Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json)
Hash identifier: XIdPwgYi1HbdPQGM+QlRGziTHacEzsNeTJ9636ElBkE=
Subject key identifier: 4A:D1:9B:18:2B:9F:2B:ED:EA:47:B5:72:69:3F:A5:0C:72:FB:9A:F5
Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Certificate serial: 019510FDEDC27B5B33EE1DCC000402546F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
Manifest number: 0583
Signing time: Sun 16 Feb 2025 23:00:31 +0000
Manifest this update: Sun 16 Feb 2025 23:00:31 +0000
Manifest next update: Mon 17 Feb 2025 23:00:31 +0000
Files and hashes: 1: Sm3lswcII0bf-ALKj_DDpzZvLMc.roa (hash: /Kb0jwUQMRGuhoCXPSsBRGNhGMzqhfM4ypAYr8K7OsM=)
2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: aisuU7yIaXoaT36TPjL8hMtlL2PL9O+MzMfrQsVb3VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:ed:c2:7b:5b:33:ee:1d:cc:00:04:02:54:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38
Validity
Not Before: Feb 16 23:00:31 2025 GMT
Not After : Feb 17 23:00:31 2025 GMT
Subject: CN=4ad19b182b9f2bedea47b572693fa50c72fb9af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:bf:c1:d6:da:b5:ba:33:6e:11:db:69:28:
51:d6:ca:2a:d5:df:72:92:33:14:98:2e:ad:92:cc:
cd:a4:28:5c:af:23:76:3c:36:20:85:fb:84:da:24:
fa:b0:bb:9f:62:d8:49:87:ab:58:bf:6f:ff:ef:12:
1a:5f:ef:e4:63:da:d3:0e:b4:a2:d1:d4:59:a5:75:
a5:1b:4e:8b:ae:3f:71:8c:86:34:f6:09:86:a8:34:
3b:e4:a6:e7:03:e4:bd:b3:32:bd:67:18:2b:c3:00:
a8:ca:3b:58:56:9e:a8:a4:22:07:0b:59:17:db:81:
55:fd:53:8c:87:f8:2b:28:1c:50:84:b3:36:b9:11:
a7:a2:7e:05:ac:e3:cc:bc:4f:2e:d3:54:00:55:c3:
b3:f9:77:75:18:91:cf:a1:c6:e7:a1:11:e3:9c:b7:
8a:3c:95:69:a6:0e:ba:00:41:69:ac:d6:a6:fd:a8:
ca:68:f5:72:2d:35:26:61:c0:44:d0:37:84:ed:d8:
93:43:55:32:6e:48:97:74:68:8c:54:78:a4:4b:cb:
f5:72:c7:83:66:5e:78:b0:47:42:ec:8b:43:c4:86:
88:88:d3:34:7b:d1:a7:e3:c6:02:52:e3:a7:0f:07:
28:77:ea:c7:87:8e:67:fc:2e:f7:7f:3b:e8:57:9f:
12:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D1:9B:18:2B:9F:2B:ED:EA:47:B5:72:69:3F:A5:0C:72:FB:9A:F5
X509v3 Authority Key Identifier:
keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7c:72:e2:2d:63:c3:95:3e:3d:ab:51:e9:c1:c2:fb:0a:f3:
ce:5d:ab:21:19:53:07:49:b8:5f:1a:fc:30:97:f1:ea:8e:24:
99:74:a5:3c:fc:ad:9f:b6:a3:ac:48:e5:4f:af:2c:65:cd:99:
36:2a:38:2d:c1:9f:d1:62:b7:d1:33:43:e1:4d:cc:e0:a4:49:
94:38:58:e4:b7:d0:7b:4c:03:96:7f:a2:d4:06:38:dd:36:54:
62:c9:1c:cf:a9:11:0c:17:43:dc:cc:fb:e7:bf:bf:95:de:8f:
05:8a:6a:37:67:a6:d3:88:ad:9a:38:ba:4d:93:37:e0:30:80:
da:2d:15:a6:70:f5:d7:59:5e:09:06:c7:ba:a3:ac:6f:9d:8a:
b3:75:f3:50:3a:40:86:42:5b:c8:00:b7:55:81:ae:8d:79:30:
96:ce:6b:a9:b4:29:1a:1e:bc:3b:f1:ce:a2:b4:29:a3:e0:8b:
8a:f1:2f:0f:cc:44:04:e4:ab:6e:62:f9:a5:e9:f0:5d:62:ce:
05:fe:f8:0e:0c:c6:76:da:58:c0:f7:c8:35:2b:9a:06:7a:06:
3e:04:09:14:5d:37:cc:5a:fe:83:09:10:ab:ee:24:1a:8c:fc:
6b:d7:45:04:4d:79:22:f1:23:00:fe:1e:7a:8a:86:d8:47:e9:
c2:09:f5:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/e3Ce1sz7h3MAAQCVG8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYzZjYzRhNzQxOGEwOTQyMWJhOTgwNWU3NjRlZWYzNDJl
ZjhmMzgwHhcNMjUwMjE2MjMwMDMxWhcNMjUwMjE3MjMwMDMxWjAzMTEwLwYDVQQD
Eyg0YWQxOWIxODJiOWYyYmVkZWE0N2I1NzI2OTNmYTUwYzcyZmI5YWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6K/wdbatbozbhHbaShR1soq1d9y
kjMUmC6tkszNpChcryN2PDYghfuE2iT6sLufYthJh6tYv2//7xIaX+/kY9rTDrSi
0dRZpXWlG06Lrj9xjIY09gmGqDQ75KbnA+S9szK9ZxgrwwCoyjtYVp6opCIHC1kX
24FV/VOMh/grKBxQhLM2uRGnon4FrOPMvE8u01QAVcOz+Xd1GJHPocbnoRHjnLeK
PJVppg66AEFprNam/ajKaPVyLTUmYcBE0DeE7diTQ1UybkiXdGiMVHikS8v1cseD
Zl54sEdC7ItDxIaIiNM0e9Gn48YCUuOnDwcod+rHh45n/C73fzvoV58SZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErRmxgrnyvt6ke1cmk/pQxy+5r1MB8GA1UdIwQY
MBaAFM/GzEp0GKCUIbqYBedk7vNC7484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzIt
NGFmMWZiNzQzOGU3LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzItNGFmMWZiNzQzOGU3
LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3xy4i1j
w5U+PatR6cHC+wrzzl2rIRlTB0m4Xxr8MJfx6o4kmXSlPPytn7ajrEjlT68sZc2Z
Nio4LcGf0WK30TND4U3M4KRJlDhY5LfQe0wDln+i1AY43TZUYskcz6kRDBdD3Mz7
57+/ld6PBYpqN2em04itmji6TZM34DCA2i0VpnD111leCQbHuqOsb52Ks3XzUDpA
hkJbyAC3VYGujXkwls5rqbQpGh68O/HOorQpo+CLivEvD8xEBOSrbmL5penwXWLO
Bf74DgzGdtpYwPfINSuaBnoGPgQJFF03zFr+gwkQq+4kGoz8a9dFBE15IvEjAP4e
eoqG2Efpwgn10g==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:41 2025 by rpki-client