Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
File: ZhPZyFZESnCW46hQjK4wf968DNQ.mft (raw, json)
Hash identifier: CT5i47WxFaM3eP3PB0q1+laA0RQs6kQsZ/ZX1xV81Wk=
Subject key identifier: E6:C6:0C:99:A5:EA:29:B6:55:B1:68:22:A3:37:93:6E:6D:DE:FE:DA
Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Certificate serial: 01965349F27DC319921170C047F0AEB42306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 13:01:17 +0000
Manifest this update: Sun 20 Apr 2025 13:01:17 +0000
Manifest next update: Mon 21 Apr 2025 13:01:17 +0000
Files and hashes: 1: 4D_rZ45BYofG_PKX7NdD5oQoUdM.roa (hash: 8wujCBX6hI1Ut+YVGttUi2MlgiyCoDf/nLWfLC5wQhA=)
2: ZhPZyFZESnCW46hQjK4wf968DNQ.crl (hash: bYM3DpaCiAusROWK4CPj1pC2dbgRAwOfQ6p9oIouAK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:f2:7d:c3:19:92:11:70:c0:47:f0:ae:b4:23:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4
Validity
Not Before: Apr 20 13:01:17 2025 GMT
Not After : Apr 21 13:01:17 2025 GMT
Subject: CN=e6c60c99a5ea29b655b16822a337936e6ddefeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:82:87:86:7a:e2:93:c7:ce:36:82:13:75:
8b:da:81:31:cf:21:79:01:c4:1d:bc:8b:cf:1f:f0:
e7:bf:fb:9e:2c:d0:38:74:a7:fa:d1:07:2e:4c:40:
f4:14:bb:85:c3:d4:e8:87:ac:4d:fb:3d:b7:b5:f8:
fc:82:d1:db:72:6b:2c:a4:e9:1f:51:c3:f3:03:a1:
8f:99:c2:ca:4a:c1:cc:38:5b:61:1e:f5:bc:c4:53:
c3:0b:94:41:09:7c:fb:89:20:83:8c:87:b2:bf:35:
53:8e:6b:4e:2f:f3:ea:75:41:f6:c2:8a:3c:c3:9b:
83:04:b4:21:4b:28:9a:1a:31:39:df:18:fc:e5:98:
3a:42:85:46:a6:65:ce:94:cd:79:86:20:56:22:68:
ea:4f:3c:37:81:75:6b:1f:cf:54:cf:b0:fd:d6:2c:
a4:4e:30:1c:89:4d:73:ca:0b:27:27:cb:74:8c:40:
d5:01:8d:4f:86:37:7a:84:77:bf:81:c2:6f:08:27:
e6:f0:f1:06:3f:ab:13:31:4a:71:b8:f1:62:cc:f8:
e3:81:a0:35:d5:51:79:9b:6a:94:14:cd:7e:5b:99:
2f:64:10:3f:88:1d:fb:be:5b:34:78:e1:49:8e:31:
ae:00:af:9a:51:7d:28:d3:e4:37:33:3b:1c:ee:a8:
b0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C6:0C:99:A5:EA:29:B6:55:B1:68:22:A3:37:93:6E:6D:DE:FE:DA
X509v3 Authority Key Identifier:
keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:94:3b:e7:fd:20:8c:2b:40:9b:f8:bf:06:56:57:d6:52:04:
38:da:0a:30:e8:1e:f6:74:4e:a4:60:04:15:e5:0d:cc:e6:6d:
a0:f4:44:1a:06:db:aa:b2:49:b3:78:07:23:8b:97:87:39:e6:
bd:65:c7:70:ad:bb:8a:db:de:bd:b3:8a:21:a0:57:88:97:55:
6d:3d:04:39:89:75:6b:95:12:85:e8:60:b9:a9:0b:38:53:4d:
61:8d:e6:4e:19:35:33:be:6b:d7:57:5d:e3:05:74:fc:5a:d6:
29:17:db:a4:ae:90:a5:06:d3:da:ac:45:88:49:c2:3e:51:08:
d2:86:87:cc:bb:62:78:18:ae:56:d4:4c:f8:65:00:f6:a8:40:
c0:58:27:df:b6:aa:0a:5f:d9:54:81:cb:6e:b7:7b:dc:3e:fb:
57:fc:f1:e6:f1:04:76:51:6d:a2:c9:6c:98:cc:e7:74:27:eb:
af:d2:80:e3:43:c6:39:ed:92:0c:c5:02:aa:f3:44:ff:12:ca:
ce:2b:1e:91:0e:01:01:8a:3a:e9:68:fc:38:22:17:c1:07:29:
ec:b9:ec:16:a3:25:8d:2e:2f:69:86:ef:0a:7a:d1:08:0d:ec:
47:67:ec:83:9b:3b:e7:3a:ab:1a:e6:eb:c2:1a:65:97:c7:f8:
43:dc:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:29:59 2025 by rpki-client