Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
File: ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft (raw, json)
Hash identifier: iJUC1RjViPozyy9IY6zQDJANOO4VnAtBJu0cXIYBbVY=
Subject key identifier: DD:2C:D7:DE:0B:D0:85:00:D9:72:DB:54:25:B7:DF:C3:77:83:4E:28
Authority key identifier: 66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
Certificate issuer: /CN=66501165645aa80dcba315885cf374acb6d21305
Certificate serial: 01964E90A132F9ABF9E65ACF4AC1B8C6399D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
Manifest number: 090E
Signing time: Sat 19 Apr 2025 15:00:23 +0000
Manifest this update: Sat 19 Apr 2025 15:00:23 +0000
Manifest next update: Sun 20 Apr 2025 15:00:23 +0000
Files and hashes: 1: BcdGko0r03EyM3V22SJp6LUI_jg.roa (hash: 98Brzs1QQHJfWLy5qsyBt5iEFr39Rl2gjaUb1gsQClI=)
2: ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl (hash: EJaZzABcb4gkumiwr6Nmev7j7MK4sqby+hT3FM/cUjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:90:a1:32:f9:ab:f9:e6:5a:cf:4a:c1:b8:c6:39:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66501165645aa80dcba315885cf374acb6d21305
Validity
Not Before: Apr 19 15:00:23 2025 GMT
Not After : Apr 20 15:00:23 2025 GMT
Subject: CN=dd2cd7de0bd08500d972db5425b7dfc377834e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:bf:e2:6a:fb:9c:71:ca:47:55:3d:65:4c:
a3:b5:6a:85:8e:05:c6:ae:ef:d2:c4:64:ee:69:2d:
d5:98:5a:74:da:5d:1a:54:5a:50:b0:87:c5:51:86:
f0:d7:fc:3c:e7:b6:f2:a7:a9:75:64:2c:47:37:50:
39:a1:f1:55:d1:b4:08:dc:03:e2:7f:fe:3a:33:bb:
a4:02:1f:a3:ff:d1:e8:3d:57:17:54:99:ad:f2:25:
03:b2:2d:ff:77:4a:23:7b:dd:2f:54:ba:d6:65:fb:
06:43:7a:0f:fb:a2:b3:40:bb:cb:96:5b:51:a6:d0:
8e:c5:16:fd:70:56:1d:f6:2b:1a:6f:bc:ff:31:10:
54:c2:ca:84:1d:3a:3c:a0:5a:f3:42:92:d3:6b:17:
c9:2b:61:2d:15:76:b5:c9:19:bf:de:8d:e7:e5:a9:
9b:00:35:04:56:e9:04:cd:01:a9:3e:e1:0b:b3:98:
5d:c2:03:5b:a4:b7:04:1a:a5:44:b3:33:40:8a:93:
48:2c:eb:aa:2f:91:b4:2c:cf:0a:b9:f1:75:78:c2:
82:7f:ba:53:47:cf:5a:5c:ac:3f:ae:d9:ef:b0:9a:
ac:90:7b:08:a4:e8:49:d2:c0:6c:3d:a3:ad:48:52:
29:aa:52:11:05:4f:ba:c2:2d:8e:6d:33:f3:18:56:
81:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2C:D7:DE:0B:D0:85:00:D9:72:DB:54:25:B7:DF:C3:77:83:4E:28
X509v3 Authority Key Identifier:
keyid:66:50:11:65:64:5A:A8:0D:CB:A3:15:88:5C:F3:74:AC:B6:D2:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZlARZWRaqA3LoxWIXPN0rLbSEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2d26a3-346e-4d0d-ac1e-1d020ece07ea/1/ZlARZWRaqA3LoxWIXPN0rLbSEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ae:c9:33:14:d5:15:df:07:72:39:7d:95:54:f5:12:f0:f9:
6c:5e:d8:44:78:6a:33:36:1b:c0:1b:eb:d2:09:58:62:19:1f:
24:50:1f:5a:c6:6a:f7:7a:87:06:69:a9:9b:29:0d:26:aa:ff:
98:5e:72:55:d3:bf:a7:71:b0:62:4e:99:40:06:4d:36:9c:9e:
6c:cc:df:dd:9b:e7:ac:96:e5:08:40:e9:69:97:89:68:82:22:
41:01:83:50:bb:6d:e2:d8:23:34:87:56:83:fe:55:76:cb:56:
ef:09:c8:d6:3b:97:9f:66:c9:3b:4f:2c:b7:0f:b0:e1:17:97:
2d:0a:9d:22:56:1b:38:c9:c1:e8:0d:65:43:ca:d1:f4:56:78:
19:5e:7b:e9:a4:05:1f:42:b9:f6:08:7d:77:9f:ec:e5:97:7b:
8d:d1:d6:3e:77:5a:5f:e8:ba:34:c9:12:0d:82:07:a1:27:11:
fa:36:c4:14:93:ca:e8:8f:1a:08:0c:dc:f7:47:be:cd:23:e8:
de:11:b1:0b:94:5c:05:e5:d6:c8:0b:3a:8f:03:a3:78:26:8b:
3b:23:8b:30:78:e1:3f:51:0e:3d:16:34:7b:fb:1d:6e:67:93:
3f:66:70:07:b4:53:50:52:0d:64:e9:ce:e3:78:c2:55:ce:ea:
7e:c7:7d:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOkKEy+av55lrPSsG4xjmdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NTAxMTY1NjQ1YWE4MGRjYmEzMTU4ODVjZjM3NGFjYjZk
MjEzMDUwHhcNMjUwNDE5MTUwMDIzWhcNMjUwNDIwMTUwMDIzWjAzMTEwLwYDVQQD
EyhkZDJjZDdkZTBiZDA4NTAwZDk3MmRiNTQyNWI3ZGZjMzc3ODM0ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubS/4mr7nHHKR1U9ZUyjtWqFjgXG
ru/SxGTuaS3VmFp02l0aVFpQsIfFUYbw1/w857byp6l1ZCxHN1A5ofFV0bQI3APi
f/46M7ukAh+j/9HoPVcXVJmt8iUDsi3/d0oje90vVLrWZfsGQ3oP+6KzQLvLlltR
ptCOxRb9cFYd9isab7z/MRBUwsqEHTo8oFrzQpLTaxfJK2EtFXa1yRm/3o3n5amb
ADUEVukEzQGpPuELs5hdwgNbpLcEGqVEszNAipNILOuqL5G0LM8KufF1eMKCf7pT
R89aXKw/rtnvsJqskHsIpOhJ0sBsPaOtSFIpqlIRBU+6wi2ObTPzGFaB8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0s194L0IUA2XLbVCW338N3g04oMB8GA1UdIwQY
MBaAFGZQEWVkWqgNy6MViFzzdKy20hMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUt
MWQwMjBlY2UwN2VhLzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZDI2YTMtMzQ2ZS00ZDBkLWFjMWUtMWQwMjBlY2UwN2Vh
LzEvWmxBUlpXUmFxQTNMb3hXSVhQTjByTGJTRXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfq7JMxTV
Fd8Hcjl9lVT1EvD5bF7YRHhqMzYbwBvr0glYYhkfJFAfWsZq93qHBmmpmykNJqr/
mF5yVdO/p3GwYk6ZQAZNNpyebMzf3ZvnrJblCEDpaZeJaIIiQQGDULtt4tgjNIdW
g/5VdstW7wnI1juXn2bJO08stw+w4ReXLQqdIlYbOMnB6A1lQ8rR9FZ4GV576aQF
H0K59gh9d5/s5Zd7jdHWPndaX+i6NMkSDYIHoScR+jbEFJPK6I8aCAzc90e+zSPo
3hGxC5RcBeXWyAs6jwOjeCaLOyOLMHjhP1EOPRY0e/sdbmeTP2ZwB7RTUFINZOnO
43jCVc7qfsd9xw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:02:30 2025 by rpki-client