
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File: zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier: n/6abkC8KiC0p+8GTsPuR+KtI920b78z4y9gXO/I2iQ=
Subject key identifier: 35:99:C5:2F:09:9A:11:0A:45:48:2B:6D:32:E0:8A:17:16:48:FB:1E
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer: /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial: 0196384058C0920D075813C1308A96F8D8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number: 14EF
Signing time: Tue 15 Apr 2025 07:01:03 +0000
Manifest this update: Tue 15 Apr 2025 07:01:03 +0000
Manifest next update: Wed 16 Apr 2025 07:01:03 +0000
Files and hashes: 1: P2xLD0kn7OL7p2q913Y9a8RAM_8.roa (hash: DQ5vYJ7ltkuV9kkBJCqGKszNfulwSwCWnXFITIg1caY=)
2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: JNfPjOx6Z2rX+ABzofHfEtf2Ch/rpj/qoRuhQosfrQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:40:58:c0:92:0d:07:58:13:c1:30:8a:96:f8:d8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Validity
Not Before: Apr 15 07:01:03 2025 GMT
Not After : Apr 16 07:01:03 2025 GMT
Subject: CN=3599c52f099a110a45482b6d32e08a171648fb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:05:92:ce:48:a1:c7:f0:8d:e4:68:bc:12:
fa:29:52:8e:48:44:5c:6c:09:1d:ac:5c:9b:da:11:
0a:df:73:f3:93:e7:ac:35:7d:51:e7:67:df:b6:03:
dc:53:ba:fc:38:4a:2c:4a:0a:aa:ba:f0:5a:06:6e:
74:94:26:b4:d0:b1:54:f2:bd:0d:f5:b8:74:66:25:
b4:7d:1e:49:49:35:35:1b:bf:72:07:c2:16:11:66:
24:c8:f1:29:cc:48:44:64:ab:0e:7d:73:9e:f6:75:
64:ec:9c:6a:a0:6f:ac:85:b1:db:b1:ac:c4:4a:ad:
ac:ab:ff:98:28:fd:ef:32:e4:07:8d:53:22:35:ce:
d9:ad:16:4c:45:1a:71:24:70:d6:5c:39:38:3f:f0:
13:00:26:a4:ff:86:d6:c1:d9:59:6b:f3:5b:5a:1c:
f1:89:34:9f:d0:cd:53:c3:b8:55:97:2b:90:92:79:
83:40:48:19:6c:09:04:68:f8:9e:0a:7a:29:79:aa:
fd:8f:b7:48:ac:7c:40:fb:b7:55:8b:79:9c:d7:ff:
87:d8:55:0d:2b:b4:25:83:ca:c4:09:5d:68:90:17:
92:74:d9:a6:24:02:f8:0c:36:05:3b:90:ed:11:c2:
14:8f:cb:77:ab:0d:7c:4a:c0:b0:a4:9f:7d:a9:10:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:99:C5:2F:09:9A:11:0A:45:48:2B:6D:32:E0:8A:17:16:48:FB:1E
X509v3 Authority Key Identifier:
keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9d:a5:91:b0:12:d7:26:7d:23:ff:d5:8d:eb:d2:26:14:23:
7a:29:38:17:7b:98:04:00:1c:1b:6a:f6:13:44:42:17:be:7a:
58:a5:65:92:fe:d4:90:88:87:87:d9:af:f2:7b:28:c8:81:88:
d3:04:e8:3e:a9:2c:cd:b8:ab:84:da:b1:a1:23:ff:6e:2a:a6:
bb:6e:b2:0f:eb:5d:20:97:16:b1:c8:0d:19:64:5d:91:3f:14:
b3:9e:e1:1d:59:76:91:99:34:6a:c5:be:5e:5f:22:28:cb:dc:
e1:7c:93:f1:0e:c4:8c:e9:b2:6d:a0:b0:d0:a7:ac:e9:f6:71:
1c:56:7a:31:39:36:29:1c:ef:76:f3:01:91:e2:a0:78:e7:01:
9f:62:03:68:e8:b2:47:e8:97:59:54:18:d3:d5:bf:06:b6:d2:
06:ea:10:57:df:7a:f7:23:3a:5a:0f:b2:0f:2d:40:33:bd:a4:
6d:7e:d6:1f:8d:d1:bd:cf:f6:7c:ad:18:26:44:50:f8:81:a1:
33:f4:cf:14:47:79:86:8f:88:46:d2:0b:57:b2:f9:6c:de:d4:
9d:fe:66:08:b6:65:f3:9c:5a:a4:81:58:e2:43:74:39:b7:9c:
c4:c5:16:50:a7:aa:3a:87:f7:67:dd:de:79:f7:cb:69:20:08:
d5:e7:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:35:05 2025 by rpki-client