Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
File: ZeuO9EGD-OOpyIenviaz8HE8E70.mft (raw, json)
Hash identifier: JtNOh7N0IPXslO0f9u6CqttO5P7IBSYYpJgu2gCROU8=
Subject key identifier: 75:A2:C9:11:F8:CF:94:53:FE:04:30:95:CC:97:5E:C4:CF:AF:88:EA
Authority key identifier: 65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
Certificate issuer: /CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Certificate serial: 0196583893E2EA1942B25395A3E4884C833F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
Manifest number: 0ABD
Signing time: Mon 21 Apr 2025 12:00:24 +0000
Manifest this update: Mon 21 Apr 2025 12:00:24 +0000
Manifest next update: Tue 22 Apr 2025 12:00:24 +0000
Files and hashes: 1: ZeuO9EGD-OOpyIenviaz8HE8E70.crl (hash: xO3c8/F5YpMsCXjnqZ85kaZa1tLiKejkE+K8MG3/cD8=)
2: _nLH4yuuFQfyAsGvM-Hn21cXD8E.roa (hash: DfpdmgrcGh1AJupG4dykdHnlomMk4nG6aWIUzegDtp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:93:e2:ea:19:42:b2:53:95:a3:e4:88:4c:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65eb8ef44183f8e3a9c887a7be26b3f0713c13bd
Validity
Not Before: Apr 21 12:00:24 2025 GMT
Not After : Apr 22 12:00:24 2025 GMT
Subject: CN=75a2c911f8cf9453fe043095cc975ec4cfaf88ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:e0:a2:82:7d:ca:67:5d:b0:d4:e6:70:8d:
c6:42:25:67:a3:7b:ec:1a:f0:6d:a4:5f:97:4b:0d:
fa:3d:41:fe:e8:3f:f7:ab:78:5d:d2:59:33:fd:f2:
c8:32:79:9f:35:ed:36:62:df:35:73:c0:23:01:16:
23:27:2e:2a:87:53:bd:5c:51:99:ec:50:bf:fe:84:
7a:20:59:a5:31:a0:31:4c:75:e4:3f:ba:f5:58:20:
23:b2:d2:80:da:4a:82:70:e4:ca:6b:dc:05:6b:5a:
e1:6b:59:48:ae:58:25:71:d1:d8:7a:57:93:5c:9b:
29:dd:18:eb:22:2e:6c:dc:ba:b8:ba:4b:1d:ef:0f:
2a:b6:d7:0c:0d:8f:bd:2c:55:c4:b4:f7:67:15:8c:
64:5e:53:65:49:fa:44:78:eb:07:29:45:b2:dc:7d:
c7:51:ec:4e:73:07:8d:a8:60:a9:82:cf:9f:3a:ca:
80:a2:54:99:ae:c0:e8:56:54:28:4b:24:76:8a:6d:
08:f2:26:56:75:14:ec:ca:e5:ae:f1:d6:93:b0:af:
ef:5d:3b:9a:8d:82:14:56:b3:06:d2:6f:66:b7:6e:
f0:e0:a4:e3:75:1f:7f:b5:c9:aa:6f:f0:12:6b:03:
7e:dd:b8:3d:42:a9:2e:fc:7c:47:b8:72:3e:25:d1:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A2:C9:11:F8:CF:94:53:FE:04:30:95:CC:97:5E:C4:CF:AF:88:EA
X509v3 Authority Key Identifier:
keyid:65:EB:8E:F4:41:83:F8:E3:A9:C8:87:A7:BE:26:B3:F0:71:3C:13:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeuO9EGD-OOpyIenviaz8HE8E70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fcea85-8be1-4877-878a-ad9e1a0510b9/1/ZeuO9EGD-OOpyIenviaz8HE8E70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:91:2f:74:ce:f1:92:c0:07:fe:dd:6f:60:63:4c:84:aa:3e:
28:2f:7e:34:3f:59:96:4f:31:eb:1e:2b:4d:fd:e7:11:71:c5:
5f:1d:02:d3:43:c8:3a:28:6b:8e:93:00:0d:48:4b:4c:f3:3b:
62:ad:2a:06:98:e3:26:a9:0a:6b:b9:17:b0:77:b5:c6:17:dc:
f3:f2:e2:b2:4b:20:26:4e:0f:5d:50:29:9b:40:81:7f:a7:fb:
c4:ff:e3:4b:a9:f0:6a:93:af:75:d0:54:de:ad:83:45:76:2f:
8b:ec:24:6d:d1:6b:24:af:3b:93:7a:1a:f7:62:1d:56:bd:f9:
77:18:85:f0:11:bb:bf:55:cc:84:8d:9f:ee:1d:35:41:79:dd:
ef:03:47:59:bf:be:ea:70:b9:fc:7a:6d:cf:c0:ca:69:b1:ed:
35:55:e5:9e:d7:06:63:3c:5b:f0:96:83:4f:41:2e:d9:e6:48:
64:85:34:79:43:f6:90:2b:d0:d4:f5:87:98:33:ea:76:b8:12:
4b:dc:39:42:c2:1c:a7:ea:22:e1:bc:cd:63:3c:da:77:0e:51:
a2:fc:6e:7e:f7:04:c9:23:db:d5:35:58:a7:f8:8f:32:34:16:
d0:af:aa:72:2e:e3:b9:c8:7d:ff:ef:ab:f9:56:64:3a:39:8d:
93:cf:d9:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYOJPi6hlCslOVo+SITIM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZWI4ZWY0NDE4M2Y4ZTNhOWM4ODdhN2JlMjZiM2YwNzEz
YzEzYmQwHhcNMjUwNDIxMTIwMDI0WhcNMjUwNDIyMTIwMDI0WjAzMTEwLwYDVQQD
Eyg3NWEyYzkxMWY4Y2Y5NDUzZmUwNDMwOTVjYzk3NWVjNGNmYWY4OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+fgooJ9ymddsNTmcI3GQiVno3vs
GvBtpF+XSw36PUH+6D/3q3hd0lkz/fLIMnmfNe02Yt81c8AjARYjJy4qh1O9XFGZ
7FC//oR6IFmlMaAxTHXkP7r1WCAjstKA2kqCcOTKa9wFa1rha1lIrlglcdHYeleT
XJsp3RjrIi5s3Lq4uksd7w8qttcMDY+9LFXEtPdnFYxkXlNlSfpEeOsHKUWy3H3H
UexOcweNqGCpgs+fOsqAolSZrsDoVlQoSyR2im0I8iZWdRTsyuWu8daTsK/vXTua
jYIUVrMG0m9mt27w4KTjdR9/tcmqb/ASawN+3bg9Qqku/HxHuHI+JdH0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWiyRH4z5RT/gQwlcyXXsTPr4jqMB8GA1UdIwQY
MBaAFGXrjvRBg/jjqciHp74ms/BxPBO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEt
YWQ5ZTFhMDUxMGI5LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mY2VhODUtOGJlMS00ODc3LTg3OGEtYWQ5ZTFhMDUxMGI5
LzEvWmV1TzlFR0QtT09weUllbnZpYXo4SEU4RTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpEvdM7x
ksAH/t1vYGNMhKo+KC9+ND9Zlk8x6x4rTf3nEXHFXx0C00PIOihrjpMADUhLTPM7
Yq0qBpjjJqkKa7kXsHe1xhfc8/LisksgJk4PXVApm0CBf6f7xP/jS6nwapOvddBU
3q2DRXYvi+wkbdFrJK87k3oa92IdVr35dxiF8BG7v1XMhI2f7h01QXnd7wNHWb++
6nC5/Hptz8DKabHtNVXlntcGYzxb8JaDT0Eu2eZIZIU0eUP2kCvQ1PWHmDPqdrgS
S9w5QsIcp+oi4bzNYzzadw5RovxufvcEySPb1TVYp/iPMjQW0K+qci7juch9/++r
+VZkOjmNk8/Zww==
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:07 2025 by rpki-client