Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
File: zznV9duFr0wmCPwMM8zE8nIBcYc.mft (raw, json)
Hash identifier: yhmXHmdamsBNZumgYPsegd5zTa4MolYhtVtKrSnRjtE=
Subject key identifier: 8B:B9:B4:D7:33:AE:08:DB:D1:E6:53:E1:8A:02:C7:E9:D9:27:C8:56
Authority key identifier: CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
Certificate issuer: /CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Certificate serial: 019653B70A8E2BBCC2B51FB036730CAF7F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
Manifest number: 1212
Signing time: Sun 20 Apr 2025 15:00:26 +0000
Manifest this update: Sun 20 Apr 2025 15:00:26 +0000
Manifest next update: Mon 21 Apr 2025 15:00:26 +0000
Files and hashes: 1: XT0r1xatcrf8NjjWTZF7b5a24HM.roa (hash: HAbpapRpy/03wUOXVxWbKajCF7qZTjcvLamoCBH0lfc=)
2: zznV9duFr0wmCPwMM8zE8nIBcYc.crl (hash: wUbLgLMjDQa5sRfEEI4JhzJlxk2ttFZeqwesFcddgbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:0a:8e:2b:bc:c2:b5:1f:b0:36:73:0c:af:7f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf39d5f5db85af4c2608fc0c33ccc4f272017187
Validity
Not Before: Apr 20 15:00:26 2025 GMT
Not After : Apr 21 15:00:26 2025 GMT
Subject: CN=8bb9b4d733ae08dbd1e653e18a02c7e9d927c856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ba:56:dd:da:be:be:80:a5:b3:21:72:b0:f0:
9a:48:99:17:94:98:50:51:52:61:70:fa:48:7c:bf:
f4:39:a7:6a:71:99:00:91:e7:31:f5:0c:90:0e:40:
b8:12:1f:4c:1a:49:4b:fc:1d:dd:4b:6b:20:f1:c0:
8f:07:ea:d3:65:ca:64:42:a2:c3:7a:ad:b2:3e:8b:
22:e2:d9:a1:04:f5:e7:65:e1:ce:cc:70:b2:04:ca:
fc:6f:ec:8b:96:30:30:25:c9:34:36:f0:3d:4a:e8:
eb:f5:98:39:d7:62:f2:b9:be:ae:60:09:0b:67:52:
1f:c6:06:25:b3:dd:21:69:fe:ab:22:09:36:9b:3a:
26:15:91:6f:13:8e:3b:c8:1e:a2:d7:9e:f8:d3:e0:
12:23:08:44:d0:26:5e:7a:b0:28:a1:ae:5e:ac:a5:
8a:bb:20:89:64:22:f9:68:e1:90:ef:13:45:3b:84:
b7:8d:3d:6e:b8:b7:32:a6:92:2c:52:ca:03:44:54:
49:56:8f:a9:74:f3:21:a4:77:fe:67:ab:29:c7:d3:
2e:ed:7d:33:51:0e:66:98:18:70:d8:6a:6a:cf:f6:
3a:72:4b:f0:7a:ca:39:ed:6c:07:82:eb:af:27:62:
18:b4:a0:f7:fa:c9:0f:85:7a:40:eb:95:77:13:66:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B9:B4:D7:33:AE:08:DB:D1:E6:53:E1:8A:02:C7:E9:D9:27:C8:56
X509v3 Authority Key Identifier:
keyid:CF:39:D5:F5:DB:85:AF:4C:26:08:FC:0C:33:CC:C4:F2:72:01:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zznV9duFr0wmCPwMM8zE8nIBcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/27fbc6-ccde-460b-9ff9-a1cc23160a48/1/zznV9duFr0wmCPwMM8zE8nIBcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:92:56:70:8a:23:36:ff:08:c6:ce:48:00:f8:e2:8f:80:7f:
7f:22:fc:44:dc:71:93:f3:ce:85:5b:1e:ad:b7:d6:f1:af:3c:
20:53:03:12:06:d7:9a:8b:71:e2:86:db:fd:ae:62:b9:64:13:
b3:cf:f4:5a:fd:fb:b8:6a:61:24:59:ad:13:e4:1a:26:a8:ff:
57:e9:8f:a3:f7:5e:16:7f:e9:1e:c9:07:e0:51:3e:03:d2:d0:
cb:c5:4a:bf:ca:2b:95:13:06:e7:e6:ae:84:d1:ca:56:a8:7a:
c4:50:a1:80:01:f9:d2:aa:b8:b1:ba:dd:0e:fd:5b:0a:e4:35:
2c:b0:be:bb:86:82:b9:af:8c:16:5d:4a:86:4a:7a:f2:d0:f9:
6a:d2:40:53:58:50:07:bd:a5:ab:c3:9d:5b:90:92:76:57:96:
a8:e2:01:f8:c5:48:f8:c6:13:2e:4b:c3:e6:bc:3a:46:ec:70:
53:5a:95:8e:05:9c:14:8d:97:3a:2e:9d:df:bc:d2:b0:44:c7:
71:5e:1a:0d:6c:8e:a4:60:3c:65:9e:75:bf:91:d5:fb:40:8e:
4b:95:0e:f1:47:07:27:bf:42:50:34:64:33:6c:31:da:89:b9:
8a:91:7b:ea:5e:03:f9:99:a4:c1:1f:e1:c9:a8:b4:43:45:c6:
60:31:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:54:21 2025 by rpki-client