Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
File: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft (raw, json)
Hash identifier: sYaEHiW3nmWfoIN3pbboR2yUTC48txsJQlFS1eqbOH0=
Subject key identifier: 8A:A6:5C:09:F1:65:A6:89:0D:95:2E:47:7B:4E:CB:C3:B1:A4:90:90
Authority key identifier: 66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
Certificate issuer: /CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Certificate serial: 01964A7CBE5EB34D7A5F731284CEF372CAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
Manifest number: 12D8
Signing time: Fri 18 Apr 2025 20:00:11 +0000
Manifest this update: Fri 18 Apr 2025 20:00:11 +0000
Manifest next update: Sat 19 Apr 2025 20:00:11 +0000
Files and hashes: 1: CvkJme1LUR6Yylremh6T0ANylCI.roa (hash: 5zy6xol1m9FQbb/9TEgVPc4ZpyQ53XwKiYadQ98VX1U=)
2: ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl (hash: gyBwhq/YEItVAjf2hEXx6MdbNtPc4UtbysWsrFRxnfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:be:5e:b3:4d:7a:5f:73:12:84:ce:f3:72:ca:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66626623084e6cf116674a3fd0a9951cac0dedc0
Validity
Not Before: Apr 18 20:00:11 2025 GMT
Not After : Apr 19 20:00:11 2025 GMT
Subject: CN=8aa65c09f165a6890d952e477b4ecbc3b1a49090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:b3:dc:6a:fb:2e:ce:e9:3a:4c:16:60:04:
f7:94:78:af:74:3e:dc:91:12:8b:fc:10:db:46:54:
65:c0:f4:fc:c1:9a:eb:19:ec:9e:a5:89:e5:d1:c4:
e5:1e:b3:4f:d8:4b:26:83:22:b9:4e:b6:d1:3d:3b:
12:86:60:7e:8c:ba:f4:c3:2e:50:46:fc:56:e2:1c:
04:8f:b4:53:6c:a1:4c:18:4b:a7:ae:6d:5f:1c:04:
fe:03:81:76:a7:b0:8b:d2:58:3b:90:42:e6:40:fb:
86:c8:31:8f:01:c9:aa:e5:9c:ac:0e:c7:37:0c:cf:
e9:a2:f4:74:69:48:5d:66:03:07:dc:47:54:e9:0c:
59:13:92:18:a8:3c:fe:da:ca:dd:80:58:6d:20:6e:
d7:4c:47:ca:d7:0c:90:be:96:f3:78:01:f8:38:45:
d2:60:e9:5b:14:da:c2:1e:0c:bf:e1:ed:aa:c9:56:
fb:42:79:2a:3e:e3:9a:8e:ec:a2:d5:9b:80:db:c3:
df:e9:c8:07:a4:1e:ff:52:ce:1c:3b:e8:a8:52:87:
a1:66:7b:36:79:75:9e:17:c1:1f:c2:40:37:ba:ec:
23:3d:e2:9a:20:88:25:ea:f0:49:bc:e3:ad:db:c3:
bf:5a:18:46:22:57:64:b2:09:64:38:98:a2:e8:ca:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A6:5C:09:F1:65:A6:89:0D:95:2E:47:7B:4E:CB:C3:B1:A4:90:90
X509v3 Authority Key Identifier:
keyid:66:62:66:23:08:4E:6C:F1:16:67:4A:3F:D0:A9:95:1C:AC:0D:ED:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/763921-3cd7-466b-864b-188c4a78cd62/1/ZmJmIwhObPEWZ0o_0KmVHKwN7cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:af:7f:ab:c4:19:6a:1c:be:df:da:2a:bd:0e:aa:e3:b7:
04:a8:f2:0f:af:2f:cc:89:a6:27:c4:7f:2d:87:e2:82:62:08:
44:bf:e0:d6:9f:85:ab:e6:fd:80:ad:65:fd:c1:5b:66:bf:84:
3f:ce:48:80:a2:22:83:85:d7:94:cd:da:5c:f2:96:ee:66:44:
fe:d0:01:48:8b:ac:e6:8b:a3:3b:61:93:80:d7:4b:7e:5f:90:
80:ae:7e:64:8c:5c:2d:f8:f3:cd:9a:d2:17:7f:a9:79:95:1a:
46:36:55:36:f2:a8:b9:a0:fe:62:c9:32:5a:78:b1:dc:92:7a:
e5:7f:e9:ce:f4:31:a5:a7:d9:56:1d:cb:f6:07:d0:e8:e6:05:
5f:04:b5:0c:1f:51:5e:94:f2:d0:bc:a6:06:12:fd:3c:6e:37:
50:da:6f:44:92:1c:df:96:b6:a0:0b:f9:1d:f3:50:15:9c:a8:
09:8a:1d:61:b4:1a:ca:85:81:7f:48:f0:30:fb:4a:79:e1:b3:
d5:95:88:7f:d5:20:17:e7:ec:81:38:bc:94:bd:5b:00:e3:42:
8e:a0:34:40:39:7d:c2:18:82:ee:d1:d9:60:8c:fb:14:6e:22:
9f:56:d7:8a:26:a6:52:bc:65:5e:8d:52:47:9f:d9:32:91:07:
fb:8c:f7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 06:28:33 2025 by rpki-client