Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
File: ZAsfh3LG70hOLNLWYmPy75j6OWg.mft (raw, json)
Hash identifier: 8gFsMVlfUatDBC78HTKPZzNKsPtQtN5CSZyqRXYj8Ys=
Subject key identifier: 07:E8:EB:61:57:E6:5E:CF:9F:9A:BD:02:BD:6C:0B:84:9E:58:C7:6B
Authority key identifier: 64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
Certificate issuer: /CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Certificate serial: 01965492FFEA584580370EB5F11F0CF3F373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:41 +0000
Manifest this update: Sun 20 Apr 2025 19:00:41 +0000
Manifest next update: Mon 21 Apr 2025 19:00:41 +0000
Files and hashes: 1: 5sIyZUUxUKqIAWVgUkx5eBGU5N0.roa (hash: 3M5MqZOHY6IgU/oY5PEX9Quago5F235Gft3ZQVLU+EE=)
2: ZAsfh3LG70hOLNLWYmPy75j6OWg.crl (hash: mr+HPk2DcgtVCHuHSxALa969b/VNBkMCoa5KUi+wD50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:ff:ea:58:45:80:37:0e:b5:f1:1f:0c:f3:f3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=640b1f8772c6ef484e2cd2d66263f2ef98fa3968
Validity
Not Before: Apr 20 19:00:41 2025 GMT
Not After : Apr 21 19:00:41 2025 GMT
Subject: CN=07e8eb6157e65ecf9f9abd02bd6c0b849e58c76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:e6:20:16:3e:c2:7c:a1:e2:ba:1c:6b:5a:
f1:49:c0:1c:7f:9f:b6:b2:85:f4:c7:98:dd:db:4e:
79:1b:fa:1c:c7:fe:24:6c:dd:58:21:79:8f:d7:a5:
39:6d:a6:e4:c3:de:5b:83:9e:77:ef:48:5a:a0:6a:
20:51:29:c6:68:a4:22:5f:d3:81:e6:d6:29:65:ea:
8f:2c:68:f0:73:13:16:12:a5:3b:b4:25:07:cb:72:
b1:d4:37:ba:c9:dc:02:a6:ec:60:a0:a4:cb:ca:d0:
09:9e:b1:54:99:59:f8:a2:71:a7:02:6b:de:0c:55:
a7:5a:d2:de:0f:de:75:43:45:d4:98:48:7c:75:ca:
77:08:f6:c7:d5:c5:cc:16:90:e1:14:e7:0b:84:ed:
9e:c3:aa:5e:e3:58:e2:40:7d:43:62:77:5c:83:b4:
b8:b1:8d:24:e9:60:75:35:ab:2a:b4:c1:32:3c:72:
94:5f:44:e7:01:6b:1f:57:57:88:4a:74:be:7b:ff:
ba:da:60:7a:a0:bb:0a:78:53:b5:90:20:f9:22:63:
89:c7:fe:09:25:ad:fe:83:59:dd:af:6f:4c:50:5f:
0d:e8:8b:4b:b2:67:fa:45:2d:92:b9:e8:90:1d:75:
8f:71:13:05:17:a1:ac:df:0e:9d:07:21:5d:b1:ab:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E8:EB:61:57:E6:5E:CF:9F:9A:BD:02:BD:6C:0B:84:9E:58:C7:6B
X509v3 Authority Key Identifier:
keyid:64:0B:1F:87:72:C6:EF:48:4E:2C:D2:D6:62:63:F2:EF:98:FA:39:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAsfh3LG70hOLNLWYmPy75j6OWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/aad626-dace-44d8-818d-387afa0a534f/1/ZAsfh3LG70hOLNLWYmPy75j6OWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:51:a9:bd:11:4f:ec:b3:af:02:c3:ff:b5:02:4e:ae:e5:7b:
99:15:64:f5:ce:bf:f0:2d:01:28:30:4c:fd:36:09:2c:e1:a0:
d8:bb:3e:06:0f:8a:c5:62:50:f8:d8:9c:12:a4:03:5c:5b:17:
5d:0a:8c:20:4d:2d:71:6c:e6:93:86:6e:7a:37:c8:1a:c4:a7:
54:45:75:95:fa:b1:31:01:4d:9f:c8:da:f0:7d:3f:03:e6:4e:
1e:01:ee:79:52:5f:de:ee:7b:72:d2:45:13:9b:19:09:26:03:
8d:63:5a:fb:7e:6a:d2:cd:ba:41:98:c1:e1:00:a4:ad:d2:88:
39:45:35:46:e3:35:6d:e0:68:f1:df:71:eb:f7:c2:ef:8a:1a:
1c:30:5d:b8:ec:fb:91:0b:e5:c2:b0:34:6c:26:ce:79:86:eb:
6b:92:d9:a0:ac:31:de:73:af:f3:ce:82:9b:c0:5d:0d:02:e3:
bb:35:cf:bb:b6:7e:c3:d6:f7:2e:4c:7c:21:f4:e6:56:69:60:
e1:00:84:65:2b:1a:a4:b9:67:23:cc:92:95:e3:ba:c2:4b:76:
d6:50:74:53:e2:dd:be:55:40:d4:91:9d:ae:fb:34:bc:01:ec:
b7:07:5f:c9:da:5e:c8:ca:23:76:23:61:8b:bf:b0:19:03:4f:
77:f9:37:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkv/qWEWANw618R8M8/NzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MGIxZjg3NzJjNmVmNDg0ZTJjZDJkNjYyNjNmMmVmOThm
YTM5NjgwHhcNMjUwNDIwMTkwMDQxWhcNMjUwNDIxMTkwMDQxWjAzMTEwLwYDVQQD
EygwN2U4ZWI2MTU3ZTY1ZWNmOWY5YWJkMDJiZDZjMGI4NDllNThjNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7HmIBY+wnyh4roca1rxScAcf5+2
soX0x5jd2055G/ocx/4kbN1YIXmP16U5babkw95bg55370haoGogUSnGaKQiX9OB
5tYpZeqPLGjwcxMWEqU7tCUHy3Kx1De6ydwCpuxgoKTLytAJnrFUmVn4onGnAmve
DFWnWtLeD951Q0XUmEh8dcp3CPbH1cXMFpDhFOcLhO2ew6pe41jiQH1DYndcg7S4
sY0k6WB1NasqtMEyPHKUX0TnAWsfV1eISnS+e/+62mB6oLsKeFO1kCD5ImOJx/4J
Ja3+g1ndr29MUF8N6ItLsmf6RS2SueiQHXWPcRMFF6Gs3w6dByFdsasexQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfo62FX5l7Pn5q9Ar1sC4SeWMdrMB8GA1UdIwQY
MBaAFGQLH4dyxu9ITizS1mJj8u+Y+jloMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQt
Mzg3YWZhMGE1MzRmLzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9hYWQ2MjYtZGFjZS00NGQ4LTgxOGQtMzg3YWZhMGE1MzRm
LzEvWkFzZmgzTEc3MGhPTE5MV1ltUHk3NWo2T1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVGpvRFP
7LOvAsP/tQJOruV7mRVk9c6/8C0BKDBM/TYJLOGg2Ls+Bg+KxWJQ+NicEqQDXFsX
XQqMIE0tcWzmk4ZuejfIGsSnVEV1lfqxMQFNn8ja8H0/A+ZOHgHueVJf3u57ctJF
E5sZCSYDjWNa+35q0s26QZjB4QCkrdKIOUU1RuM1beBo8d9x6/fC74oaHDBduOz7
kQvlwrA0bCbOeYbra5LZoKwx3nOv886Cm8BdDQLjuzXPu7Z+w9b3Lkx8IfTmVmlg
4QCEZSsapLlnI8ySleO6wkt21lB0U+LdvlVA1JGdrvs0vAHstwdfydpeyMojdiNh
i7+wGQNPd/k3Fw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:34:42 2025 by rpki-client