Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
File: ZVrvPO89mvoCfbM1efSh_orZHG8.mft (raw, json)
Hash identifier: GCdHDbFtMFZ4Nvr2Rz53iwB5aXVoRkHPcY06LeIGnaw=
Subject key identifier: 1E:80:BD:6D:B4:61:89:18:37:F2:41:DD:94:9D:65:64:99:F7:EB:B4
Authority key identifier: 65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
Certificate issuer: /CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Certificate serial: 01963808E99A01521A1ECD04605840CC0246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
Manifest number: 1038
Signing time: Tue 15 Apr 2025 06:00:30 +0000
Manifest this update: Tue 15 Apr 2025 06:00:30 +0000
Manifest next update: Wed 16 Apr 2025 06:00:30 +0000
Files and hashes: 1: 6awQ5vvLp2COkdyExVIfOWpcf0U.roa (hash: x8eRoJ1IMK9tcKhwbrAHFnXzsVa+tGQZBHOMDWjY4g4=)
2: ZQpO1aPpN8R6g2nPkZCJTaDtLDo.roa (hash: jW7tnAUthIc+57WN8d2CU9YQ1bHY6ehX+0z6UW+dFyI=)
3: ZVrvPO89mvoCfbM1efSh_orZHG8.crl (hash: 5fipaPTGPWEl3kjc9YjWTg3uspyKss+7Cb5D39rQrgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:08:e9:9a:01:52:1a:1e:cd:04:60:58:40:cc:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=655aef3cef3d9afa027db33579f4a1fe8ad91c6f
Validity
Not Before: Apr 15 06:00:30 2025 GMT
Not After : Apr 16 06:00:30 2025 GMT
Subject: CN=1e80bd6db461891837f241dd949d656499f7ebb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:44:35:07:c2:52:e8:cd:7c:b1:81:f9:3d:
96:b1:a5:47:72:bc:3a:e5:43:1c:8d:4b:30:b0:c7:
d3:f7:43:5e:8f:72:f3:d7:68:b2:8a:59:e8:e2:fc:
88:c7:dc:82:bc:51:be:dd:b8:e7:03:bf:ab:e8:0f:
a5:2b:2f:d0:6b:dc:cc:d2:96:7f:c1:a5:2e:3a:75:
e8:a5:80:86:44:fc:54:85:ff:d9:10:d7:06:12:2c:
db:f7:7e:5c:55:6f:8a:55:ea:5a:37:87:4a:08:2c:
96:19:ac:23:ed:10:a5:01:de:f9:f3:41:51:12:73:
47:17:de:b2:1e:5f:c1:00:06:c6:bf:58:32:ce:09:
41:56:6a:32:56:4b:cd:b6:e4:b1:73:89:67:83:48:
01:41:91:be:d7:ef:00:1d:41:62:51:3c:f3:2b:bf:
e8:d1:ef:7d:d0:0b:dc:2a:90:bf:70:df:a1:ab:f2:
c6:c6:94:23:1e:e6:b8:cf:7b:68:a8:7f:a8:e9:84:
eb:0c:96:b9:a9:3a:17:0d:fa:1a:3a:2d:42:55:1b:
62:82:03:83:98:b0:81:85:99:54:a1:d5:4c:85:16:
59:6f:c1:df:bd:2f:1c:26:81:f6:ae:7f:6f:87:d2:
34:fd:34:bb:30:4c:6f:0d:4e:08:3c:9b:17:fa:73:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:BD:6D:B4:61:89:18:37:F2:41:DD:94:9D:65:64:99:F7:EB:B4
X509v3 Authority Key Identifier:
keyid:65:5A:EF:3C:EF:3D:9A:FA:02:7D:B3:35:79:F4:A1:FE:8A:D9:1C:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVrvPO89mvoCfbM1efSh_orZHG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/ZVrvPO89mvoCfbM1efSh_orZHG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b5:31:80:c7:7e:41:b4:95:74:25:e7:63:ec:ab:9b:df:66:
be:4e:29:df:fc:1c:0e:80:d8:7e:d2:00:cb:8d:87:18:f3:f5:
25:ca:2a:4b:ed:2e:87:78:a3:5d:e2:3a:e7:4e:ee:3b:f0:5c:
52:94:20:20:9c:2d:e8:33:9b:cc:d3:92:2c:3c:ca:35:20:e9:
18:62:ba:e0:ef:c6:4c:87:e7:96:b1:94:47:08:1f:c4:fe:0d:
7e:2e:04:5b:f4:4f:fa:b7:b4:cf:ca:c5:a7:87:f4:a6:5f:f2:
94:c1:e6:41:15:32:d9:1e:b7:d5:58:95:59:41:0d:4c:cc:71:
3f:e0:38:59:be:98:c0:54:2a:91:07:7e:ef:8b:3d:0d:4b:db:
77:f6:10:f4:cf:dc:1d:f6:3a:98:6e:d5:ac:38:16:e5:70:f8:
cd:b0:1e:8f:dd:11:d8:73:1d:be:9d:27:cf:78:aa:c1:5d:06:
a7:38:b6:6f:05:29:79:db:fe:d4:eb:cc:f4:a5:cb:9e:c3:4f:
28:e7:2d:71:fe:6c:49:2f:2d:e5:d3:25:a5:93:c9:09:58:4d:
bd:7a:d0:62:45:96:a1:db:a2:c2:69:8b:c1:6a:43:ad:06:47:
8f:ef:e2:7d:37:b1:c8:42:6c:5b:50:46:79:70:64:21:c2:ac:
09:0a:da:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY4COmaAVIaHs0EYFhAzAJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NWFlZjNjZWYzZDlhZmEwMjdkYjMzNTc5ZjRhMWZlOGFk
OTFjNmYwHhcNMjUwNDE1MDYwMDMwWhcNMjUwNDE2MDYwMDMwWjAzMTEwLwYDVQQD
EygxZTgwYmQ2ZGI0NjE4OTE4MzdmMjQxZGQ5NDlkNjU2NDk5ZjdlYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cJENQfCUujNfLGB+T2WsaVHcrw6
5UMcjUswsMfT90Nej3Lz12iyilno4vyIx9yCvFG+3bjnA7+r6A+lKy/Qa9zM0pZ/
waUuOnXopYCGRPxUhf/ZENcGEizb935cVW+KVepaN4dKCCyWGawj7RClAd7580FR
EnNHF96yHl/BAAbGv1gyzglBVmoyVkvNtuSxc4lng0gBQZG+1+8AHUFiUTzzK7/o
0e990AvcKpC/cN+hq/LGxpQjHua4z3toqH+o6YTrDJa5qToXDfoaOi1CVRtiggOD
mLCBhZlUodVMhRZZb8HfvS8cJoH2rn9vh9I0/TS7MExvDU4IPJsX+nOBUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6AvW20YYkYN/JB3ZSdZWSZ9+u0MB8GA1UdIwQY
MBaAFGVa7zzvPZr6An2zNXn0of6K2RxvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUt
ZWY2YmQyNmEwMzA1LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lMmVlNTEtMTUyMy00MzZlLWFjNzUtZWY2YmQyNmEwMzA1
LzEvWlZydlBPODltdm9DZmJNMWVmU2hfb3JaSEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7UxgMd+
QbSVdCXnY+yrm99mvk4p3/wcDoDYftIAy42HGPP1JcoqS+0uh3ijXeI6507uO/Bc
UpQgIJwt6DObzNOSLDzKNSDpGGK64O/GTIfnlrGURwgfxP4Nfi4EW/RP+re0z8rF
p4f0pl/ylMHmQRUy2R631ViVWUENTMxxP+A4Wb6YwFQqkQd+74s9DUvbd/YQ9M/c
HfY6mG7VrDgW5XD4zbAej90R2HMdvp0nz3iqwV0Gpzi2bwUpedv+1OvM9KXLnsNP
KOctcf5sSS8t5dMlpZPJCVhNvXrQYkWWoduiwmmLwWpDrQZHj+/ifTexyEJsW1BG
eXBkIcKsCQralw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 09:51:46 2025 by rpki-client