Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json)
Hash identifier: nQYxu2Hop7BOGD/X/uEHGIlyXYOPVMEdy+OOOPhn6SI=
Subject key identifier: E1:C1:0C:B6:DD:08:AF:D6:37:84:7C:78:97:17:DD:31:EC:78:0E:BC
Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Certificate serial: 019653B6CEBC070416DD21C40E064FE6AEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
Manifest number: 0DAC
Signing time: Sun 20 Apr 2025 15:00:11 +0000
Manifest this update: Sun 20 Apr 2025 15:00:11 +0000
Manifest next update: Mon 21 Apr 2025 15:00:11 +0000
Files and hashes: 1: WmCvFXCeg0oTa1TckRvrs8RNar8.roa (hash: Mzv2Vj1XxZUvLysQKOIpSBENViQwEO98u/fFHAl/Wq0=)
2: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: cFF8uQ6RZqJ4WvarYDOovxl07NG9hI/LWowh3i/aWlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:ce:bc:07:04:16:dd:21:c4:0e:06:4f:e6:ae:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086
Validity
Not Before: Apr 20 15:00:11 2025 GMT
Not After : Apr 21 15:00:11 2025 GMT
Subject: CN=e1c10cb6dd08afd637847c789717dd31ec780ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:e0:33:da:91:47:29:2e:94:0f:74:5b:69:
19:3d:07:82:2d:47:d4:d4:24:ca:80:0f:95:8c:47:
e4:17:9a:a7:0c:e3:38:79:8b:34:6a:a0:54:20:65:
54:59:28:12:73:64:3d:8a:0f:28:fa:97:b2:ef:d6:
4b:a4:08:05:23:36:00:02:df:95:90:f4:61:77:d1:
0f:05:df:74:f2:ad:90:9f:14:a8:3a:eb:64:d8:e9:
b5:f3:bf:f7:3e:95:5b:9f:95:66:76:2e:aa:eb:84:
92:e5:2e:0b:82:81:d0:df:7a:46:9a:06:a0:5d:7c:
ed:bc:00:39:1e:38:09:cb:6d:be:47:43:09:63:e4:
69:a9:87:0a:12:11:68:68:06:c2:77:e0:2e:ce:19:
a5:cb:8e:f9:e3:0f:e4:43:c9:77:a7:f3:92:b5:23:
d7:2b:67:8b:c8:56:c5:5a:d4:f8:29:63:dd:1f:4f:
71:cf:c6:65:a0:bc:f7:2e:e0:cb:77:ea:ef:38:cb:
14:7c:63:26:a1:e0:3e:3f:48:9f:15:e7:ff:d2:76:
26:a5:d0:62:5c:cf:98:b3:f2:92:e1:b2:56:26:21:
65:c5:ae:41:6d:a5:7a:5c:90:1d:69:56:c7:66:45:
4b:11:68:c1:3b:dc:46:76:01:64:b4:cd:06:ed:8f:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C1:0C:B6:DD:08:AF:D6:37:84:7C:78:97:17:DD:31:EC:78:0E:BC
X509v3 Authority Key Identifier:
keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2d:c9:f3:f3:12:79:00:b3:6c:2d:05:18:95:e4:35:e3:67:
97:4b:b8:c5:86:aa:b1:ee:29:e3:a8:4a:18:b0:28:0a:52:dc:
b3:40:76:6e:6e:a7:e6:51:a8:84:85:d9:49:87:9c:2f:06:63:
fd:d5:83:e1:91:6f:51:94:43:54:a6:40:6e:b9:ae:63:2e:d5:
5a:62:58:87:c7:36:43:ab:0e:58:d7:40:ab:4d:11:60:51:c7:
35:e0:f4:e0:f8:76:6c:e8:8e:90:97:40:98:bd:8d:07:99:02:
ba:eb:55:fb:a3:35:e7:42:08:f9:b7:93:9d:1a:0f:95:48:7f:
2a:92:5b:f8:95:a4:6c:0a:48:9d:e8:61:c9:6f:a5:f5:1f:55:
4f:35:c4:f4:d4:70:dc:4a:af:c2:a5:7a:76:05:d5:af:3f:7a:
f2:d2:f9:77:09:a3:3b:e4:4d:fb:89:c5:22:6a:d0:b0:52:67:
a2:9f:57:a1:75:a2:dd:e8:88:23:e4:26:fc:95:ed:2b:e5:d6:
1e:07:fe:c2:66:b7:a1:e7:c3:2e:d2:c0:94:d1:73:49:dc:54:
4e:74:62:f2:17:6b:4f:b0:41:25:fb:90:9d:6e:76:fd:08:68:
c3:a8:14:b1:d4:ad:21:ec:d0:00:8b:47:25:71:c4:0b:81:9e:
96:d9:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:44 2025 by rpki-client