Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json)
Hash identifier: DAgvT+v9BQp6mE8+0Qb+6bO/eCkecBNHXOfv+Njzp9Y=
Subject key identifier: 8D:54:07:AE:F0:CB:85:7A:31:26:6A:ED:75:6A:F6:45:E6:87:FD:A4
Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525
Certificate serial: 01964CA272FCAFDF7F68087C8023360C1E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
Manifest number: 1242
Signing time: Sat 19 Apr 2025 06:00:36 +0000
Manifest this update: Sat 19 Apr 2025 06:00:36 +0000
Manifest next update: Sun 20 Apr 2025 06:00:36 +0000
Files and hashes: 1: ZPgVDRI_G_wgjVLd8kNTHtjE33Y.roa (hash: uiDFhkIkjuexDSnG2oE6Dq4+/FIv/1F+pVEhj9VaU8g=)
2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: GIWisI8d8++9Hk6modIhlH+8h2hqHgPZEHqHBqxSLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:72:fc:af:df:7f:68:08:7c:80:23:36:0c:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525
Validity
Not Before: Apr 19 06:00:36 2025 GMT
Not After : Apr 20 06:00:36 2025 GMT
Subject: CN=8d5407aef0cb857a31266aed756af645e687fda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:e4:c2:6d:98:62:10:3e:1d:83:0a:4f:fe:
28:da:dc:f4:4f:98:cf:5d:50:6a:f7:b1:e0:23:bb:
dd:75:e4:82:a2:e0:b2:67:08:5a:1f:dd:e9:d7:7e:
c6:b4:65:b7:3c:08:68:4f:5d:52:6b:4b:db:ab:3d:
21:31:df:cf:5f:e4:5a:39:d1:97:fc:75:f7:87:5d:
34:28:db:a6:59:64:e4:3a:58:bb:cb:22:c4:64:0e:
9e:16:6e:21:06:45:2c:8a:8d:9f:16:7d:d1:1b:2b:
7a:e1:58:fa:93:e7:06:ba:12:45:80:f0:9d:00:1a:
bd:9a:9f:a7:af:65:42:2e:63:7f:84:70:d9:ee:0e:
76:cd:2d:7b:19:6d:20:a5:3a:41:53:03:42:e9:43:
da:a0:b5:95:89:21:2c:31:c9:16:07:6e:8b:41:06:
c1:a8:c2:93:b1:bb:11:90:2c:4d:4b:1e:d9:08:d0:
09:9d:0e:c4:b5:c1:71:b2:98:18:4a:59:46:de:2e:
a8:b2:41:e9:86:40:f9:56:2a:49:10:79:29:a3:85:
ce:70:a4:b6:de:f8:47:56:7b:01:44:ca:71:94:12:
c5:01:80:52:4a:21:27:ba:cf:15:fe:c0:63:5f:6f:
b5:e5:0a:f8:e1:8c:ce:a0:8a:49:d4:0e:c3:ff:40:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:54:07:AE:F0:CB:85:7A:31:26:6A:ED:75:6A:F6:45:E6:87:FD:A4
X509v3 Authority Key Identifier:
keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:42:88:c7:39:0b:e0:d0:51:cf:39:a1:1e:ca:ff:73:ae:09:
5a:d0:ca:4e:ac:07:56:f0:5f:3d:6e:f2:78:35:12:4a:e7:a4:
8d:78:2a:48:7d:d8:3d:3b:f3:ea:ea:11:63:ba:eb:19:42:1e:
38:21:48:10:31:c9:39:0f:d1:cc:4a:85:b0:d5:f5:1b:84:c0:
c3:c7:fe:ce:36:a2:20:21:d1:eb:a6:6e:2e:ef:af:ce:d5:7c:
20:3c:2d:ff:a1:a2:35:90:ad:e3:85:ee:dd:f4:7a:9a:d9:cc:
9b:30:5e:bd:d4:87:62:78:aa:27:08:c3:a4:fb:f9:59:dc:ec:
5b:17:75:be:71:c3:a9:f0:3c:ac:e5:1c:ca:e6:16:9e:51:8b:
3e:57:e7:3f:10:24:d1:a1:5f:62:ca:54:db:97:d8:61:57:65:
2d:e8:da:a5:e0:c0:4c:05:11:11:18:9d:4b:67:e0:45:8c:bd:
51:10:d5:75:0e:cc:cf:60:9c:f2:1f:67:da:11:31:2b:c3:d1:
48:63:44:c3:5c:8d:b3:90:a4:aa:22:24:f7:0d:7f:90:79:84:
be:c3:b1:f3:fb:78:3f:b8:7d:f3:a6:3e:a7:2c:23:c0:98:c4:
cf:b9:ab:a6:67:2c:a3:81:99:00:77:10:df:8c:e4:78:0b:ea:
41:70:7a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMonL8r99/aAh8gCM2DB4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1
MTc1MjUwHhcNMjUwNDE5MDYwMDM2WhcNMjUwNDIwMDYwMDM2WjAzMTEwLwYDVQQD
Eyg4ZDU0MDdhZWYwY2I4NTdhMzEyNjZhZWQ3NTZhZjY0NWU2ODdmZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xPkwm2YYhA+HYMKT/4o2tz0T5jP
XVBq97HgI7vddeSCouCyZwhaH93p137GtGW3PAhoT11Sa0vbqz0hMd/PX+RaOdGX
/HX3h100KNumWWTkOli7yyLEZA6eFm4hBkUsio2fFn3RGyt64Vj6k+cGuhJFgPCd
ABq9mp+nr2VCLmN/hHDZ7g52zS17GW0gpTpBUwNC6UPaoLWViSEsMckWB26LQQbB
qMKTsbsRkCxNSx7ZCNAJnQ7EtcFxspgYSllG3i6oskHphkD5VipJEHkpo4XOcKS2
3vhHVnsBRMpxlBLFAYBSSiEnus8V/sBjX2+15Qr44YzOoIpJ1A7D/0CCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1UB67wy4V6MSZq7XVq9kXmh/2kMB8GA1UdIwQY
MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt
NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4
LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0KIxzkL
4NBRzzmhHsr/c64JWtDKTqwHVvBfPW7yeDUSSuekjXgqSH3YPTvz6uoRY7rrGUIe
OCFIEDHJOQ/RzEqFsNX1G4TAw8f+zjaiICHR66ZuLu+vztV8IDwt/6GiNZCt44Xu
3fR6mtnMmzBevdSHYniqJwjDpPv5WdzsWxd1vnHDqfA8rOUcyuYWnlGLPlfnPxAk
0aFfYspU25fYYVdlLejapeDATAURERidS2fgRYy9URDVdQ7Mz2Cc8h9n2hExK8PR
SGNEw1yNs5CkqiIk9w1/kHmEvsOx8/t4P7h986Y+pywjwJjEz7mrpmcso4GZAHcQ
34zkeAvqQXB6qA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:22:54 2025 by rpki-client