Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json)
Hash identifier: JZFSLeaFsjtdWTxwviGVQ1Cogy4/je+6J7Rpcso/Gts=
Subject key identifier: 28:A4:41:F4:92:91:3C:E5:7A:8C:DF:6B:A2:F8:B8:17:19:FF:1B:B5
Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01
Certificate serial: 01965CF23DB7EA822259D52446FB5B110B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 10:01:41 +0000
Manifest this update: Tue 22 Apr 2025 10:01:41 +0000
Manifest next update: Wed 23 Apr 2025 10:01:41 +0000
Files and hashes: 1: 5hRdogkirGENwV4J_9yZhIM72Qg.roa (hash: J4uFgSp054qa3rungh3dVcHSOU8TUTMoE74wGhQ37mY=)
2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: T62lPuHqBunL3s6xfvJrM8RWgkQ3prARW0wGpG3yGII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f2:3d:b7:ea:82:22:59:d5:24:46:fb:5b:11:0b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01
Validity
Not Before: Apr 22 10:01:41 2025 GMT
Not After : Apr 23 10:01:41 2025 GMT
Subject: CN=28a441f492913ce57a8cdf6ba2f8b81719ff1bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:44:59:d0:80:c3:e9:dc:9e:9b:0b:16:eb:
59:d1:b8:f5:56:26:37:6e:5b:b5:02:37:89:68:ea:
a2:ba:53:2e:9e:57:0e:c1:3e:e5:0e:a0:31:51:53:
0a:a7:8e:e9:ef:9c:fe:9f:3a:18:39:91:53:88:02:
b8:28:73:ac:fb:71:ed:5d:e3:2f:6a:99:c0:2a:b0:
64:da:0d:32:d7:f9:1e:af:87:f0:53:e1:74:26:70:
a7:fd:57:76:64:24:eb:b7:c1:31:ea:d4:0c:fc:c5:
8f:9e:56:e9:31:3e:19:e6:35:79:4e:d5:6a:3e:fa:
70:b4:30:8f:42:86:42:4a:9a:a6:b8:b0:b4:f0:09:
6f:1d:39:0b:ae:e8:f7:ed:4d:f2:ca:45:b9:fc:f5:
87:c1:00:fd:cd:26:72:9b:73:de:de:b8:88:62:40:
cb:1f:1a:4b:d6:5e:94:2a:7a:06:4d:63:67:15:bd:
3b:79:80:96:5f:3f:26:f9:16:01:d8:03:58:46:c6:
03:3b:a6:91:ab:d6:0c:33:58:96:47:7d:f9:f1:11:
37:47:67:c8:a4:af:b2:df:78:43:b5:1a:4e:93:2a:
c9:13:69:56:92:39:61:f2:01:b5:5f:1b:ae:3d:70:
72:3e:b7:39:f0:c7:ec:4e:b5:6f:02:e4:78:99:6d:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A4:41:F4:92:91:3C:E5:7A:8C:DF:6B:A2:F8:B8:17:19:FF:1B:B5
X509v3 Authority Key Identifier:
keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:45:e1:2a:17:4f:d8:43:78:87:47:9a:43:b3:3f:bc:0c:99:
6a:74:51:5a:d6:ec:71:4a:92:66:6d:8b:de:55:24:bb:e2:52:
19:52:9b:f7:c1:8c:3d:9c:1b:4a:27:bf:d8:ef:71:94:d7:ac:
bb:65:54:0d:fe:84:dc:9c:74:34:00:42:44:62:ae:3e:6d:6c:
4a:e9:1c:4a:83:a1:f9:3f:bc:c7:1f:ed:36:da:8d:bb:24:4c:
d3:95:bd:60:aa:71:1f:0b:76:b6:f9:11:25:31:3a:6c:3c:94:
28:e7:0c:6b:d7:69:68:ed:ee:ac:c4:64:1c:42:a0:87:a5:bf:
49:3b:36:2a:de:d4:5b:d5:b5:64:19:f2:1f:5e:4c:99:49:f3:
3f:c0:a7:3d:04:79:4e:8a:d8:67:44:f1:85:87:29:78:ce:fb:
e7:33:d7:35:74:b4:3e:20:5f:ed:6c:3b:7e:2c:87:35:12:da:
d5:19:1e:7e:69:2f:11:5c:01:bc:37:fd:97:45:ce:71:9f:d4:
10:b6:bc:da:40:06:aa:5d:2a:96:40:74:2a:07:98:6e:41:33:
4b:83:bb:e5:2b:38:80:f4:74:b3:55:04:6f:c7:f4:32:b9:24:
85:91:ac:95:81:ac:36:18:08:b2:ee:57:5a:e5:38:4d:bf:20:
cb:ec:4f:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8j236oIiWdUkRvtbEQstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDk3NThiOGM4YzM3MzU4M2MwNTc1MTY2ZDYyMzQzNjAw
YzdmMDEwHhcNMjUwNDIyMTAwMTQxWhcNMjUwNDIzMTAwMTQxWjAzMTEwLwYDVQQD
EygyOGE0NDFmNDkyOTEzY2U1N2E4Y2RmNmJhMmY4YjgxNzE5ZmYxYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GVEWdCAw+ncnpsLFutZ0bj1ViY3
blu1AjeJaOqiulMunlcOwT7lDqAxUVMKp47p75z+nzoYOZFTiAK4KHOs+3HtXeMv
apnAKrBk2g0y1/ker4fwU+F0JnCn/Vd2ZCTrt8Ex6tQM/MWPnlbpMT4Z5jV5TtVq
PvpwtDCPQoZCSpqmuLC08AlvHTkLruj37U3yykW5/PWHwQD9zSZym3Pe3riIYkDL
HxpL1l6UKnoGTWNnFb07eYCWXz8m+RYB2ANYRsYDO6aRq9YMM1iWR3358RE3R2fI
pK+y33hDtRpOkyrJE2lWkjlh8gG1XxuuPXByPrc58MfsTrVvAuR4mW1gXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCikQfSSkTzleozfa6L4uBcZ/xu1MB8GA1UdIwQY
MBaAFGbZdYuMjDc1g8BXUWbWI0NgDH8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWIt
ZWU4ODMxOTI0YjMyLzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWItZWU4ODMxOTI0YjMy
LzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0XhKhdP
2EN4h0eaQ7M/vAyZanRRWtbscUqSZm2L3lUku+JSGVKb98GMPZwbSie/2O9xlNes
u2VUDf6E3Jx0NABCRGKuPm1sSukcSoOh+T+8xx/tNtqNuyRM05W9YKpxHwt2tvkR
JTE6bDyUKOcMa9dpaO3urMRkHEKgh6W/STs2Kt7UW9W1ZBnyH15MmUnzP8CnPQR5
TorYZ0TxhYcpeM775zPXNXS0PiBf7Ww7fiyHNRLa1RkefmkvEVwBvDf9l0XOcZ/U
ELa82kAGql0qlkB0KgeYbkEzS4O75Ss4gPR0s1UEb8f0MrkkhZGslYGsNhgIsu5X
WuU4Tb8gy+xPPA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:29 2025 by rpki-client