Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: yPBBIcSSzTh5XNef/Y+v8dL8pxzeyc9KZmL1c+DI+XQ=
Subject key identifier: 4A:84:9B:70:3C:9D:87:DB:F1:97:69:18:6B:93:A9:37:51:E9:75:59
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 01958C60966F88925C7DF8A9C1972433F464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 22:01:34 +0000
Manifest this update: Wed 12 Mar 2025 22:01:34 +0000
Manifest next update: Thu 13 Mar 2025 22:01:34 +0000
Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: osESoomjI2X/dGVVL9W5IifunEyEUgr39ovHZ1l8/UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:96:6f:88:92:5c:7d:f8:a9:c1:97:24:33:f4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Mar 12 22:01:34 2025 GMT
Not After : Mar 13 22:01:34 2025 GMT
Subject: CN=4a849b703c9d87dbf19769186b93a93751e97559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:e3:8f:e2:58:84:3c:11:55:a3:6d:b4:08:
9a:c6:a5:72:35:04:34:1e:14:cc:5c:df:98:4b:7d:
c3:b1:25:f1:6a:9d:2b:d2:8c:a2:9d:cd:c7:6f:7e:
76:b0:32:24:a2:cf:b8:24:f2:ec:21:47:a0:bc:70:
d8:f6:df:5e:fe:dc:1d:da:8d:27:88:9f:cc:e7:0e:
8b:8a:b4:ca:10:2d:62:ab:cf:ca:f1:b9:10:8c:cb:
b3:9e:80:85:b6:66:87:ae:67:b5:a5:2f:29:64:b5:
5c:ad:f9:65:22:22:c6:e5:1e:39:bc:0a:fd:ad:ab:
d6:b9:7c:c3:79:d2:39:5b:de:b6:ba:61:4a:8f:f2:
84:75:3b:f0:1f:99:47:cc:70:a7:b5:e0:0d:24:93:
31:5a:1b:d2:9f:34:1b:59:4f:16:a6:07:8e:a7:f8:
a9:2e:6d:b1:2e:a0:b6:51:4e:14:15:f5:59:b1:4e:
54:45:d8:60:b3:88:bd:eb:76:32:ad:bf:42:e3:23:
fa:ec:4e:5a:98:a1:ac:a5:6b:7c:43:c7:a0:de:43:
87:aa:df:eb:48:a1:88:fe:50:e7:71:5d:ee:f1:9f:
eb:9e:00:9d:ea:39:a0:72:77:94:21:c5:08:77:af:
4b:9f:81:0f:e6:5c:ef:73:cc:f1:c5:f7:49:9a:3c:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:9B:70:3C:9D:87:DB:F1:97:69:18:6B:93:A9:37:51:E9:75:59
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4e:df:7b:c5:2c:35:2f:be:86:bd:86:80:15:4d:46:73:8a:
8f:f2:fc:73:36:72:c6:9a:27:12:db:a8:76:1c:12:d7:20:2f:
cc:53:9f:09:cb:2a:28:eb:18:58:86:cf:83:ab:1c:37:87:25:
6c:19:41:5c:a3:57:9b:92:6d:ae:c3:53:80:68:02:b5:b1:87:
4e:a3:b9:f5:ad:df:c8:7f:21:49:f3:2e:91:2a:a6:6e:91:6a:
71:d5:29:a9:c6:23:5a:e1:c5:b9:9a:d0:e4:c5:cd:04:44:f1:
c8:c5:26:28:d6:14:62:84:88:02:e0:6c:0a:e7:a2:5a:a3:91:
b5:fa:ee:5d:d0:40:89:3b:b9:49:ec:10:35:ae:68:cd:13:3e:
7a:6e:ea:db:fd:86:98:e3:8f:47:79:08:4a:d9:d0:28:d8:3f:
38:c2:1c:a3:06:7a:54:e3:c4:4a:12:31:c0:ef:41:96:7a:53:
71:03:09:4b:8f:11:c5:89:05:32:3e:0d:1c:88:9c:78:33:75:
ca:59:9d:b1:33:b1:c5:4e:23:9c:1d:c7:27:38:35:86:f0:e0:
5b:53:6d:4f:57:65:df:fd:26:ba:8e:a1:d9:b6:d0:5f:d8:ff:
16:b9:c5:0b:ee:b6:73:c4:43:08:48:48:6a:41:84:9b:02:82:
c1:29:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:50 2025 by rpki-client