Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
File: ZE8DP3gurzKrCQiHddZKxLlLWxE.mft (raw, json)
Hash identifier: VFpoEjBVGEuws0mQgm/gwg6nYEbjdUxtZGu3DBXgsk4=
Subject key identifier: 67:42:9C:8E:66:00:0F:22:AB:4D:72:AD:B3:E7:AA:58:77:90:23:10
Authority key identifier: 64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
Certificate issuer: /CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Certificate serial: 01963F1DD8356CDA13ECE42BACD1BCFEA204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
Manifest number: 0A3D
Signing time: Wed 16 Apr 2025 15:00:42 +0000
Manifest this update: Wed 16 Apr 2025 15:00:42 +0000
Manifest next update: Thu 17 Apr 2025 15:00:42 +0000
Files and hashes: 1: 0XSnGPN4ZFxk8_lhcPN-rPm0S40.roa (hash: 0ucYwJNSE17Uoa0pbkg3UfaLHULdDrli5vO57ag/Rro=)
2: 2eYoGLpYtYZxhv1MZN6vX2qdP5g.roa (hash: VgvyWftKXOdFJhTLD/7iPW28qCLdqt68A9FKNT0Kf7w=)
3: APnx_8mfcxrFZN4OeamIRjyf60s.roa (hash: LqDkg2crI+HJCMm5gdlU8GtHUckBwruDxKVGT27c+3Q=)
4: ZE8DP3gurzKrCQiHddZKxLlLWxE.crl (hash: Vt81DHok2xthBE2lrzXcqnTu2vZ7T/MBtCAtbS94jhQ=)
5: da-rbdUwvdK-EaEtMFVJ4ALqn7g.roa (hash: AiZ5cHYaXgbmcSlAY4kq0VLaSsmy8Eu/WyjQzyBskpg=)
6: izFiBce-GnGDYR4txZafIHP1iLk.roa (hash: 6ASOVWTNVRRVxuY9ayMGRUVJ1id7JkowncNxWBHtm+M=)
7: k-ezMHwur8MdZRQR3hE_e0BhJJw.roa (hash: P4qrs0pkvJINK01RPHPSPt0K8P0Ok49T8HWuoZXmVYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:d8:35:6c:da:13:ec:e4:2b:ac:d1:bc:fe:a2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644f033f782eaf32ab09088775d64ac4b94b5b11
Validity
Not Before: Apr 16 15:00:42 2025 GMT
Not After : Apr 17 15:00:42 2025 GMT
Subject: CN=67429c8e66000f22ab4d72adb3e7aa5877902310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:34:ce:b5:c7:cd:9c:44:35:04:68:92:3e:
2a:40:e5:1a:5e:e4:aa:de:9b:98:d8:06:43:cd:35:
7f:90:37:bd:54:87:5c:86:f5:5c:fe:c4:f3:9d:7f:
49:cd:ab:1d:4e:f2:fc:bb:de:b8:a2:18:f0:87:87:
64:14:25:72:ce:23:51:3e:48:2b:2d:a9:4d:a7:9a:
4c:0e:f9:f0:6f:b4:88:c1:f4:b1:e8:ca:5e:37:76:
05:78:22:3c:91:4b:d9:55:c5:d7:b7:7a:59:36:70:
67:e4:8f:6d:ca:50:34:4c:8e:b6:b9:d4:9e:1b:0c:
4e:e3:89:21:84:d0:da:9d:42:46:e3:34:87:9c:6b:
e9:54:9e:be:30:ea:e2:44:ac:73:5f:20:44:f3:a3:
82:c3:a3:ac:c8:c2:f0:22:d1:4c:85:26:22:89:e1:
80:91:0e:30:9c:bb:05:40:c8:de:cc:0d:55:71:e1:
7c:e4:d9:16:42:d0:c0:01:52:47:ca:bb:05:e3:8d:
3c:5f:2d:b1:d6:77:c0:02:3b:c8:07:b8:60:14:fc:
49:a2:eb:64:af:6d:98:8e:ad:6f:1e:da:cc:e7:b4:
4e:af:21:ab:8c:63:33:00:bd:20:e1:07:ef:e9:41:
ad:d5:de:45:12:fa:64:9e:dd:ba:d1:aa:5f:7b:4d:
b0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:42:9C:8E:66:00:0F:22:AB:4D:72:AD:B3:E7:AA:58:77:90:23:10
X509v3 Authority Key Identifier:
keyid:64:4F:03:3F:78:2E:AF:32:AB:09:08:87:75:D6:4A:C4:B9:4B:5B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZE8DP3gurzKrCQiHddZKxLlLWxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/87ca91-6fb8-4038-890c-4915fe7f92ce/1/ZE8DP3gurzKrCQiHddZKxLlLWxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1b:8b:3d:a8:ce:d6:40:23:34:cc:60:74:6a:89:66:c6:0a:
88:45:4e:94:20:37:b1:55:bd:ce:38:60:46:19:3c:b0:29:e1:
53:5a:1f:0d:d7:32:b2:2f:6b:dc:b4:a6:89:1e:23:4c:34:aa:
f6:1a:5b:ac:7e:7d:7a:a4:da:02:9f:fd:5e:2a:2a:08:68:f7:
aa:4c:18:6b:f2:8e:a7:0d:59:bc:73:1b:ee:ff:7c:68:38:09:
19:88:a1:4b:7f:94:17:89:22:fc:1f:db:a7:a5:c7:82:ab:dd:
27:ea:ca:dc:76:da:c7:56:c6:c8:a1:38:e3:c3:e3:99:9d:f5:
7d:53:b3:be:e3:2b:0f:d3:01:54:76:a6:17:de:db:1d:d4:1c:
e5:0b:8c:33:ad:d6:67:ae:2d:51:79:f7:48:ab:75:a5:8f:dc:
74:98:2a:e4:80:b4:1c:31:d4:be:cc:a5:0d:5d:6a:a1:ac:68:
5e:29:8e:8d:1d:ee:76:98:25:f4:85:2e:93:32:10:39:ab:1b:
4a:8c:49:97:c9:d8:b6:4e:f0:e4:fa:c3:73:01:b4:df:8c:67:
5d:5c:ec:c0:4f:b2:88:b4:39:f8:41:7a:78:cb:03:78:b9:8b:
d7:69:fd:8e:06:fd:59:b7:1c:a7:d5:1b:eb:db:a8:0d:78:25:
b5:b4:25:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:19:49 2025 by rpki-client