Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
File: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft (raw, json)
Hash identifier: iSe7LH6WPGS7SJvq4wY4sSEfAyaX8IG1VfY34L8v1Qw=
Subject key identifier: D9:64:A0:7A:FE:7E:B0:9B:24:DB:E8:09:34:C8:06:0F:CA:38:F3:66
Authority key identifier: 65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
Certificate issuer: /CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Certificate serial: 0196542512EAB50FD1E76EE259B4CBA73D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
Manifest number: 1089
Signing time: Sun 20 Apr 2025 17:00:37 +0000
Manifest this update: Sun 20 Apr 2025 17:00:37 +0000
Manifest next update: Mon 21 Apr 2025 17:00:37 +0000
Files and hashes: 1: UzhPx96yGOR4LTMi9dIu864aqsY.roa (hash: bKjirubIh89AKZTNw76UL/cnaoe6Ib86+oTooy6mls0=)
2: ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl (hash: INVT042XG8TcYlGCdTgptWaEU/aEyAbTGzSY5MZPQbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:12:ea:b5:0f:d1:e7:6e:e2:59:b4:cb:a7:3d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65295913c07c226100bd39f1ee2c52ea98aaee14
Validity
Not Before: Apr 20 17:00:37 2025 GMT
Not After : Apr 21 17:00:37 2025 GMT
Subject: CN=d964a07afe7eb09b24dbe80934c8060fca38f366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:db:64:41:16:50:57:3f:af:c7:0b:4f:cc:
74:9f:eb:e8:3a:34:a7:2b:4d:2d:51:e9:22:12:dd:
74:91:c8:4b:2f:8e:c4:89:55:55:1a:5d:3f:45:77:
cd:9e:81:4f:d7:99:96:be:7a:e4:1e:e0:19:b9:a6:
eb:4e:d5:84:8e:63:ca:a9:35:96:b3:0f:65:66:bc:
33:cc:61:7f:6d:d0:aa:98:71:55:4e:dd:e9:fe:2c:
e2:2a:45:d4:cd:f9:fe:91:f2:c5:05:c0:a1:56:9a:
72:65:ff:7a:10:e5:6f:50:a4:9e:9a:aa:1f:6e:d3:
1e:88:03:49:1f:e4:e8:d8:76:e2:f8:64:21:ac:be:
99:fc:13:3b:9e:34:15:0c:39:57:80:2d:22:53:b3:
57:9e:5b:5b:3a:74:f7:d9:65:06:1d:c6:22:e2:15:
b7:2e:ce:bd:7c:b2:6c:a5:1a:f7:36:d6:84:8c:ec:
6d:39:15:c2:0c:0a:f9:2e:8a:b4:b0:cb:50:e1:7d:
40:bd:42:1e:90:3b:73:f9:cc:87:4f:63:b2:a5:85:
6b:b5:8f:74:8e:a5:7a:92:cd:3d:85:5c:c7:c5:e7:
ff:e0:66:93:48:1e:d7:bf:c0:29:a8:09:0f:62:b8:
94:d1:46:cf:74:a9:df:62:a5:73:78:d2:e6:00:02:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:64:A0:7A:FE:7E:B0:9B:24:DB:E8:09:34:C8:06:0F:CA:38:F3:66
X509v3 Authority Key Identifier:
keyid:65:29:59:13:C0:7C:22:61:00:BD:39:F1:EE:2C:52:EA:98:AA:EE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/50d476-d722-40f2-980f-64236fc36d1d/1/ZSlZE8B8ImEAvTnx7ixS6piq7hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5f:0e:c4:57:41:d0:4c:60:69:24:c5:02:03:87:af:bc:01:
24:e8:a2:25:b9:8c:15:54:6d:21:03:0c:95:e1:00:82:36:6c:
5e:3c:d0:e6:ab:0f:5b:90:93:42:80:7e:b2:00:a8:18:43:ff:
b2:6e:b5:a7:b0:1f:1b:5a:c3:e5:49:3c:7e:2d:d9:1b:61:6d:
e1:b4:ea:fd:b9:b7:7f:28:c5:6d:13:77:22:91:37:cf:40:8f:
ba:78:de:95:af:31:e6:5e:40:cd:48:2a:64:56:81:98:2a:ed:
05:8e:d4:ab:35:30:1a:14:d5:6b:92:8b:d2:4b:f6:f7:b2:6a:
74:69:d0:0c:71:6b:da:46:4c:4b:ce:c2:ae:21:a9:2a:78:cc:
ce:46:d8:81:ba:c5:8c:0e:09:a7:2b:05:36:d0:33:94:0d:ea:
ca:2f:71:8d:29:4d:e3:7f:cb:e6:1e:3e:f1:db:1a:9c:ad:0c:
a1:6c:99:83:04:fa:41:fd:a7:95:05:67:d7:bf:18:02:3f:e9:
22:ad:1a:a5:b6:16:af:e2:d4:1c:c9:ae:65:94:36:2d:94:42:
15:8f:92:36:b3:bf:08:60:03:da:68:f0:df:bf:a0:9e:48:57:
2c:a6:d7:11:ea:bb:34:36:8f:8d:39:48:71:33:50:56:68:fd:
27:13:8e:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJRLqtQ/R527iWbTLpz17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1Mjk1OTEzYzA3YzIyNjEwMGJkMzlmMWVlMmM1MmVhOThh
YWVlMTQwHhcNMjUwNDIwMTcwMDM3WhcNMjUwNDIxMTcwMDM3WjAzMTEwLwYDVQQD
EyhkOTY0YTA3YWZlN2ViMDliMjRkYmU4MDkzNGM4MDYwZmNhMzhmMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXnbZEEWUFc/r8cLT8x0n+voOjSn
K00tUekiEt10kchLL47EiVVVGl0/RXfNnoFP15mWvnrkHuAZuabrTtWEjmPKqTWW
sw9lZrwzzGF/bdCqmHFVTt3p/iziKkXUzfn+kfLFBcChVppyZf96EOVvUKSemqof
btMeiANJH+To2Hbi+GQhrL6Z/BM7njQVDDlXgC0iU7NXnltbOnT32WUGHcYi4hW3
Ls69fLJspRr3NtaEjOxtORXCDAr5Loq0sMtQ4X1AvUIekDtz+cyHT2OypYVrtY90
jqV6ks09hVzHxef/4GaTSB7Xv8ApqAkPYriU0UbPdKnfYqVzeNLmAAI2TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlkoHr+frCbJNvoCTTIBg/KOPNmMB8GA1UdIwQY
MBaAFGUpWRPAfCJhAL058e4sUuqYqu4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYt
NjQyMzZmYzM2ZDFkLzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81MGQ0NzYtZDcyMi00MGYyLTk4MGYtNjQyMzZmYzM2ZDFk
LzEvWlNsWkU4QjhJbUVBdlRueDdpeFM2cGlxN2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiF8OxFdB
0ExgaSTFAgOHr7wBJOiiJbmMFVRtIQMMleEAgjZsXjzQ5qsPW5CTQoB+sgCoGEP/
sm61p7AfG1rD5Uk8fi3ZG2Ft4bTq/bm3fyjFbRN3IpE3z0CPunjela8x5l5AzUgq
ZFaBmCrtBY7UqzUwGhTVa5KL0kv297JqdGnQDHFr2kZMS87CriGpKnjMzkbYgbrF
jA4JpysFNtAzlA3qyi9xjSlN43/L5h4+8dsanK0MoWyZgwT6Qf2nlQVn178YAj/p
Iq0apbYWr+LUHMmuZZQ2LZRCFY+SNrO/CGAD2mjw37+gnkhXLKbXEeq7NDaPjTlI
cTNQVmj9JxOO3g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:24:23 2025 by rpki-client