Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
File: zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft (raw, json)
Hash identifier: zZhK+SfCb2U7FsVZ/w/Nnpt4Cr5dEokEsfwzJEP5apk=
Subject key identifier: E9:48:D2:DD:2D:8E:6E:DD:98:E0:9E:F1:8D:B4:EF:A0:91:63:19:72
Authority key identifier: CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
Certificate issuer: /CN=ccd7947ec83136ef9446316235686a9102562c44
Certificate serial: 019659B985354A01B15E1C512E79D5539345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 19:00:52 +0000
Manifest this update: Mon 21 Apr 2025 19:00:52 +0000
Manifest next update: Tue 22 Apr 2025 19:00:52 +0000
Files and hashes: 1: bAP-TBQ5pEJ6ltrNXIaTzwmPogo.roa (hash: nUUK6FuI8w+YNPfI7VAOpoMsSE7nA2QmJZlOaRIBwQw=)
2: zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl (hash: E4KR0Z6FYQ0/AYhxTm7oUTWH1Rd5Jgt3dM68UxkJE/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:85:35:4a:01:b1:5e:1c:51:2e:79:d5:53:93:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd7947ec83136ef9446316235686a9102562c44
Validity
Not Before: Apr 21 19:00:52 2025 GMT
Not After : Apr 22 19:00:52 2025 GMT
Subject: CN=e948d2dd2d8e6edd98e09ef18db4efa091631972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:56:a4:ac:6d:8e:a8:7b:e7:fa:7d:79:8a:
a3:d4:a6:dd:d6:3e:9d:1b:1b:d3:de:dd:e4:93:23:
09:9c:13:31:17:c8:f0:79:2c:24:81:e5:5e:48:76:
1a:e6:82:00:e4:3a:fa:c4:c6:40:72:7b:05:b3:f5:
b9:7f:2e:59:74:d5:60:d9:8e:05:63:65:11:a4:39:
f2:74:c7:e3:03:70:1b:af:ff:d6:bd:d1:95:05:af:
e5:ea:5e:d0:2e:7d:a3:ba:01:be:3d:94:e5:a8:06:
f2:7f:9d:88:b8:eb:02:e3:94:c5:ce:37:7e:29:48:
21:b4:0b:ca:55:42:06:76:74:b8:c0:6e:6d:85:24:
65:d3:80:96:26:3c:a9:fa:d1:28:96:6b:f8:9c:23:
f3:96:57:02:fb:a1:00:91:6b:76:a3:de:e2:4b:08:
8d:33:5f:d0:87:93:a4:72:1d:1d:62:6c:a5:b0:08:
85:20:dd:98:8c:35:cc:30:31:11:2e:79:97:f3:b5:
43:38:0b:10:a8:87:86:e2:e4:a5:6f:00:5a:16:7c:
b0:78:99:c3:ce:db:f3:3f:1b:a9:d5:3b:2d:58:4d:
a9:ea:61:69:e5:2d:77:83:ac:71:2d:89:c5:be:9e:
7d:7b:17:2e:68:3e:92:76:d1:38:f1:4e:7c:7f:28:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:D2:DD:2D:8E:6E:DD:98:E0:9E:F1:8D:B4:EF:A0:91:63:19:72
X509v3 Authority Key Identifier:
keyid:CC:D7:94:7E:C8:31:36:EF:94:46:31:62:35:68:6A:91:02:56:2C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNeUfsgxNu-URjFiNWhqkQJWLEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/eab77d-831a-43bc-8cbe-288766061d98/1/zNeUfsgxNu-URjFiNWhqkQJWLEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d4:a7:fc:3a:66:1f:6b:94:8a:8b:e6:13:67:60:7c:cf:ed:
36:38:ed:ff:86:2a:34:66:4f:67:d5:e5:ae:c8:b8:f0:4c:9e:
ea:6f:1f:87:c3:12:e5:fb:6a:81:9f:d3:18:ab:1f:49:26:83:
46:62:9e:04:36:ff:59:4c:bd:96:08:e6:d9:00:51:1d:b9:c4:
7f:69:68:30:09:58:9d:19:86:05:03:c2:56:50:0d:b3:02:70:
10:65:ae:8a:f7:04:7f:b9:34:d0:82:39:75:5d:d7:f3:3c:67:
91:70:c6:3e:c2:a6:f9:f5:97:e8:e8:39:74:72:f5:f8:1e:a4:
c4:54:5b:36:ae:f0:06:cf:09:2e:90:e8:84:25:00:c0:b0:8b:
a2:70:ba:53:47:45:b7:87:7a:7f:ed:39:8b:4e:1a:8a:0b:82:
18:21:54:c3:94:6b:3d:7f:3b:2c:26:ba:fe:fd:37:71:1a:fb:
c8:aa:8d:d7:dc:7f:4e:23:df:54:b5:4d:3f:69:88:02:3b:7b:
61:c2:f7:cd:52:b1:cc:d0:c7:c4:a3:d7:74:e8:da:29:e3:c2:
6e:89:18:e4:93:d3:00:76:f5:8a:9d:02:2d:b0:c5:60:b5:b1:
2b:43:1f:7e:25:c4:cd:a4:20:af:bb:7c:23:81:65:67:34:dc:
a1:77:e5:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZuYU1SgGxXhxRLnnVU5NFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc5NDdlYzgzMTM2ZWY5NDQ2MzE2MjM1Njg2YTkxMDI1
NjJjNDQwHhcNMjUwNDIxMTkwMDUyWhcNMjUwNDIyMTkwMDUyWjAzMTEwLwYDVQQD
EyhlOTQ4ZDJkZDJkOGU2ZWRkOThlMDllZjE4ZGI0ZWZhMDkxNjMxOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtshWpKxtjqh75/p9eYqj1Kbd1j6d
GxvT3t3kkyMJnBMxF8jweSwkgeVeSHYa5oIA5Dr6xMZAcnsFs/W5fy5ZdNVg2Y4F
Y2URpDnydMfjA3Abr//WvdGVBa/l6l7QLn2jugG+PZTlqAbyf52IuOsC45TFzjd+
KUghtAvKVUIGdnS4wG5thSRl04CWJjyp+tEolmv4nCPzllcC+6EAkWt2o97iSwiN
M1/Qh5Okch0dYmylsAiFIN2YjDXMMDERLnmX87VDOAsQqIeG4uSlbwBaFnyweJnD
ztvzPxup1TstWE2p6mFp5S13g6xxLYnFvp59excuaD6SdtE48U58fyhIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlI0t0tjm7dmOCe8Y2076CRYxlyMB8GA1UdIwQY
MBaAFMzXlH7IMTbvlEYxYjVoapECVixEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUt
Mjg4NzY2MDYxZDk4LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9lYWI3N2QtODMxYS00M2JjLThjYmUtMjg4NzY2MDYxZDk4
LzEvek5lVWZzZ3hOdS1VUmpGaU5XaHFrUUpXTEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9Sn/Dpm
H2uUiovmE2dgfM/tNjjt/4YqNGZPZ9Xlrsi48Eye6m8fh8MS5ftqgZ/TGKsfSSaD
RmKeBDb/WUy9lgjm2QBRHbnEf2loMAlYnRmGBQPCVlANswJwEGWuivcEf7k00II5
dV3X8zxnkXDGPsKm+fWX6Og5dHL1+B6kxFRbNq7wBs8JLpDohCUAwLCLonC6U0dF
t4d6f+05i04aiguCGCFUw5RrPX87LCa6/v03cRr7yKqN19x/TiPfVLVNP2mIAjt7
YcL3zVKxzNDHxKPXdOjaKePCbokY5JPTAHb1ip0CLbDFYLWxK0MffiXEzaQgr7t8
I4FlZzTcoXflrw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:20:57 2025 by rpki-client