Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: s1VTEHEWvOHIyNjzDs71zJnKDZDurY+gvTfpj8A6WlA=
Subject key identifier: 32:0B:FE:52:09:EC:F4:BC:C8:DF:E1:D6:BD:0D:DD:8F:69:4F:18:7B
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 0195903CEDAA1F39A1F6B31853317C62F7CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 0461
Signing time: Thu 13 Mar 2025 16:01:06 +0000
Manifest this update: Thu 13 Mar 2025 16:01:06 +0000
Manifest next update: Fri 14 Mar 2025 16:01:06 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: Uu9zsRfzI+GYvdFpmRw/kXy00Um/DKOG/NgNIBEWWV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3c:ed:aa:1f:39:a1:f6:b3:18:53:31:7c:62:f7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Mar 13 16:01:06 2025 GMT
Not After : Mar 14 16:01:06 2025 GMT
Subject: CN=320bfe5209ecf4bcc8dfe1d6bd0ddd8f694f187b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:3f:4c:a5:45:48:94:60:3f:74:e1:2f:57:
3a:1b:37:45:64:81:de:d7:c7:44:50:6f:cf:5c:c0:
7d:cc:f0:a4:03:e2:3a:4f:47:4d:b1:c4:ae:b0:26:
65:fb:86:1c:1f:9e:3d:17:05:c3:ca:74:01:3c:27:
b0:30:33:8d:4c:f4:4c:2f:dc:3b:25:57:ca:ef:d9:
9c:3d:f9:ce:ad:6f:74:a7:25:46:41:cc:16:db:04:
b1:ee:1f:19:c4:30:7e:e1:dc:38:bd:3c:0f:3b:1c:
8c:be:97:22:b7:8a:83:9a:2a:22:d7:75:83:5b:d3:
07:d8:71:ed:54:44:4f:69:b5:e3:2d:44:d1:fb:b9:
a4:c5:d4:2b:e4:cc:b6:93:e1:81:92:ab:e1:bf:27:
1b:d4:93:06:d6:0f:d3:fb:6b:db:2d:8e:d6:00:58:
ee:c8:01:cb:ef:ca:e3:42:1c:fb:b4:0c:2f:0a:32:
2d:d0:50:10:be:81:fe:83:4f:73:ab:b7:49:b6:37:
a6:74:b3:8b:0e:88:14:d3:cc:02:aa:ec:95:4e:de:
bc:2c:77:6d:83:eb:ec:e7:0b:07:99:66:d8:c3:8f:
ec:bd:79:a2:83:23:51:29:4d:97:f0:cc:e4:c4:80:
10:8a:2b:21:33:a1:a9:fe:ce:c6:9f:88:fd:07:72:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:FE:52:09:EC:F4:BC:C8:DF:E1:D6:BD:0D:DD:8F:69:4F:18:7B
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5e:5d:25:d1:1c:73:f6:a1:60:7c:06:65:1e:74:c4:e5:46:
9a:98:23:51:46:5e:d6:06:19:1e:ff:c5:de:bb:2f:96:17:e6:
00:bb:92:df:0e:22:1f:5f:96:0a:80:b0:eb:df:2b:15:42:93:
64:1c:9d:08:23:c0:3e:bf:85:ed:e2:d4:c6:53:47:9e:61:2b:
aa:bc:27:57:ef:03:28:a9:8e:40:dc:da:28:97:71:0f:76:14:
88:8c:a5:07:c2:27:f6:bb:5d:0a:43:c3:51:00:f0:34:ae:8c:
ea:e3:7d:84:4f:a2:44:45:1f:c6:94:01:b3:a7:de:55:ff:65:
7f:19:79:db:90:ad:c7:8a:b9:d4:52:71:33:9e:45:0f:ad:ec:
27:63:07:bb:16:b9:a7:b6:45:f3:90:17:8d:c4:7d:6e:d8:0e:
43:50:63:4d:f3:1a:05:e4:9d:66:20:f6:a3:e7:0e:89:f7:a5:
a4:a4:33:85:e3:30:9d:8f:7a:e1:8c:80:2f:8c:0c:59:96:b2:
2f:82:2e:f5:0f:e5:3c:bc:0d:10:5a:b9:15:ad:90:cb:f4:23:
39:72:3d:97:0f:79:8f:fe:78:da:5f:ce:85:b0:13:0a:c8:9f:
c3:22:87:f8:37:a3:74:be:a2:ea:79:4f:42:3d:7e:1e:70:67:
d2:2d:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:28 2025 by rpki-client