Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
File: zHLmM99WNan5jS9optKty0QVXNw.mft (raw, json)
Hash identifier: X0s7TFCGVNecV/mxXp7VKSb9M2vPoOASYffynh5M1VM=
Subject key identifier: CE:FA:00:4B:6A:0A:D9:A8:41:0C:BD:42:1D:5C:E9:61:E7:47:15:FA
Authority key identifier: CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
Certificate issuer: /CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Certificate serial: 01963C8B000D4175B0DE41ACF8DE5CCB0610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 03:01:04 +0000
Manifest this update: Wed 16 Apr 2025 03:01:04 +0000
Manifest next update: Thu 17 Apr 2025 03:01:04 +0000
Files and hashes: 1: L92Oz155yhI01cgTqDPydWK98ns.roa (hash: e3pz5+PnlP9tg7wzv2dM4Vb+by/3YBKQxYyFlmqUG3k=)
2: rFLbnP63niNMPmNTHqvODCWAmf4.roa (hash: QWuHWUDfpexkyRSRrY8RzHPTAmEW2/XktJBH/kF+mCg=)
3: zHLmM99WNan5jS9optKty0QVXNw.crl (hash: VEIa+1PBvFV/tyBMoPqnGOJB/akDA3rbZ2jwNhPrei0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:8b:00:0d:41:75:b0:de:41:ac:f8:de:5c:cb:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc72e633df5635a9f98d2f68a6d2adcb44155cdc
Validity
Not Before: Apr 16 03:01:04 2025 GMT
Not After : Apr 17 03:01:04 2025 GMT
Subject: CN=cefa004b6a0ad9a8410cbd421d5ce961e74715fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:eb:93:f7:99:c0:c2:54:e3:8f:35:1c:8c:
1b:43:f3:b6:24:e8:42:82:a3:9a:2e:30:30:c3:8d:
cc:c4:bf:1e:1e:5c:fe:24:91:51:50:bd:5e:fa:9a:
50:9a:83:5b:3b:d3:d9:91:38:20:78:f2:46:5a:9f:
93:ee:d9:d9:ce:ac:99:38:44:d0:62:cc:1b:7d:d8:
78:6b:b4:e7:71:5a:90:3f:d9:a1:5f:d2:16:17:bb:
6e:c4:07:d8:da:c1:c1:73:ef:f0:64:b2:a6:2b:3d:
be:69:8e:1b:55:ee:3f:9f:d6:27:75:b8:0f:ef:19:
13:39:70:9c:66:9c:51:9a:2b:ca:16:21:a9:45:a9:
f7:58:21:4b:60:f0:a6:6c:df:be:cf:b7:a6:bf:44:
65:bf:07:6c:f3:f9:c0:c2:59:d3:9b:6d:c6:d6:95:
e9:85:5b:38:79:3a:ae:42:2d:cd:f8:5c:bc:71:0a:
35:7d:42:24:4f:ab:ee:c2:cd:b7:fb:36:38:bc:77:
ff:c0:dd:14:ba:52:bb:46:1c:9a:dd:b9:bd:8c:c8:
0a:fc:3f:b7:1f:54:94:f8:b6:16:52:4b:ec:03:2d:
94:95:69:b3:9c:c4:65:57:f4:a2:c6:26:32:8b:48:
70:06:2b:5a:ef:24:aa:b3:fe:54:91:4e:39:87:c8:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FA:00:4B:6A:0A:D9:A8:41:0C:BD:42:1D:5C:E9:61:E7:47:15:FA
X509v3 Authority Key Identifier:
keyid:CC:72:E6:33:DF:56:35:A9:F9:8D:2F:68:A6:D2:AD:CB:44:15:5C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHLmM99WNan5jS9optKty0QVXNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/027036-82b3-4128-b954-d012ca9ec197/1/zHLmM99WNan5jS9optKty0QVXNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2f:3e:d3:f5:04:0f:2e:a7:d1:60:09:f4:23:ce:40:16:f8:
f4:fe:df:38:06:9b:fa:55:bb:a5:2a:4c:99:e4:ac:41:6e:97:
b3:32:52:89:35:a4:c3:6c:fc:55:ba:5b:33:3d:34:9e:49:d9:
30:dd:ea:3f:3d:2f:e2:4d:57:b1:63:95:da:31:1a:84:76:2a:
e4:0f:c5:03:be:2f:15:14:ce:30:c8:79:f4:e2:e3:e9:e9:32:
95:a1:9c:e2:18:4b:4e:f6:d8:85:b8:13:c4:28:f9:e6:75:2d:
41:c4:e1:aa:7e:14:a5:45:c3:92:2e:f1:97:70:07:0c:e2:af:
6f:68:fa:a6:e2:8d:6e:84:98:e2:d7:92:af:5d:2f:e9:ed:8c:
55:22:d0:da:04:9f:56:9e:15:42:09:c0:0e:28:e8:b2:d7:d3:
14:2b:b4:4c:bb:0f:54:80:37:9f:1d:30:53:a9:07:65:5a:d6:
77:0f:42:b4:60:11:cf:d5:49:16:8f:eb:54:f2:fc:05:f2:04:
ca:d0:0d:85:3b:32:c6:5d:61:ed:1d:25:0a:b0:0c:4d:71:24:
56:12:8c:54:ed:00:04:c2:f3:12:27:d9:b9:fb:ae:38:eb:46:
9e:72:6a:57:6c:23:61:78:7c:d1:99:6e:f8:9c:87:d5:13:ce:
0f:41:10:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8iwANQXWw3kGs+N5cywYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNzJlNjMzZGY1NjM1YTlmOThkMmY2OGE2ZDJhZGNiNDQx
NTVjZGMwHhcNMjUwNDE2MDMwMTA0WhcNMjUwNDE3MDMwMTA0WjAzMTEwLwYDVQQD
EyhjZWZhMDA0YjZhMGFkOWE4NDEwY2JkNDIxZDVjZTk2MWU3NDcxNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwivrk/eZwMJU4481HIwbQ/O2JOhC
gqOaLjAww43MxL8eHlz+JJFRUL1e+ppQmoNbO9PZkTggePJGWp+T7tnZzqyZOETQ
Yswbfdh4a7TncVqQP9mhX9IWF7tuxAfY2sHBc+/wZLKmKz2+aY4bVe4/n9YndbgP
7xkTOXCcZpxRmivKFiGpRan3WCFLYPCmbN++z7emv0Rlvwds8/nAwlnTm23G1pXp
hVs4eTquQi3N+Fy8cQo1fUIkT6vuws23+zY4vHf/wN0UulK7Rhya3bm9jMgK/D+3
H1SU+LYWUkvsAy2UlWmznMRlV/SixiYyi0hwBita7ySqs/5UkU45h8i/6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM76AEtqCtmoQQy9Qh1c6WHnRxX6MB8GA1UdIwQY
MBaAFMxy5jPfVjWp+Y0vaKbSrctEFVzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQt
ZDAxMmNhOWVjMTk3LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8wMjcwMzYtODJiMy00MTI4LWI5NTQtZDAxMmNhOWVjMTk3
LzEvekhMbU05OVdOYW41alM5b3B0S3R5MFFWWE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbC8+0/UE
Dy6n0WAJ9CPOQBb49P7fOAab+lW7pSpMmeSsQW6XszJSiTWkw2z8VbpbMz00nknZ
MN3qPz0v4k1XsWOV2jEahHYq5A/FA74vFRTOMMh59OLj6ekylaGc4hhLTvbYhbgT
xCj55nUtQcThqn4UpUXDki7xl3AHDOKvb2j6puKNboSY4teSr10v6e2MVSLQ2gSf
Vp4VQgnADijostfTFCu0TLsPVIA3nx0wU6kHZVrWdw9CtGARz9VJFo/rVPL8BfIE
ytANhTsyxl1h7R0lCrAMTXEkVhKMVO0ABMLzEifZufuuOOtGnnJqV2wjYXh80Zlu
+JyH1RPOD0EQRw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:28:15 2025 by rpki-client