Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.mft (raw, json)
Hash identifier: o/bUNNnrO9iWyG8GXqYLp12dt9JvNEsPqF/4sgWrSF0=
Subject key identifier: A5:13:8F:20:E1:39:8E:81:04:5D:E0:B9:E2:FA:30:7B:C7:E2:E8:F8
Authority key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Certificate issuer: /CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Certificate serial: 01965BA7E271A0A393314F8F3473CB76310B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
Manifest number: 02EF
Signing time: Tue 22 Apr 2025 04:00:51 +0000
Manifest this update: Tue 22 Apr 2025 04:00:51 +0000
Manifest next update: Wed 23 Apr 2025 04:00:51 +0000
Files and hashes: 1: ks8iWy1FilD9kiiIcgz0a9tcMkE.roa (hash: xbOsfKBCXele8prh5n/9hZCYsk36tRLAfw19ggRv57E=)
2: zyddD-Y5mOobfTnlGPsyn3a-0WY.crl (hash: JKdcKVA+VA+istZSFE4sJU3yDKKERm8ERDZKWdhkeWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:e2:71:a0:a3:93:31:4f:8f:34:73:cb:76:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Validity
Not Before: Apr 22 04:00:51 2025 GMT
Not After : Apr 23 04:00:51 2025 GMT
Subject: CN=a5138f20e1398e81045de0b9e2fa307bc7e2e8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:c2:85:c3:41:e6:ac:28:47:19:ed:78:dd:
e8:17:a8:d1:12:da:be:e4:e3:fc:0c:29:69:fc:7b:
3e:48:b8:c0:c0:ee:d5:ff:5c:69:7f:0a:9f:34:a5:
7b:4d:9d:d7:84:29:b2:eb:10:a4:77:fd:0b:ad:8e:
c2:9d:8c:d6:74:2d:30:0b:7e:32:d8:40:26:63:05:
c4:b7:38:23:17:18:8b:ad:ee:30:88:51:03:30:5e:
70:55:cd:d4:03:93:44:83:b2:f9:7f:41:7e:55:a7:
b9:63:d8:7f:01:5b:9c:2e:03:07:6b:fb:eb:b2:74:
81:c6:0d:96:b0:5e:87:f2:9b:14:d4:f3:45:e6:c4:
fb:d0:90:f9:19:f3:af:e8:1e:ce:9b:d3:ad:ee:cf:
97:03:6e:2d:82:97:25:c4:0c:cd:35:63:ed:19:9a:
05:a8:6c:1c:94:ef:6f:0e:78:14:43:65:8e:bd:c0:
71:53:83:8e:b5:f7:ef:86:a7:da:4e:c4:84:50:f4:
42:12:19:4c:86:fa:7a:89:7b:8d:d7:0d:b4:0e:22:
81:dc:77:70:58:45:ef:0f:e3:db:1c:6e:99:97:cc:
98:f6:cd:20:cd:94:c2:ae:98:8d:4b:e0:e7:d2:49:
2d:23:68:c4:d5:5b:7b:88:4d:c8:e9:e7:be:bd:90:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:13:8F:20:E1:39:8E:81:04:5D:E0:B9:E2:FA:30:7B:C7:E2:E8:F8
X509v3 Authority Key Identifier:
keyid:CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:40:73:aa:06:1b:1a:f3:e8:e8:8b:d0:fd:63:e1:75:27:e4:
68:00:ef:15:33:3a:a1:43:63:f8:d1:ef:5e:8b:43:1a:a0:7e:
32:5e:e9:01:1c:aa:be:27:81:8b:29:4a:74:06:aa:dd:e4:7c:
27:d3:06:49:47:a8:4c:76:b5:69:99:05:e3:bc:e4:38:58:00:
e1:65:f7:6f:91:1d:7d:71:62:7e:a2:e9:22:da:47:b6:4c:bc:
bb:01:f1:b3:de:29:12:5b:dd:fb:85:6e:76:e8:42:7d:d7:0a:
d1:e6:4f:99:e6:25:4f:23:28:87:b5:99:1f:78:1c:b0:f8:8d:
fc:97:69:3b:b5:1b:7a:3f:8d:62:b1:6c:1d:a1:50:d7:e6:90:
25:ba:bd:ed:ed:92:26:41:9f:d5:dc:23:b2:64:1f:7b:7b:13:
d4:90:26:49:b8:ae:9e:9f:1b:19:58:2c:3c:fc:c2:5f:f2:d6:
e7:76:f5:76:dc:f0:dc:77:f8:e8:90:28:a0:5e:84:54:85:8b:
8d:fb:d1:8a:ba:95:ec:76:25:c0:61:5a:81:0f:f1:e3:48:4b:
b4:52:c5:7d:1f:81:ec:26:fe:91:27:83:42:4d:de:61:7d:73:
95:ef:ac:5f:3e:49:85:48:9e:04:9b:15:bb:4d:44:ad:58:ad:
cf:6d:08:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZbp+JxoKOTMU+PNHPLdjELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjc1ZDBmZTYzOTk4ZWExYjdkMzllNTE4ZmIzMjlmNzZi
ZWQxNjYwHhcNMjUwNDIyMDQwMDUxWhcNMjUwNDIzMDQwMDUxWjAzMTEwLwYDVQQD
EyhhNTEzOGYyMGUxMzk4ZTgxMDQ1ZGUwYjllMmZhMzA3YmM3ZTJlOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J3ChcNB5qwoRxnteN3oF6jREtq+
5OP8DClp/Hs+SLjAwO7V/1xpfwqfNKV7TZ3XhCmy6xCkd/0LrY7CnYzWdC0wC34y
2EAmYwXEtzgjFxiLre4wiFEDMF5wVc3UA5NEg7L5f0F+Vae5Y9h/AVucLgMHa/vr
snSBxg2WsF6H8psU1PNF5sT70JD5GfOv6B7Om9Ot7s+XA24tgpclxAzNNWPtGZoF
qGwclO9vDngUQ2WOvcBxU4OOtffvhqfaTsSEUPRCEhlMhvp6iXuN1w20DiKB3Hdw
WEXvD+PbHG6Zl8yY9s0gzZTCrpiNS+Dn0kktI2jE1Vt7iE3I6ee+vZD1nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUTjyDhOY6BBF3gueL6MHvH4uj4MB8GA1UdIwQY
MBaAFM8nXQ/mOZjqG3055Rj7Mp92vtFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDkt
N2I5OTE4MjRiZDgzLzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNzg1MWMtYmI3OC00ZjI5LWExZDktN2I5OTE4MjRiZDgz
LzEvenlkZEQtWTVtT29iZlRubEdQc3luM2EtMFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0BzqgYb
GvPo6IvQ/WPhdSfkaADvFTM6oUNj+NHvXotDGqB+Ml7pARyqvieBiylKdAaq3eR8
J9MGSUeoTHa1aZkF47zkOFgA4WX3b5EdfXFifqLpItpHtky8uwHxs94pElvd+4Vu
duhCfdcK0eZPmeYlTyMoh7WZH3gcsPiN/JdpO7Ubej+NYrFsHaFQ1+aQJbq97e2S
JkGf1dwjsmQfe3sT1JAmSbiunp8bGVgsPPzCX/LW53b1dtzw3Hf46JAooF6EVIWL
jfvRirqV7HYlwGFagQ/x40hLtFLFfR+B7Cb+kSeDQk3eYX1zle+sXz5JhUieBJsV
u01ErVitz20IDA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 10:26:53 2025 by rpki-client