Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
File: zPJHTehBFnUrkICnoNsyJTXFYCY.mft (raw, json)
Hash identifier: URA4AEeGK/WHRpmLXC+ScRhqL2XURvyrRWISjZ+1GwY=
Subject key identifier: E8:AB:A2:8C:F9:F6:40:20:39:8A:92:05:E2:01:FF:BA:11:D9:68:B0
Authority key identifier: CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
Certificate issuer: /CN=ccf2474de84116752b9080a7a0db322535c56026
Certificate serial: 01961EB75216BC5196B1CAEC0C66119FC8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
Manifest number: 0F00
Signing time: Thu 10 Apr 2025 08:00:52 +0000
Manifest this update: Thu 10 Apr 2025 08:00:52 +0000
Manifest next update: Fri 11 Apr 2025 08:00:52 +0000
Files and hashes: 1: l0ahmTF7VU-jM66pydmyaaFWBpI.roa (hash: kRKJwUHD3kMQk4tSNCj0K9HqnVNFjpJ2azvHqDtCdr0=)
2: zPJHTehBFnUrkICnoNsyJTXFYCY.crl (hash: ULLqab/0e1UlOORnlCV1YLz8rtRfkRaqHLSL2dEpeBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1e:b7:52:16:bc:51:96:b1:ca:ec:0c:66:11:9f:c8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf2474de84116752b9080a7a0db322535c56026
Validity
Not Before: Apr 10 08:00:52 2025 GMT
Not After : Apr 11 08:00:52 2025 GMT
Subject: CN=e8aba28cf9f64020398a9205e201ffba11d968b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c0:4e:39:a9:2e:7c:e6:00:29:5b:29:ca:67:
38:ce:7e:d9:0a:c6:1f:2e:7e:3d:ea:a4:9b:a6:64:
c3:ac:7a:4a:64:cb:77:b9:bc:2f:f2:fa:2d:4c:50:
06:bd:dd:18:99:12:c3:d6:bb:db:a0:0c:ec:30:0c:
44:6c:5a:d8:31:95:c8:ff:3f:d7:cd:c6:9f:60:f7:
e3:e6:a7:a3:87:7d:d3:13:5a:0a:79:20:e3:80:40:
d3:57:48:14:5c:91:a4:62:8a:0d:33:6c:2c:ea:95:
72:f1:32:95:c2:a3:5f:b1:6b:c7:19:d6:f6:ba:b7:
22:19:05:51:1d:80:28:68:e5:03:32:a7:ed:4f:83:
5b:5f:d9:fe:80:c9:6f:e6:54:e8:7d:e7:a5:cf:5c:
9f:f3:34:ff:8a:d0:2a:c0:ba:f1:d3:8a:7f:92:e1:
b3:32:48:e2:28:ce:d4:d4:7b:6d:78:e7:7a:ac:82:
73:3f:55:f5:bb:3b:5c:56:6c:7c:3d:fb:f0:9f:76:
61:51:86:f1:8a:5c:72:c3:fd:43:12:01:66:4b:df:
63:d4:12:62:d5:a4:5f:44:0f:c8:60:c4:76:43:c9:
da:3d:ff:4b:6f:1f:fa:21:0d:1f:b2:8d:4d:ac:77:
2d:67:69:94:c7:19:e4:06:77:f0:08:62:f6:eb:d0:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:A2:8C:F9:F6:40:20:39:8A:92:05:E2:01:FF:BA:11:D9:68:B0
X509v3 Authority Key Identifier:
keyid:CC:F2:47:4D:E8:41:16:75:2B:90:80:A7:A0:DB:32:25:35:C5:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPJHTehBFnUrkICnoNsyJTXFYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eceb02-80b4-4794-acbf-cc90620e99cf/1/zPJHTehBFnUrkICnoNsyJTXFYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b7:26:55:ad:2b:51:a6:9e:70:a9:72:1a:65:84:c7:40:bf:
ea:76:fb:56:2c:ef:74:cc:3f:b1:60:43:54:ad:7a:62:20:ba:
2a:f1:e0:02:9e:0c:ce:ee:9f:d4:82:ce:50:9d:f4:32:6f:63:
13:cf:58:2e:98:67:9c:80:3d:9d:bd:2d:9c:58:25:3e:57:50:
c4:7d:fd:f9:28:4a:2d:0a:f6:d7:dd:ad:9b:05:95:7c:46:13:
22:75:01:11:88:23:ae:de:db:20:4d:c1:e1:98:bc:fb:7c:37:
8e:f7:ab:29:1a:0c:a2:2d:ab:da:69:86:b2:cc:ab:f7:40:7d:
e8:5c:9f:87:75:ab:1e:fc:9c:0a:83:01:ed:7d:b4:34:40:d4:
e5:18:99:c7:5f:9f:54:61:e6:97:b4:30:39:42:79:fd:97:5e:
74:bc:aa:0d:2a:b7:77:b0:28:87:f9:59:b8:e0:89:f6:1d:4a:
6b:1f:d1:03:41:f3:af:f1:8e:42:02:04:ea:54:58:1f:39:fc:
21:87:c4:cc:a5:4e:b8:d1:73:0e:55:46:a5:d1:5c:70:8f:70:
32:2d:fd:c2:b9:73:06:42:61:cd:70:4e:7d:38:d9:dc:1b:e4:
87:7b:7b:4d:2d:89:b7:9b:28:27:53:ff:4a:e8:94:73:66:fa:
71:e3:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:49:47 2025 by rpki-client