Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
File: zcmBSoLMto9Rw3v4OubPV4JEyho.mft (raw, json)
Hash identifier: akRaaRdRAwYWzuQFm7aYmIDNbBe9gvQqgupEEex/hTQ=
Subject key identifier: 0F:4C:23:79:DB:11:15:CC:31:EA:AB:5E:B9:B9:DD:E1:93:34:D7:14
Authority key identifier: CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
Certificate issuer: /CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Certificate serial: 01958C96FCF73B773F347BDCDDA8CB63ACE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
Manifest number: 139B
Signing time: Wed 12 Mar 2025 23:01:00 +0000
Manifest this update: Wed 12 Mar 2025 23:01:00 +0000
Manifest next update: Thu 13 Mar 2025 23:01:00 +0000
Files and hashes: 1: LenxSXNvYUG0PNAIsxLHW6t8Gig.roa (hash: 2tRf/A4+PlvxT/fJxe1ZYsaChcE92rdvTlPk4uzM12k=)
2: RXPYFwvbwg6zoVtZxcSZQrlYWNI.roa (hash: Pc/AiM+TyshIYca3WAF87A9bUXB/n7CNYqhspT/vd/c=)
3: zcmBSoLMto9Rw3v4OubPV4JEyho.crl (hash: 5iipkiA9bNQkVIC/FPlSzcx9fKIN/1SYE9tdnFKB8Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:fc:f7:3b:77:3f:34:7b:dc:dd:a8:cb:63:ac:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdc9814a82ccb68f51c37bf83ae6cf578244ca1a
Validity
Not Before: Mar 12 23:01:00 2025 GMT
Not After : Mar 13 23:01:00 2025 GMT
Subject: CN=0f4c2379db1115cc31eaab5eb9b9dde19334d714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:7b:b0:6e:0f:d0:da:42:1f:8c:f3:62:9e:
9d:ed:26:ad:c6:da:74:55:4b:f1:b8:7a:dc:a9:ee:
c1:e7:0a:d5:ca:17:10:c8:87:b0:16:50:6c:ec:f8:
db:e1:d2:fc:90:7d:59:fd:80:58:36:55:5c:b0:0e:
2c:3e:71:6d:bf:1f:ae:b0:86:96:e5:a2:4f:8d:99:
59:02:99:5e:d0:d1:91:a6:09:df:c4:60:74:3c:4a:
56:5a:c8:39:b6:e0:84:47:53:89:da:86:fa:aa:0e:
13:d8:b4:cc:35:ac:ba:a4:63:07:ca:90:ea:18:73:
4e:2a:ae:76:41:75:70:ff:52:56:67:3d:80:c1:a1:
2a:93:1e:86:bc:61:47:8c:4c:97:df:54:fb:f5:35:
53:2a:b6:64:88:ea:f3:9b:ce:39:61:4b:5c:cf:3f:
a9:89:f5:4e:0d:af:23:9a:21:97:53:37:d1:0f:e9:
7b:6a:6a:8c:7e:2b:b8:47:5f:b4:5d:63:ea:b1:b8:
32:b3:3f:73:81:1f:23:f3:08:e2:e1:d7:52:ff:e1:
97:2b:27:90:cf:b2:22:e1:b3:67:b7:94:82:c6:3e:
c5:1b:d5:61:b2:d0:31:19:11:fa:1b:61:92:af:0b:
ca:c0:43:a8:8f:62:51:8c:5f:c3:db:95:9c:26:aa:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4C:23:79:DB:11:15:CC:31:EA:AB:5E:B9:B9:DD:E1:93:34:D7:14
X509v3 Authority Key Identifier:
keyid:CD:C9:81:4A:82:CC:B6:8F:51:C3:7B:F8:3A:E6:CF:57:82:44:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zcmBSoLMto9Rw3v4OubPV4JEyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f907c8-53a3-457a-8d05-963b25fa3068/1/zcmBSoLMto9Rw3v4OubPV4JEyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:16:ad:46:69:34:19:e8:6f:5a:b6:8e:97:a9:99:ae:02:c5:
d7:f1:1c:2a:85:3b:8f:9f:cc:3f:2f:ab:6d:52:7b:c6:e4:77:
f3:e8:15:79:c4:90:c3:f8:1b:e5:65:08:91:27:1e:4f:03:1d:
9e:90:84:57:6d:97:e9:d9:38:b1:b1:f5:db:a8:5a:06:45:a6:
86:e2:24:19:f8:4f:90:2a:a2:bd:cd:a6:b2:bf:b7:b2:71:26:
f1:8f:45:90:88:6a:e1:ce:59:57:4f:e9:73:a4:a1:1a:0e:46:
33:66:aa:b6:65:a8:dc:7a:d7:86:4f:e8:9a:8a:05:7f:c3:61:
a0:18:ef:79:e1:fc:6d:95:d1:72:a8:f8:e2:13:1e:bb:a7:58:
71:be:1a:42:48:88:c3:bb:d2:c1:08:12:68:98:fe:0f:6a:84:
bf:21:55:f6:9c:9a:f5:78:2f:4c:97:90:33:8e:c0:f9:15:09:
32:1a:52:d7:6f:8c:6a:62:60:80:73:06:48:63:35:3c:d7:de:
fb:12:dd:54:51:1f:b3:10:79:a5:8b:de:e3:49:19:f8:9c:e0:
de:22:a8:9c:c1:3d:be:be:63:e0:ba:76:be:e7:cc:fe:11:3c:
83:3b:9e:dc:20:e6:40:70:66:01:b0:2e:f9:b5:8e:d6:3e:02:
97:ab:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:14 2025 by rpki-client