Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
File: zfUae0xbJFgCkrjEqmqpwyVmVIA.mft (raw, json)
Hash identifier: 4cmPWYfQNLi2knonUgmbS73Z5uDea9B8RZ8curnxgCg=
Subject key identifier: 46:20:A6:56:99:53:E0:6D:07:AA:D4:8F:F4:F5:0E:B6:BE:28:EC:19
Authority key identifier: CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
Certificate issuer: /CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Certificate serial: 01965A27175336018EB53E189DEB37273E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
Manifest number: 09F5
Signing time: Mon 21 Apr 2025 21:00:33 +0000
Manifest this update: Mon 21 Apr 2025 21:00:33 +0000
Manifest next update: Tue 22 Apr 2025 21:00:33 +0000
Files and hashes: 1: bL9XDxQqDi4zzbqIbwV9pxg-nag.roa (hash: vqETjbVoGoH82qeAvCJ8Sz1hJwZnPnltJtLCCK0jXFQ=)
2: zfUae0xbJFgCkrjEqmqpwyVmVIA.crl (hash: iJoxukEvsMUXyCZ+myh6LQXDRi5+1+tCA3O017hoU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:17:53:36:01:8e:b5:3e:18:9d:eb:37:27:3e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf51a7b4c5b24580292b8c4aa6aa9c325665480
Validity
Not Before: Apr 21 21:00:33 2025 GMT
Not After : Apr 22 21:00:33 2025 GMT
Subject: CN=4620a6569953e06d07aad48ff4f50eb6be28ec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:97:4f:4a:98:46:18:25:de:c8:05:b9:62:
45:da:94:cf:57:d0:b7:64:65:b0:ae:e9:29:7b:e1:
86:38:1b:6c:4c:fb:ff:9e:00:05:f2:d4:61:11:cd:
fd:d9:13:c7:05:9a:2b:f1:91:0c:b0:7a:d6:f0:f5:
b5:75:2d:51:eb:4c:0f:12:49:1e:f0:41:8f:58:b0:
e8:b3:d0:c4:2b:58:b0:c4:1d:0e:09:b0:76:d1:5d:
92:dc:8e:b5:45:4a:31:9c:98:13:44:20:8a:f5:0f:
c6:59:7b:eb:2b:9d:e3:0c:6d:b4:d3:56:ae:27:ed:
c2:26:f9:3a:8b:d5:1d:1f:b7:38:b9:9b:37:8e:97:
93:5c:ab:42:e6:59:43:87:11:01:3a:4c:5d:ed:3a:
56:a3:b7:e4:93:e5:00:13:bb:1f:c8:6c:60:53:09:
ae:e4:33:af:2b:79:8e:14:c6:97:7a:9c:b1:c9:b6:
62:d5:60:0c:19:9e:8a:8a:b7:d3:bf:12:3b:93:8f:
8a:57:23:b0:3d:cb:f0:19:fc:f8:94:e7:5a:da:3e:
f8:6f:fa:05:73:38:25:8a:c4:0e:6e:ce:15:29:99:
d8:9d:a5:70:89:6b:38:0d:3b:8c:9c:5e:1a:36:86:
56:30:92:d6:61:5c:4e:f8:4d:ce:9c:a8:05:66:21:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:A6:56:99:53:E0:6D:07:AA:D4:8F:F4:F5:0E:B6:BE:28:EC:19
X509v3 Authority Key Identifier:
keyid:CD:F5:1A:7B:4C:5B:24:58:02:92:B8:C4:AA:6A:A9:C3:25:66:54:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfUae0xbJFgCkrjEqmqpwyVmVIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/272986-88a9-477c-a277-a55b580b0ea3/1/zfUae0xbJFgCkrjEqmqpwyVmVIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2f:60:05:59:28:7b:ec:c3:0b:40:ba:08:69:a3:15:fc:a6:
7c:e5:70:ed:ad:e3:11:e8:ae:03:0d:cf:0d:22:e5:6f:bf:a0:
f9:af:2e:97:df:a0:03:50:43:52:84:6b:1c:90:dd:05:3e:ce:
ea:ab:74:d3:1b:16:3d:2c:84:ca:66:c2:ea:70:86:0a:69:4f:
1a:e4:1d:79:3e:ad:aa:d8:3b:d0:c6:f1:4f:22:21:18:66:12:
8f:84:60:f3:00:a2:68:ed:81:51:97:50:f5:c5:35:55:73:d0:
01:aa:05:78:b3:eb:7c:a9:6a:f9:22:d5:d9:bb:5b:b2:da:3f:
6f:05:60:3f:89:9b:fd:d9:19:ed:81:4f:cc:88:3c:5e:84:1a:
07:d1:a5:7c:2b:3b:da:bd:5c:02:63:b1:4e:96:df:fb:d8:32:
e8:83:a8:21:3b:ab:e3:36:11:da:c3:5e:61:c7:bd:d3:a9:38:
91:c9:35:b8:60:7d:5f:82:9a:ea:15:c4:6d:8e:18:4c:ad:06:
fb:c1:fb:90:2b:b0:14:06:ad:c2:ad:45:5e:6c:6c:0a:08:5f:
34:cc:db:1a:c1:da:b7:f9:b3:a8:5f:5f:4a:f0:12:f9:82:ab:
f6:d1:38:98:ea:a7:ac:5a:b4:fe:5c:69:ec:4e:9d:a4:c0:5a:
5c:13:41:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZaJxdTNgGOtT4Ynes3Jz6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkZjUxYTdiNGM1YjI0NTgwMjkyYjhjNGFhNmFhOWMzMjU2
NjU0ODAwHhcNMjUwNDIxMjEwMDMzWhcNMjUwNDIyMjEwMDMzWjAzMTEwLwYDVQQD
Eyg0NjIwYTY1Njk5NTNlMDZkMDdhYWQ0OGZmNGY1MGViNmJlMjhlYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3mXT0qYRhgl3sgFuWJF2pTPV9C3
ZGWwrukpe+GGOBtsTPv/ngAF8tRhEc392RPHBZor8ZEMsHrW8PW1dS1R60wPEkke
8EGPWLDos9DEK1iwxB0OCbB20V2S3I61RUoxnJgTRCCK9Q/GWXvrK53jDG2001au
J+3CJvk6i9UdH7c4uZs3jpeTXKtC5llDhxEBOkxd7TpWo7fkk+UAE7sfyGxgUwmu
5DOvK3mOFMaXepyxybZi1WAMGZ6KirfTvxI7k4+KVyOwPcvwGfz4lOda2j74b/oF
czglisQObs4VKZnYnaVwiWs4DTuMnF4aNoZWMJLWYVxO+E3OnKgFZiEpdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYgplaZU+BtB6rUj/T1Dra+KOwZMB8GA1UdIwQY
MBaAFM31GntMWyRYApK4xKpqqcMlZlSAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzct
YTU1YjU4MGIwZWEzLzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yNzI5ODYtODhhOS00NzdjLWEyNzctYTU1YjU4MGIwZWEz
LzEvemZVYWUweGJKRmdDa3JqRXFtcXB3eVZtVklBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJC9gBVko
e+zDC0C6CGmjFfymfOVw7a3jEeiuAw3PDSLlb7+g+a8ul9+gA1BDUoRrHJDdBT7O
6qt00xsWPSyEymbC6nCGCmlPGuQdeT6tqtg70MbxTyIhGGYSj4Rg8wCiaO2BUZdQ
9cU1VXPQAaoFeLPrfKlq+SLV2btbsto/bwVgP4mb/dkZ7YFPzIg8XoQaB9GlfCs7
2r1cAmOxTpbf+9gy6IOoITur4zYR2sNeYce906k4kck1uGB9X4Ka6hXEbY4YTK0G
+8H7kCuwFAatwq1FXmxsCghfNMzbGsHat/mzqF9fSvAS+YKr9tE4mOqnrFq0/lxp
7E6dpMBaXBNBfQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:08:32 2025 by rpki-client