Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
File: zn_f9IC7kN2LJtKCMJrxYEVeyws.mft (raw, json)
Hash identifier: MEowmkM1Y7hvuFjK5HI7XeYFYH/For4NEqU0zDjjkCk=
Subject key identifier: 80:81:05:9C:57:57:94:B8:0B:B1:EE:B8:C7:6F:BC:68:C6:5E:C9:CF
Authority key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Certificate issuer: /CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Certificate serial: 01965E717319F001444E92790552A4D68A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
Manifest number: 12
Signing time: Tue 22 Apr 2025 17:00:15 +0000
Manifest this update: Tue 22 Apr 2025 17:00:15 +0000
Manifest next update: Wed 23 Apr 2025 17:00:15 +0000
Files and hashes: 1: SQJJoXqFqNGjLH2o_g2vHuBkV6k.roa (hash: nQwkpZGomRtyEWqgatsYZovUvrMoig7TXoDGcNqHozM=)
2: zn_f9IC7kN2LJtKCMJrxYEVeyws.crl (hash: 1pCF3Ohieuw3i9SrV5LJR3sBj5zRvEmjKDG4OGYco8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:73:19:f0:01:44:4e:92:79:05:52:a4:d6:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Validity
Not Before: Apr 22 17:00:15 2025 GMT
Not After : Apr 23 17:00:15 2025 GMT
Subject: CN=8081059c575794b80bb1eeb8c76fbc68c65ec9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:45:7a:3a:d3:3d:98:de:98:2a:66:44:86:
55:b5:ec:83:aa:24:b1:9d:df:1a:01:ae:07:3c:8e:
02:07:e2:1b:d2:e6:80:3c:79:a6:1f:ff:3b:2f:69:
22:31:ab:88:4c:04:2c:3a:56:d8:c5:48:fe:7e:cc:
80:a7:5b:4c:3a:3d:ae:1d:86:46:d9:28:ef:5a:3c:
64:b5:14:4a:d6:ee:16:30:62:8f:58:34:76:1b:96:
29:4e:93:12:4c:99:a4:fd:c4:5d:04:b8:7b:74:6b:
47:65:8e:18:10:e8:2c:ae:da:bc:07:53:b3:49:01:
72:da:9a:4d:78:e1:cc:76:b5:c0:11:35:cd:f9:b8:
ed:70:22:20:62:10:4c:9b:07:c8:05:be:b2:d7:5c:
f9:bc:2f:8c:57:97:4a:09:07:38:93:8c:c9:d7:b8:
44:a0:2b:69:df:cb:3a:3b:89:73:58:2c:a6:a6:9d:
a7:ce:58:b2:6d:16:df:a2:e8:d6:be:93:8b:ec:12:
93:27:d1:e4:75:e2:92:ea:72:7c:53:0c:e0:a3:a7:
5a:c2:f4:a3:99:92:bb:8c:4e:40:91:0b:41:f3:5b:
b2:28:f2:dd:7a:f5:9c:4e:e5:26:ec:85:17:2a:e2:
8d:e1:57:43:97:12:63:ca:94:5e:ed:0b:8d:16:34:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:81:05:9C:57:57:94:B8:0B:B1:EE:B8:C7:6F:BC:68:C6:5E:C9:CF
X509v3 Authority Key Identifier:
keyid:CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7f:a0:01:9f:91:a2:ef:53:53:dc:ac:cf:f0:55:13:a0:b0:
bc:3b:f6:0b:95:58:38:37:bc:f7:66:68:4b:08:3f:c0:31:e1:
42:92:e5:b4:d2:9e:13:ba:ba:ae:73:68:3d:cf:0b:12:f0:8d:
3a:cd:cf:e9:75:ad:32:76:ae:48:53:59:89:90:77:b5:fb:11:
14:77:f8:f9:f9:33:6e:7a:da:e2:cb:8a:11:05:8c:65:2f:e0:
f4:8b:ff:1c:db:9d:e9:e1:ae:38:3a:fc:08:dc:ed:4f:1f:45:
8c:11:28:38:b2:cc:64:4d:c8:b5:61:bb:af:c0:91:24:50:42:
75:4b:63:bd:17:da:33:78:4f:ed:68:96:2c:02:88:e1:81:ed:
8e:d3:2f:b4:99:a6:9a:92:8b:91:f0:46:87:09:c1:f8:11:26:
b0:bb:9f:60:59:d3:a0:ff:9a:ba:04:21:5c:25:8a:8d:89:c6:
37:0d:9f:b8:52:8a:d5:c9:03:3c:ef:ca:f3:16:3e:4a:eb:45:
f2:4b:b3:91:dd:a7:e0:a7:72:1f:54:97:a0:c1:79:ef:4f:cb:
40:b2:b2:b9:49:98:af:8a:61:c4:b1:6d:be:0b:24:bf:32:d9:
5d:2e:bc:cf:a4:48:b7:3a:7c:9a:67:20:33:68:cd:c3:22:f8:
05:6f:37:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZecXMZ8AFETpJ5BVKk1oo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlN2ZkZmY0ODBiYjkwZGQ4YjI2ZDI4MjMwOWFmMTYwNDU1
ZWNiMGIwHhcNMjUwNDIyMTcwMDE1WhcNMjUwNDIzMTcwMDE1WjAzMTEwLwYDVQQD
Eyg4MDgxMDU5YzU3NTc5NGI4MGJiMWVlYjhjNzZmYmM2OGM2NWVjOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYRFejrTPZjemCpmRIZVteyDqiSx
nd8aAa4HPI4CB+Ib0uaAPHmmH/87L2kiMauITAQsOlbYxUj+fsyAp1tMOj2uHYZG
2SjvWjxktRRK1u4WMGKPWDR2G5YpTpMSTJmk/cRdBLh7dGtHZY4YEOgsrtq8B1Oz
SQFy2ppNeOHMdrXAETXN+bjtcCIgYhBMmwfIBb6y11z5vC+MV5dKCQc4k4zJ17hE
oCtp38s6O4lzWCympp2nzliybRbfoujWvpOL7BKTJ9HkdeKS6nJ8Uwzgo6dawvSj
mZK7jE5AkQtB81uyKPLdevWcTuUm7IUXKuKN4VdDlxJjypRe7QuNFjQJDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICBBZxXV5S4C7HuuMdvvGjGXsnPMB8GA1UdIwQY
MBaAFM5/3/SAu5DdiybSgjCa8WBFXssLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMt
ZTEyZDE2ZjQ0MTUzLzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81Y2UwM2ItY2QyYy00NDFhLWJjZWMtZTEyZDE2ZjQ0MTUz
LzEvem5fZjlJQzdrTjJMSnRLQ01KcnhZRVZleXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX+gAZ+R
ou9TU9ysz/BVE6CwvDv2C5VYODe892ZoSwg/wDHhQpLltNKeE7q6rnNoPc8LEvCN
Os3P6XWtMnauSFNZiZB3tfsRFHf4+fkzbnra4suKEQWMZS/g9Iv/HNud6eGuODr8
CNztTx9FjBEoOLLMZE3ItWG7r8CRJFBCdUtjvRfaM3hP7WiWLAKI4YHtjtMvtJmm
mpKLkfBGhwnB+BEmsLufYFnToP+augQhXCWKjYnGNw2fuFKK1ckDPO/K8xY+SutF
8kuzkd2n4KdyH1SXoMF570/LQLKyuUmYr4phxLFtvgskvzLZXS68z6RItzp8mmcg
M2jNwyL4BW83Qw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:20 2025 by rpki-client