Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
File: ZakGbVtqwwGcIDf1edEbrhpe6nM.mft (raw, json)
Hash identifier: mUr0GsA7INTGF5EVco2I2Kcm0gcYffWt5FEHI6sJcoI=
Subject key identifier: 57:2A:13:0F:DB:1D:6E:9F:F1:0A:84:3F:27:8A:0E:0F:6C:DD:9B:67
Authority key identifier: 65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
Certificate issuer: /CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Certificate serial: 019655DD1B3FED5745B6F187D824B0FDAE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
Manifest number: 0242
Signing time: Mon 21 Apr 2025 01:01:15 +0000
Manifest this update: Mon 21 Apr 2025 01:01:15 +0000
Manifest next update: Tue 22 Apr 2025 01:01:15 +0000
Files and hashes: 1: JBec802FdcKabjY28XiR5H1LtHE.roa (hash: K48XffcS0X6Fp6KuIpuhXGlT+fph47E9cUUhQv9Lq8o=)
2: ZakGbVtqwwGcIDf1edEbrhpe6nM.crl (hash: /rCYiNAb7KGIGXhA8ySPX0Ms4Fyd8k+v9mU7o3J/SS8=)
3: sH_MU-dLONCSS2liGOTF8yFjBic.roa (hash: bC4qlhF2mIa5vONZeQi20o6xvZPm50Q6MktLj7FF2Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dd:1b:3f:ed:57:45:b6:f1:87:d8:24:b0:fd:ae:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a9066d5b6ac3019c2037f579d11bae1a5eea73
Validity
Not Before: Apr 21 01:01:15 2025 GMT
Not After : Apr 22 01:01:15 2025 GMT
Subject: CN=572a130fdb1d6e9ff10a843f278a0e0f6cdd9b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:13:13:f6:84:e5:a4:e2:20:da:e4:2f:5b:
74:3c:54:a0:e0:c2:57:04:a0:66:18:72:a4:c7:34:
2a:62:ce:f0:48:9e:bb:7b:83:02:86:db:9c:b6:37:
62:38:2c:f2:e9:79:79:3f:05:8e:ca:83:e6:23:d5:
33:06:b9:1a:af:4a:36:79:6c:8f:57:37:c4:01:ad:
5e:07:15:04:b4:30:41:8a:35:33:16:9a:99:4d:16:
ed:7a:9b:4a:4c:62:fb:0d:b6:4f:90:86:bd:35:90:
c4:cd:f0:e4:a1:b6:c8:94:b4:83:14:f2:1e:ac:05:
34:2e:e7:70:f2:a3:c8:e0:14:97:2a:1f:ba:cb:d8:
de:e2:69:67:0c:d5:82:6d:76:60:9a:d3:e2:94:16:
11:8a:f3:d8:f0:a5:30:e9:51:b4:11:f7:71:22:a7:
b2:58:96:cb:ba:d0:ba:ba:18:22:5a:8b:7f:bc:dc:
16:23:04:09:a0:41:e5:bd:55:bc:ac:86:27:cf:04:
90:68:f6:10:67:36:3b:38:6f:16:7e:0c:a3:5b:3a:
f7:42:7f:cf:0c:0a:3d:6d:5c:0d:f9:84:61:d9:20:
9f:d0:52:5f:81:dd:45:c9:77:c4:df:de:05:13:f2:
95:80:a8:58:ea:28:99:d0:49:33:60:9f:35:56:5a:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:13:0F:DB:1D:6E:9F:F1:0A:84:3F:27:8A:0E:0F:6C:DD:9B:67
X509v3 Authority Key Identifier:
keyid:65:A9:06:6D:5B:6A:C3:01:9C:20:37:F5:79:D1:1B:AE:1A:5E:EA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZakGbVtqwwGcIDf1edEbrhpe6nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4f9f29-a03e-4c45-82cd-18f343488286/1/ZakGbVtqwwGcIDf1edEbrhpe6nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:35:76:8e:2c:f8:dc:76:39:2f:ea:64:9d:e9:2b:57:9e:8f:
28:b3:25:39:e4:c0:16:0f:d0:8d:49:fc:6e:75:07:0a:19:9d:
41:d6:f1:15:c4:4b:ca:cb:a5:9d:ab:9f:cc:5e:a5:55:58:e5:
59:5f:fd:bf:82:82:5e:b3:73:1b:0b:9e:80:b3:08:49:b6:8d:
8c:6e:ec:32:ba:01:43:34:38:c3:ca:db:7b:a7:1d:bc:07:f0:
3f:14:0c:c0:9a:a0:fd:71:2f:1e:b1:7f:35:cc:d0:bb:76:86:
1b:b3:76:c5:0b:2f:a0:6e:86:6c:d3:66:23:46:4b:7e:31:66:
c5:4b:49:55:cb:d4:36:fc:d5:c0:80:1f:e7:df:11:04:af:67:
14:d9:19:44:6f:f1:27:0a:66:c4:b0:31:03:7d:4f:19:50:91:
89:a6:11:55:10:fc:0b:c3:86:f5:9c:ec:5c:f8:af:d0:8c:1d:
09:d0:11:84:07:2e:bd:89:cd:30:07:d6:be:40:f7:63:38:8e:
39:76:85:bc:6c:96:a4:d6:5c:d7:b4:52:0e:3a:cb:0b:77:1e:
2b:ef:05:48:d1:7e:d1:f6:64:4d:df:69:93:7e:14:45:25:da:
41:53:89:bd:53:40:5e:e1:63:1d:20:83:3f:14:4e:e5:05:e7:
ab:2c:b2:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3Rs/7VdFtvGH2CSw/a6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTkwNjZkNWI2YWMzMDE5YzIwMzdmNTc5ZDExYmFlMWE1
ZWVhNzMwHhcNMjUwNDIxMDEwMTE1WhcNMjUwNDIyMDEwMTE1WjAzMTEwLwYDVQQD
Eyg1NzJhMTMwZmRiMWQ2ZTlmZjEwYTg0M2YyNzhhMGUwZjZjZGQ5YjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRoTE/aE5aTiINrkL1t0PFSg4MJX
BKBmGHKkxzQqYs7wSJ67e4MChtuctjdiOCzy6Xl5PwWOyoPmI9UzBrkar0o2eWyP
VzfEAa1eBxUEtDBBijUzFpqZTRbteptKTGL7DbZPkIa9NZDEzfDkobbIlLSDFPIe
rAU0Ludw8qPI4BSXKh+6y9je4mlnDNWCbXZgmtPilBYRivPY8KUw6VG0EfdxIqey
WJbLutC6uhgiWot/vNwWIwQJoEHlvVW8rIYnzwSQaPYQZzY7OG8WfgyjWzr3Qn/P
DAo9bVwN+YRh2SCf0FJfgd1FyXfE394FE/KVgKhY6iiZ0EkzYJ81Vlq4mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcqEw/bHW6f8QqEPyeKDg9s3ZtnMB8GA1UdIwQY
MBaAFGWpBm1basMBnCA39XnRG64aXupzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2Qt
MThmMzQzNDg4Mjg2LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC80ZjlmMjktYTAzZS00YzQ1LTgyY2QtMThmMzQzNDg4Mjg2
LzEvWmFrR2JWdHF3d0djSURmMWVkRWJyaHBlNm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDV2jiz4
3HY5L+pknekrV56PKLMlOeTAFg/QjUn8bnUHChmdQdbxFcRLysulnaufzF6lVVjl
WV/9v4KCXrNzGwuegLMISbaNjG7sMroBQzQ4w8rbe6cdvAfwPxQMwJqg/XEvHrF/
NczQu3aGG7N2xQsvoG6GbNNmI0ZLfjFmxUtJVcvUNvzVwIAf598RBK9nFNkZRG/x
JwpmxLAxA31PGVCRiaYRVRD8C8OG9ZzsXPiv0IwdCdARhAcuvYnNMAfWvkD3YziO
OXaFvGyWpNZc17RSDjrLC3ceK+8FSNF+0fZkTd9pk34URSXaQVOJvVNAXuFjHSCD
PxRO5QXnqyyykg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:05 2025 by rpki-client