Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
File: zS0l92kTYIeMus6YWJC59e_PfZU.mft (raw, json)
Hash identifier: 57hA9LLSsmUplCdAkquNoN8BEBz9h7aIfzFJPgHV374=
Subject key identifier: 25:4B:01:E4:52:EC:91:34:58:34:48:CE:4B:33:DF:CA:15:80:89:67
Authority key identifier: CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
Certificate issuer: /CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Certificate serial: 019654C9E27D67FB9D45B6BC4175EC8803F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
Manifest number: 1454
Signing time: Sun 20 Apr 2025 20:00:38 +0000
Manifest this update: Sun 20 Apr 2025 20:00:38 +0000
Manifest next update: Mon 21 Apr 2025 20:00:38 +0000
Files and hashes: 1: lUKZFEQR5YFLyzQjNbMEJSbndmc.roa (hash: Ev1zfRFSrBx+hG5oLqV3IujShWJmSxI4j5cxDJLVNpw=)
2: zS0l92kTYIeMus6YWJC59e_PfZU.crl (hash: /FnOZPcoM5aWLDHGMcxmufk5ULGKWbCacYD3+RpmhJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:e2:7d:67:fb:9d:45:b6:bc:41:75:ec:88:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd2d25f7691360878cbace985890b9f5efcf7d95
Validity
Not Before: Apr 20 20:00:38 2025 GMT
Not After : Apr 21 20:00:38 2025 GMT
Subject: CN=254b01e452ec9134583448ce4b33dfca15808967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cc:4f:22:bf:3b:32:7e:bd:0c:b9:b0:be:e2:
94:65:1f:9c:a6:2b:3b:5b:32:1d:ac:15:e7:42:4d:
df:dd:1b:0e:c1:ae:a2:91:ce:e2:87:d7:fd:96:5e:
5a:fe:d8:bc:c4:82:3c:02:33:3a:89:27:e6:99:12:
c3:0f:0c:ed:be:c6:38:12:ec:2e:c6:8a:3e:c7:00:
a6:b6:6d:80:bd:cc:c4:8f:9a:52:83:e9:59:a1:bf:
bc:c5:58:2e:8b:de:17:1b:7f:70:c8:77:9e:21:b6:
e1:09:71:a0:dd:c9:5d:ed:e7:a0:9b:b6:cf:b0:ba:
cf:6c:61:42:c9:2e:1c:32:27:50:a0:bc:76:5c:13:
c2:78:3c:cd:92:8d:ce:88:23:f6:32:76:6a:31:2a:
16:6f:f9:bb:15:2e:d6:06:55:ae:e5:68:f8:0b:a6:
81:bc:7f:f7:09:19:d8:c6:42:15:31:58:b3:2f:20:
bc:3b:f2:a2:4f:44:5f:1a:eb:ac:7d:20:96:b4:42:
6a:08:d5:bf:32:60:77:76:7f:ac:14:b8:80:25:f1:
2b:2c:79:60:54:62:f7:ce:3e:26:61:29:b0:8a:28:
bc:65:65:54:aa:ca:90:91:7e:46:db:9d:bd:1d:ec:
fc:b6:1d:e7:de:db:e1:93:88:63:72:38:2c:d1:ec:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4B:01:E4:52:EC:91:34:58:34:48:CE:4B:33:DF:CA:15:80:89:67
X509v3 Authority Key Identifier:
keyid:CD:2D:25:F7:69:13:60:87:8C:BA:CE:98:58:90:B9:F5:EF:CF:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0l92kTYIeMus6YWJC59e_PfZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c38360-743a-428f-ab97-6369b17ff178/1/zS0l92kTYIeMus6YWJC59e_PfZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:24:fe:02:27:68:07:87:d5:af:03:ea:0c:82:58:3b:31:98:
1d:82:bb:51:10:28:b1:38:23:eb:52:43:5d:8c:e7:66:55:70:
e0:e3:5f:be:eb:24:13:60:62:2a:20:76:2c:c0:4f:7f:bf:37:
bc:33:49:19:c1:32:94:a7:c7:25:7e:ca:44:05:7d:ef:21:e7:
55:73:d8:1b:11:4c:0f:31:46:a5:10:4e:75:c5:c6:8a:b7:c9:
38:d6:7b:f5:ec:dc:f5:15:cb:30:b9:6f:74:53:64:96:a8:9d:
70:2d:79:e6:76:5c:43:8b:7b:db:06:42:cf:ee:a6:67:ad:6e:
89:94:3a:f1:2c:6c:97:35:c6:57:e7:f0:2b:59:7f:e5:76:29:
af:6b:73:3a:32:66:19:45:b7:19:a9:9e:ea:ed:ed:df:b3:73:
c1:57:2b:4a:c8:98:b0:17:9d:0a:ce:65:b4:12:3b:3f:4c:5c:
a0:88:f0:db:f6:32:b6:64:90:90:7e:ff:60:20:fc:2e:fc:c9:
77:3f:2b:8b:ff:f5:d8:7d:3e:43:6d:5c:a3:bc:1c:0c:76:5d:
2a:dd:50:42:2e:d3:31:fb:29:23:03:d2:46:7b:a5:9a:1f:df:
65:f6:0b:62:d1:2b:12:fe:cb:55:e6:c9:67:99:0e:e6:60:f4:
b1:ef:ce:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUyeJ9Z/udRba8QXXsiAP3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMmQyNWY3NjkxMzYwODc4Y2JhY2U5ODU4OTBiOWY1ZWZj
ZjdkOTUwHhcNMjUwNDIwMjAwMDM4WhcNMjUwNDIxMjAwMDM4WjAzMTEwLwYDVQQD
EygyNTRiMDFlNDUyZWM5MTM0NTgzNDQ4Y2U0YjMzZGZjYTE1ODA4OTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cxPIr87Mn69DLmwvuKUZR+cpis7
WzIdrBXnQk3f3RsOwa6ikc7ih9f9ll5a/ti8xII8AjM6iSfmmRLDDwztvsY4Euwu
xoo+xwCmtm2AvczEj5pSg+lZob+8xVgui94XG39wyHeeIbbhCXGg3cld7eegm7bP
sLrPbGFCyS4cMidQoLx2XBPCeDzNko3OiCP2MnZqMSoWb/m7FS7WBlWu5Wj4C6aB
vH/3CRnYxkIVMVizLyC8O/KiT0RfGuusfSCWtEJqCNW/MmB3dn+sFLiAJfErLHlg
VGL3zj4mYSmwiii8ZWVUqsqQkX5G2529Hez8th3n3tvhk4hjcjgs0exzRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVLAeRS7JE0WDRIzksz38oVgIlnMB8GA1UdIwQY
MBaAFM0tJfdpE2CHjLrOmFiQufXvz32VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTct
NjM2OWIxN2ZmMTc4LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9jMzgzNjAtNzQzYS00MjhmLWFiOTctNjM2OWIxN2ZmMTc4
LzEvelMwbDkya1RZSWVNdXM2WVdKQzU5ZV9QZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyT+Aido
B4fVrwPqDIJYOzGYHYK7URAosTgj61JDXYznZlVw4ONfvuskE2BiKiB2LMBPf783
vDNJGcEylKfHJX7KRAV97yHnVXPYGxFMDzFGpRBOdcXGirfJONZ79ezc9RXLMLlv
dFNklqidcC155nZcQ4t72wZCz+6mZ61uiZQ68SxslzXGV+fwK1l/5XYpr2tzOjJm
GUW3Game6u3t37NzwVcrSsiYsBedCs5ltBI7P0xcoIjw2/YytmSQkH7/YCD8LvzJ
dz8ri//12H0+Q21co7wcDHZdKt1QQi7TMfspIwPSRnulmh/fZfYLYtErEv7LVebJ
Z5kO5mD0se/OJA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:47:09 2025 by rpki-client