Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
File: zHrEehn2b0GDl-6l_vFaB_8sACM.mft (raw, json)
Hash identifier: IMiXWgjtv6GyWQqEgl9WPK7g8p3UdC02gwXlhA1DSjY=
Subject key identifier: 6B:76:B6:95:7D:6B:0C:B3:4F:80:6C:5A:C9:F8:A5:6B:E3:60:E9:3E
Authority key identifier: CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
Certificate issuer: /CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Certificate serial: 019657262295C556E41EC29FE4C67F59E86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 07:00:39 +0000
Manifest this update: Mon 21 Apr 2025 07:00:39 +0000
Manifest next update: Tue 22 Apr 2025 07:00:39 +0000
Files and hashes: 1: 67RitCBEehLxJhsm7693l29x0Rs.roa (hash: EB1M/ZAO+oOFucZBilmgdoi7GfXpFnwu8Kuu/wM/CCw=)
2: r2RlHTThmtNG4nl2-ZXIiVZ51nQ.roa (hash: GKWFo62wVPaicbH3wRKatj9Dg7f4fzo4X4faRV/0xFc=)
3: zHrEehn2b0GDl-6l_vFaB_8sACM.crl (hash: NC9oipbASwYDxYIeeLm7z9I7eXABvh61BzgHTJxvSQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:22:95:c5:56:e4:1e:c2:9f:e4:c6:7f:59:e8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc7ac47a19f66f418397eea5fef15a07ff2c0023
Validity
Not Before: Apr 21 07:00:39 2025 GMT
Not After : Apr 22 07:00:39 2025 GMT
Subject: CN=6b76b6957d6b0cb34f806c5ac9f8a56be360e93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:f4:2a:d9:38:aa:37:5b:5a:2c:2e:55:e1:
c5:47:49:78:e4:04:5b:c7:93:fd:f6:14:72:2a:16:
d0:8e:e5:22:23:b7:c8:7b:9e:49:43:24:49:7b:eb:
f4:27:b1:f3:ca:34:7e:24:d6:49:87:6e:19:f3:77:
ab:e3:bc:af:f5:02:0e:73:87:be:2f:af:f8:7f:2a:
84:1a:fd:b4:4c:20:0e:c4:9b:f7:b4:76:73:42:09:
29:87:a5:ca:3a:b6:4a:fe:7a:cc:09:7a:92:86:2b:
26:51:f1:34:ef:09:84:1f:6f:99:8b:8f:0f:b8:f8:
2b:a9:ac:c7:82:bb:18:b9:03:2c:7e:c3:95:7b:8c:
2b:ce:ee:bc:8f:b1:12:03:6b:e0:c3:12:16:1f:e0:
a6:d4:9b:1e:e0:4c:ee:5b:39:3b:fe:04:93:ae:22:
24:c5:d1:23:77:f6:6f:16:11:6e:c5:53:99:d8:6c:
c7:b1:7d:3b:49:81:3b:fe:6d:ed:85:85:b4:f5:44:
18:da:1b:24:64:c1:82:9a:8d:8c:32:62:83:a8:2a:
92:f1:ca:27:6a:16:c5:af:71:1b:60:80:f6:0b:21:
da:1d:f3:28:05:5a:4c:b5:24:a8:cc:e1:0f:5c:49:
bf:29:a7:ed:a5:bb:89:6f:d3:f6:61:6b:83:60:f3:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:B6:95:7D:6B:0C:B3:4F:80:6C:5A:C9:F8:A5:6B:E3:60:E9:3E
X509v3 Authority Key Identifier:
keyid:CC:7A:C4:7A:19:F6:6F:41:83:97:EE:A5:FE:F1:5A:07:FF:2C:00:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHrEehn2b0GDl-6l_vFaB_8sACM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a7568f-440b-4a9e-bb3a-3ee1e6991269/1/zHrEehn2b0GDl-6l_vFaB_8sACM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:0b:5a:c4:52:ee:7d:74:e7:aa:6f:21:d7:b7:45:b1:6c:c0:
25:71:e6:53:34:25:f6:a6:d5:ec:17:56:a7:d0:70:26:c3:44:
6d:f1:3a:a0:92:88:a2:c3:9e:e5:4b:1a:88:55:c7:19:47:2b:
59:23:d5:fc:69:dc:0a:00:90:08:23:b4:3e:5a:5a:06:51:33:
72:90:b4:a0:02:2e:18:e7:c9:72:6d:f0:63:b6:d8:af:87:e4:
38:f8:4d:6b:b4:7e:42:88:ee:04:05:d1:f9:79:9b:2b:47:5f:
ef:74:71:1e:5a:31:f8:9c:f3:ec:29:43:49:80:4b:4f:ea:bd:
a0:70:c4:90:a6:24:cf:c0:07:df:b5:08:5f:a5:f6:d2:5a:96:
33:ad:57:32:7f:b8:b7:af:2c:ba:3e:60:c1:99:72:92:66:a2:
ea:5b:ba:fa:73:00:08:54:c6:cd:1f:39:ca:c6:fb:b1:9f:31:
8f:61:f1:f1:c4:c8:6a:67:27:0e:6e:91:22:7a:73:d0:99:63:
d4:00:df:08:39:18:0e:b6:1e:7c:db:12:e8:7f:5a:4e:34:a2:
65:db:64:d7:db:ba:bd:53:09:d4:f9:dd:51:3b:09:e6:47:ee:
24:cf:f4:5b:c3:75:79:0b:1f:22:9b:1c:c6:06:c1:3c:e4:cd:
e9:c4:0e:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJiKVxVbkHsKf5MZ/WehvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjN2FjNDdhMTlmNjZmNDE4Mzk3ZWVhNWZlZjE1YTA3ZmYy
YzAwMjMwHhcNMjUwNDIxMDcwMDM5WhcNMjUwNDIyMDcwMDM5WjAzMTEwLwYDVQQD
Eyg2Yjc2YjY5NTdkNmIwY2IzNGY4MDZjNWFjOWY4YTU2YmUzNjBlOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsf0Ktk4qjdbWiwuVeHFR0l45ARb
x5P99hRyKhbQjuUiI7fIe55JQyRJe+v0J7HzyjR+JNZJh24Z83er47yv9QIOc4e+
L6/4fyqEGv20TCAOxJv3tHZzQgkph6XKOrZK/nrMCXqShismUfE07wmEH2+Zi48P
uPgrqazHgrsYuQMsfsOVe4wrzu68j7ESA2vgwxIWH+Cm1Jse4EzuWzk7/gSTriIk
xdEjd/ZvFhFuxVOZ2GzHsX07SYE7/m3thYW09UQY2hskZMGCmo2MMmKDqCqS8con
ahbFr3EbYID2CyHaHfMoBVpMtSSozOEPXEm/KaftpbuJb9P2YWuDYPMqhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt2tpV9awyzT4BsWsn4pWvjYOk+MB8GA1UdIwQY
MBaAFMx6xHoZ9m9Bg5fupf7xWgf/LAAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2Et
M2VlMWU2OTkxMjY5LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9hNzU2OGYtNDQwYi00YTllLWJiM2EtM2VlMWU2OTkxMjY5
LzEvekhyRWVobjJiMEdEbC02bF92RmFCXzhzQUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1QtaxFLu
fXTnqm8h17dFsWzAJXHmUzQl9qbV7BdWp9BwJsNEbfE6oJKIosOe5UsaiFXHGUcr
WSPV/GncCgCQCCO0PlpaBlEzcpC0oAIuGOfJcm3wY7bYr4fkOPhNa7R+QojuBAXR
+XmbK0df73RxHlox+Jzz7ClDSYBLT+q9oHDEkKYkz8AH37UIX6X20lqWM61XMn+4
t68suj5gwZlykmai6lu6+nMACFTGzR85ysb7sZ8xj2Hx8cTIamcnDm6RInpz0Jlj
1ADfCDkYDrYefNsS6H9aTjSiZdtk19u6vVMJ1PndUTsJ5kfuJM/0W8N1eQsfIpsc
xgbBPOTN6cQOIA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:03 2025 by rpki-client