Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
File: ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft (raw, json)
Hash identifier: ycuEFjMfI35P5lK+ApL9CM+Zw5jq4XE+p8+SqTQSnbg=
Subject key identifier: 6E:A9:13:E6:C3:EA:F5:E2:A9:E7:C0:5F:6E:05:C5:20:94:EC:CE:38
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01965348FAA4F3DF59DC4D11A30ED7F57C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
Manifest number: 14FC
Signing time: Sun 20 Apr 2025 13:00:13 +0000
Manifest this update: Sun 20 Apr 2025 13:00:13 +0000
Manifest next update: Mon 21 Apr 2025 13:00:13 +0000
Files and hashes: 1: NpxWjvJ2T7f_6A_ZTECcS5RrLQ8.roa (hash: YKaBKiyko29i+a/NSgKzunvRwz36TvCk2wybrIBhGNU=)
2: ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl (hash: eha4jcoSNw7mOQBQQqeVxyjIdshxbmGHjwrOkW1TvHY=)
3: ZSEAQIHOTp0MEfF6vwyXWgiSW54.roa (hash: ZJN26An1KaCTTG3Kbn3S6/AmVKHN9XMKr6f6QLqx5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:48:fa:a4:f3:df:59:dc:4d:11:a3:0e:d7:f5:7c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Apr 20 13:00:13 2025 GMT
Not After : Apr 21 13:00:13 2025 GMT
Subject: CN=6ea913e6c3eaf5e2a9e7c05f6e05c52094ecce38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:76:4b:b2:65:1b:25:42:73:4b:8a:41:35:
6d:e9:f6:f4:10:0d:3c:50:ab:4e:5b:41:22:1c:d6:
ab:19:ae:16:29:15:84:5d:a8:28:54:c5:95:03:35:
8d:b1:75:bf:92:20:e0:0f:c6:17:7f:71:77:20:e2:
32:cb:9d:34:16:7f:17:63:a8:c7:d7:b5:c2:a9:c2:
39:73:16:9d:02:71:45:0c:71:26:a3:3f:75:73:6c:
a5:05:da:3f:08:d9:2f:bf:9a:c8:ef:1b:6b:89:1d:
f9:21:f2:12:53:e7:96:bf:fa:67:89:c0:26:a1:a4:
1d:6c:86:08:05:0b:ab:bc:45:a0:78:a4:dd:24:ad:
51:24:cf:df:d3:d2:02:e2:46:4f:e7:4c:11:df:55:
31:a1:91:15:af:89:cf:e0:5d:ed:c7:3f:f5:42:43:
72:99:48:22:54:ce:07:26:d3:b2:84:99:2a:10:fb:
3b:55:94:86:ba:59:fe:5b:fd:f0:1f:cd:eb:9e:c1:
f5:64:e4:f7:21:5f:e8:84:ff:6a:f7:96:66:78:82:
a0:90:93:ab:c6:27:ef:3d:51:50:a8:b1:78:16:53:
ed:74:2b:ee:c0:78:03:a8:8b:09:fb:cd:00:6a:d3:
15:2a:8b:23:9a:60:96:ff:a5:d5:d4:19:fe:6d:c7:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A9:13:E6:C3:EA:F5:E2:A9:E7:C0:5F:6E:05:C5:20:94:EC:CE:38
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:50:c8:bc:60:6b:92:b3:30:b9:1f:e3:d6:f4:e1:56:a8:69:
88:3f:04:1a:0e:6b:42:9f:de:aa:88:92:3f:cc:bf:ef:2b:2e:
ee:e2:f2:13:a9:7c:1a:6d:c0:f5:72:f3:ba:60:83:ef:f0:8f:
07:8e:96:58:b7:f7:72:ef:b6:fc:f8:6b:f1:3a:68:7e:a0:6e:
c1:2c:83:54:70:aa:dd:31:fd:ac:f6:70:23:39:46:1f:b7:f3:
5c:0d:d5:d6:23:ba:2a:13:28:a5:6b:99:84:78:93:73:de:03:
2c:8c:af:61:d0:c7:dc:09:4b:b1:96:11:0b:bd:9e:c6:07:6e:
df:8a:ea:e2:0d:16:86:16:04:f1:5c:47:bc:9c:93:68:7e:2e:
e2:bc:51:5f:c8:8a:8a:40:cb:5c:a2:3a:23:c6:6a:10:e1:36:
91:88:2c:d6:ab:0c:c2:43:86:ba:61:20:76:2f:6d:6d:7b:cd:
67:a8:20:7a:6e:05:36:3f:8b:de:8b:3c:2b:90:ce:8e:71:cd:
22:7f:aa:1f:57:ba:6d:7f:4c:f7:fc:0d:8f:b0:ec:73:e9:5e:
23:48:13:f2:5d:49:b5:dc:fc:06:f3:97:b6:a3:f8:63:2d:47:
2b:13:d1:a2:87:8d:9d:80:48:d8:dd:88:f7:91:60:af:fc:78:
04:ff:8e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSPqk899Z3E0Row7X9XxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz
ZDUxNmUwHhcNMjUwNDIwMTMwMDEzWhcNMjUwNDIxMTMwMDEzWjAzMTEwLwYDVQQD
Eyg2ZWE5MTNlNmMzZWFmNWUyYTllN2MwNWY2ZTA1YzUyMDk0ZWNjZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk92S7JlGyVCc0uKQTVt6fb0EA08
UKtOW0EiHNarGa4WKRWEXagoVMWVAzWNsXW/kiDgD8YXf3F3IOIyy500Fn8XY6jH
17XCqcI5cxadAnFFDHEmoz91c2ylBdo/CNkvv5rI7xtriR35IfISU+eWv/pnicAm
oaQdbIYIBQurvEWgeKTdJK1RJM/f09IC4kZP50wR31UxoZEVr4nP4F3txz/1QkNy
mUgiVM4HJtOyhJkqEPs7VZSGuln+W/3wH83rnsH1ZOT3IV/ohP9q95ZmeIKgkJOr
xifvPVFQqLF4FlPtdCvuwHgDqIsJ+80AatMVKosjmmCW/6XV1Bn+bcdr0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6pE+bD6vXiqefAX24FxSCU7M44MB8GA1UdIwQY
MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt
OGQ4MzU5NDhlODc5LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5
LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA01DIvGBr
krMwuR/j1vThVqhpiD8EGg5rQp/eqoiSP8y/7ysu7uLyE6l8Gm3A9XLzumCD7/CP
B46WWLf3cu+2/Phr8TpofqBuwSyDVHCq3TH9rPZwIzlGH7fzXA3V1iO6KhMopWuZ
hHiTc94DLIyvYdDH3AlLsZYRC72exgdu34rq4g0WhhYE8VxHvJyTaH4u4rxRX8iK
ikDLXKI6I8ZqEOE2kYgs1qsMwkOGumEgdi9tbXvNZ6ggem4FNj+L3os8K5DOjnHN
In+qH1e6bX9M9/wNj7Dsc+leI0gT8l1Jtdz8BvOXtqP4Yy1HKxPRooeNnYBI2N2I
95Fgr/x4BP+OMA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:56:33 2025 by rpki-client