6f:43:3c:7a:16:33:a1:34:
5f:32:52:92:81:8c:a7:69:cc:09:7f:69:c0:0b:57:
3c:17:0f:02:64:b6:6b:42:45:e8:0f:f1:7e:74:b6:
a1:b8:cc:15:74:1d:e5:94:a5:f2:ec:d2:7c:5e:03:
fb:ac:2d:c5:b4:92:53:73:27:90:2a:f9:9b:d5:81:
6a:0c:ef:2e:f9:94:c7:1d:80:b1:6e:d3:74:94:c9:
5a:aa:42:d2:99:3c:7b:26:c0:02:09:f6:be:b4:61:
4c:b6:73:5f:5f:22:f6:a0:b8:cc:33:e5:2b:01:ca:
78:26:6c:b8:ae:84:1e:49:97:dd:99:ff:4c:a8:be:
1b:1e:58:3c:f2:6c:3b:a0:62:73:ea:f9:02:91:c9:
fe:bf:53:95:81:3c:ed:5b:a9:c8:4f:e9:c8:29:d2:
a9:e9:77:ac:8f:87:dd:50:0d:f8:06:63:ea:4d:73:
d7:e4:05:26:f9:f6:3c:37:38:35:d1:bd:e5:c9:cf:
d6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:FC:5E:D7:0D:97:D2:50:30:9E:56:E4:87:84:0B:31:7B:CC:82
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bf:8d:65:0a:17:f6:ed:70:d9:24:35:a4:20:ca:a6:f3:cc:
64:a8:2a:bf:87:b2:3a:cb:58:e3:3c:c8:9e:53:05:87:93:97:
1e:3b:24:69:0b:fc:d6:0f:4f:15:35:05:1f:f9:d1:da:64:17:
70:4f:d3:4d:ea:23:3f:44:9f:fe:c4:31:df:e4:0d:bc:9a:4b:
21:a1:0f:d5:02:50:cc:d9:a4:13:3c:f7:ed:78:48:7c:1b:02:
c3:f3:b7:aa:33:06:b1:40:6a:3d:8f:0d:de:56:51:e4:ba:a1:
7a:db:ae:86:06:36:1a:ce:82:ee:24:e3:6b:55:4d:0d:a6:46:
29:8f:9e:10:41:52:0b:c8:27:76:91:76:f3:c6:39:ae:71:8c:
5a:43:5c:6b:75:25:0a:d0:3b:03:28:12:6b:ba:fd:37:8b:5b:
24:aa:12:16:d6:8c:0b:dc:1f:cd:7b:7e:5b:69:09:4f:68:3c:
8e:84:9f:a6:40:15:32:61:a8:04:01:43:5e:d0:83:63:f8:09:
81:d3:f9:48:9e:02:3d:71:d1:33:3c:cf:23:33:f3:33:b3:06:
1f:c0:2a:7a:55:8d:4d:65:60:ad:95:f9:30:23:93:98:31:c3:
fb:87:ba:3f:f7:04:bf:8e:f1:9f:40:b9:e9:44:64:af:15:2c:
34:65:81:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:16:06 2025 by rpki-client