Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json)
Hash identifier: M4uBLqQyIQnCDbOhF5J4r+I3x1fZ0ejxva+UytNEOd0=
Subject key identifier: BB:5F:DA:21:D7:38:82:77:DD:C4:1B:6B:01:15:93:72:D6:D7:94:55
Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Certificate serial: 019653EE64234713322C2651E502DC5FF141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
Manifest number: 0AEB
Signing time: Sun 20 Apr 2025 16:00:54 +0000
Manifest this update: Sun 20 Apr 2025 16:00:54 +0000
Manifest next update: Mon 21 Apr 2025 16:00:54 +0000
Files and hashes: 1: YvvxlYUE1Sa5OVkc6cN_zQjcrsc.roa (hash: 755pvpPS6YdCIfa/QNyMrmXmYNI2VVu3cPA+IlhoyYY=)
2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: bV+QeFvNCQibKaAouNi0/4Ds/B2/+V9jaHLlpwCbutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:64:23:47:13:32:2c:26:51:e5:02:dc:5f:f1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7
Validity
Not Before: Apr 20 16:00:54 2025 GMT
Not After : Apr 21 16:00:54 2025 GMT
Subject: CN=bb5fda21d7388277ddc41b6b01159372d6d79455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:35:a9:75:07:a0:73:64:5b:0b:e3:18:eb:
bc:44:d4:18:8e:b2:85:dd:db:fe:cb:94:f3:fa:59:
63:0f:5a:88:1e:45:f5:97:f4:a5:55:98:d0:02:1c:
36:3a:fd:ac:75:db:2f:d1:76:61:f5:6a:04:91:08:
ae:55:9d:91:f6:23:18:d3:6c:f0:5c:2c:1c:f0:3a:
2d:24:83:45:4b:3b:d1:d5:fe:66:c3:fe:1f:06:2c:
89:9f:04:9a:29:bd:b4:11:86:79:7e:c1:2d:b7:2e:
2f:7f:aa:bf:39:ae:80:5a:42:0b:b9:0c:44:ed:2f:
9d:14:50:cc:48:8e:a9:01:65:4c:d9:42:6a:a0:05:
d3:47:fa:71:e5:76:70:db:00:5b:fc:ef:41:13:b4:
54:cc:26:7e:ca:69:88:02:54:77:18:ae:ed:7b:0a:
84:7b:4e:bb:21:45:56:96:a2:b9:2f:97:29:ac:9a:
13:05:a9:14:ae:ce:db:bf:77:11:dd:d0:17:ec:3f:
b2:0e:91:7e:28:43:f6:8e:b8:07:7b:31:0a:00:1b:
65:ef:0c:af:e7:00:54:af:bf:04:06:22:0e:0a:83:
0d:2d:86:66:c2:58:26:7f:e1:65:ea:a7:08:0c:97:
cd:aa:9c:bb:6c:02:20:a0:9e:1f:60:f4:fb:9d:9b:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:DA:21:D7:38:82:77:DD:C4:1B:6B:01:15:93:72:D6:D7:94:55
X509v3 Authority Key Identifier:
keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f1:35:6e:61:a7:17:92:f2:a2:5f:1c:82:a3:6d:cc:09:a7:
3f:f0:a2:49:b5:87:d2:69:67:20:bb:64:4d:79:4e:fe:87:14:
0c:ef:34:3b:ea:a0:74:95:0d:9b:56:df:fa:80:61:c2:34:ec:
a9:d5:2c:c9:26:eb:b1:f3:f3:a5:ba:71:e5:9c:1d:66:7c:14:
04:da:86:74:40:6f:a1:27:2d:e9:7c:b2:47:e4:1c:39:8d:82:
c0:85:4f:ba:86:ac:35:dc:9d:31:35:e6:94:de:24:0e:fe:d1:
a8:4c:b7:72:5a:62:d9:cd:39:5b:0d:98:a4:00:8f:b8:20:1c:
37:eb:57:b5:62:e9:73:a6:f7:ec:39:b5:e4:b6:75:35:a2:76:
d7:72:ba:c1:c6:58:9f:b1:58:92:01:59:b2:94:8c:cf:6d:38:
c0:13:f5:21:cb:f4:38:07:15:49:6a:b9:7c:38:84:93:1c:a0:
2b:dc:95:2d:be:d1:cc:2b:9a:fb:52:45:48:d8:bd:64:1d:e9:
eb:de:70:82:4e:ed:bb:17:5b:fc:ab:c7:cb:a2:f3:04:1d:6e:
69:c3:cb:91:46:eb:2c:43:6c:03:3f:c6:b4:23:bc:b7:88:45:
13:2e:13:ec:e2:dd:9c:95:02:6b:86:d8:6a:5f:90:15:28:3b:
d5:ee:a8:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7mQjRxMyLCZR5QLcX/FBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMjBiY2FmNzIxMjNlMmQ5ZjVlMjc4ODZiMzgzOWI3NDI0
NDEwYjcwHhcNMjUwNDIwMTYwMDU0WhcNMjUwNDIxMTYwMDU0WjAzMTEwLwYDVQQD
EyhiYjVmZGEyMWQ3Mzg4Mjc3ZGRjNDFiNmIwMTE1OTM3MmQ2ZDc5NDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGg1qXUHoHNkWwvjGOu8RNQYjrKF
3dv+y5Tz+lljD1qIHkX1l/SlVZjQAhw2Ov2sddsv0XZh9WoEkQiuVZ2R9iMY02zw
XCwc8DotJINFSzvR1f5mw/4fBiyJnwSaKb20EYZ5fsEtty4vf6q/Oa6AWkILuQxE
7S+dFFDMSI6pAWVM2UJqoAXTR/px5XZw2wBb/O9BE7RUzCZ+ymmIAlR3GK7tewqE
e067IUVWlqK5L5cprJoTBakUrs7bv3cR3dAX7D+yDpF+KEP2jrgHezEKABtl7wyv
5wBUr78EBiIOCoMNLYZmwlgmf+Fl6qcIDJfNqpy7bAIgoJ4fYPT7nZsMcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtf2iHXOIJ33cQbawEVk3LW15RVMB8GA1UdIwQY
MBaAFM0gvK9yEj4tn14niGs4ObdCRBC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYt
MGY4MmMxYmExODA2LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYtMGY4MmMxYmExODA2
LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvE1bmGn
F5Lyol8cgqNtzAmnP/CiSbWH0mlnILtkTXlO/ocUDO80O+qgdJUNm1bf+oBhwjTs
qdUsySbrsfPzpbpx5ZwdZnwUBNqGdEBvoSct6XyyR+QcOY2CwIVPuoasNdydMTXm
lN4kDv7RqEy3clpi2c05Ww2YpACPuCAcN+tXtWLpc6b37Dm15LZ1NaJ213K6wcZY
n7FYkgFZspSMz204wBP1Icv0OAcVSWq5fDiEkxygK9yVLb7RzCua+1JFSNi9ZB3p
695wgk7tuxdb/KvHy6LzBB1uacPLkUbrLENsAz/GtCO8t4hFEy4T7OLdnJUCa4bY
al+QFSg71e6oBw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:42:00 2025 by rpki-client