Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
File: zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft (raw, json)
Hash identifier: W3wD8S/61iE+nHYZvdVvJf0BMUu+EWfld5GGSULPITY=
Subject key identifier: 58:C4:E9:F1:C1:9D:3F:03:09:CF:2B:3B:0D:D8:FC:80:1C:08:54:5C
Authority key identifier: CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
Certificate issuer: /CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Certificate serial: 019644B208B6DE0A2235B9387522968FF8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
Manifest number: 0509
Signing time: Thu 17 Apr 2025 17:00:40 +0000
Manifest this update: Thu 17 Apr 2025 17:00:40 +0000
Manifest next update: Fri 18 Apr 2025 17:00:40 +0000
Files and hashes: 1: 0Da4pxnMXdvI5dEEH3JmAZoTYhA.roa (hash: Hj5Q/2Hh05YJsbHPFQES6qthisRibSra+MQ4aeEku0g=)
2: zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl (hash: ycg7P58EEp17cafSwKnV8qcnbuXcxyOdOw3OB+r1YIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:08:b6:de:0a:22:35:b9:38:75:22:96:8f:f8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9d0647dc17141d842b32f5115d99aa9c9f33dd
Validity
Not Before: Apr 17 17:00:40 2025 GMT
Not After : Apr 18 17:00:40 2025 GMT
Subject: CN=58c4e9f1c19d3f0309cf2b3b0dd8fc801c08545c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:de:61:a0:0d:d1:62:b4:8a:78:15:66:a3:9a:
23:d3:6d:cb:bb:fb:4d:c8:4a:28:3a:b0:87:ba:1b:
8b:cb:5e:ad:10:13:3d:28:9c:29:b8:1c:26:fe:9e:
ba:fd:53:fc:32:71:c2:d1:cf:36:78:43:26:72:e3:
e4:a2:4c:f1:71:e6:83:a3:4f:cc:89:2b:8b:e7:03:
fd:c5:dc:23:c4:a4:f2:ea:c6:90:9a:00:41:2a:be:
aa:3b:a1:c4:29:1c:fa:01:d8:80:68:3b:16:99:21:
79:78:5e:05:39:5a:d5:ab:30:2c:d6:b0:4d:0e:81:
99:e3:8b:b1:4f:47:c7:70:1a:81:e2:01:9f:43:3c:
f5:63:5c:e1:5c:4b:1b:54:fe:83:b7:67:09:70:61:
90:17:ec:22:62:16:a4:3c:02:36:4c:de:8a:82:ae:
c1:27:61:6d:b6:5b:0e:be:dd:7a:d5:43:07:ee:60:
f3:e3:45:a3:d0:d7:30:be:cb:cb:47:e6:9d:ae:92:
a4:34:70:a0:c5:36:e6:fe:28:3c:94:b2:5a:17:2e:
c8:b9:65:ca:86:e6:77:f4:c0:8d:8f:b6:a8:b3:71:
da:80:fd:e9:14:9f:fc:0d:26:33:b7:5f:d2:e2:13:
99:c9:ab:69:30:bf:d9:4d:e8:61:5e:d2:bf:0e:a0:
c1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C4:E9:F1:C1:9D:3F:03:09:CF:2B:3B:0D:D8:FC:80:1C:08:54:5C
X509v3 Authority Key Identifier:
keyid:CE:9D:06:47:DC:17:14:1D:84:2B:32:F5:11:5D:99:AA:9C:9F:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zp0GR9wXFB2EKzL1EV2ZqpyfM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/785090-f864-4dbe-9a4b-80faeca9c2ee/1/zp0GR9wXFB2EKzL1EV2ZqpyfM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dc:63:47:96:2d:4b:0f:a1:18:4d:8d:14:f0:5f:c9:a1:4a:
10:a0:92:e3:55:f6:22:92:07:7e:16:01:ee:51:97:68:f5:c4:
53:47:0d:af:8e:82:58:42:13:2b:1a:33:9b:14:34:1e:59:8b:
d7:32:cb:57:07:10:35:f2:9b:3e:28:ec:f8:18:e4:11:fc:58:
53:8d:b1:20:4c:9d:d2:6f:4d:0b:b7:ee:fa:49:c9:26:84:d4:
4f:f7:31:02:8f:cf:3f:e4:13:f4:5a:1d:51:3c:c0:4b:e9:77:
2d:a9:f0:2f:11:ad:cb:9b:5d:d9:69:21:fd:43:2d:84:7d:56:
c8:8e:9e:b1:f6:77:15:bf:ee:0c:31:45:9c:ab:c6:27:0a:0d:
70:73:0c:79:91:91:ed:0d:01:9e:00:b5:d5:35:e1:81:79:b0:
0e:64:be:73:46:43:6c:2e:23:a5:90:32:21:41:e6:9c:b9:4a:
4a:b7:22:c1:01:7d:45:b3:31:b9:e7:04:85:90:49:c3:ad:e1:
a0:42:ed:3d:e8:8b:de:a6:b8:22:b7:25:f3:27:a4:bc:98:ef:
af:b7:64:0c:b5:d0:63:5a:f4:ef:ce:09:7d:ec:8e:51:7e:3e:
eb:d7:22:74:7b:c9:9e:d5:e4:0f:73:79:84:20:5b:39:36:5c:
4e:b0:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:01:32 2025 by rpki-client