Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
File: ZWat35yg3kmm7vSYWDhPVPR6VvA.mft (raw, json)
Hash identifier: N8vDF44756H78e+HU3p9L5wzp56OhgMWdvO2USPlsPU=
Subject key identifier: 6B:E3:4B:02:6B:E5:3D:E7:D4:CA:58:76:E7:79:1F:D6:8C:C1:44:6D
Authority key identifier: 65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
Certificate issuer: /CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Certificate serial: 0195124730C6DB230CB38679BEBD8B9B6BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
Manifest number: 1455
Signing time: Mon 17 Feb 2025 05:00:10 +0000
Manifest this update: Mon 17 Feb 2025 05:00:10 +0000
Manifest next update: Tue 18 Feb 2025 05:00:10 +0000
Files and hashes: 1: ZWat35yg3kmm7vSYWDhPVPR6VvA.crl (hash: IAuM1gVg7r/mKjHr4vqIFBlDN3qqWCUomrWW49IMs/s=)
2: d98mF8VuRmp24iJGNGtsA82Qm3k.roa (hash: St6m9PVExFvayS/533ff6DbQIFfqWRPHTLli6ct6T54=)
3: pxA2emkj1Wi4hN6RLcWYaRGwohw.roa (hash: uZbURZqzj+fL5lJVe1ufQh9sUQe5T2Re+0qL38WwpV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:30:c6:db:23:0c:b3:86:79:be:bd:8b:9b:6b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6566addf9ca0de49a6eef49858384f54f47a56f0
Validity
Not Before: Feb 17 05:00:10 2025 GMT
Not After : Feb 18 05:00:10 2025 GMT
Subject: CN=6be34b026be53de7d4ca5876e7791fd68cc1446d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:de:49:5a:34:a4:6d:09:77:57:24:36:b2:
4a:14:a8:3f:96:0e:ee:75:b7:ae:0a:bf:70:70:55:
ef:68:96:24:39:28:99:4f:2e:5f:4f:57:44:92:c8:
49:43:17:64:13:20:26:82:7d:86:77:d5:9b:ab:33:
d6:9c:0c:fe:8c:c7:3a:f3:ed:28:76:89:14:cd:08:
b2:29:e6:95:60:4b:42:ff:a8:44:87:f5:8e:98:94:
5c:aa:c2:ac:e2:8c:be:d4:8d:cd:0d:65:c9:a1:4c:
37:c5:c0:91:87:b6:78:cb:74:7d:d6:fc:3c:10:2d:
cb:18:31:47:d7:ae:14:1b:02:51:33:63:dd:ab:a6:
26:ac:19:e4:5c:55:1d:e1:f2:14:d9:b5:c7:40:80:
e9:60:6d:5d:76:3e:dc:61:6a:1c:b4:c5:1d:ae:ac:
87:0c:32:fe:e6:e9:90:15:c6:4b:65:41:b6:f5:ba:
f7:ca:a8:06:5f:15:3e:b1:29:d8:09:57:60:98:02:
a9:5d:a0:f5:43:ef:17:e7:d7:e6:79:20:55:16:c0:
f6:d3:02:f6:07:3f:07:c4:45:90:ab:37:d1:1b:2d:
39:af:eb:d3:6a:22:7f:5b:01:6c:db:a4:85:b0:dc:
9f:f7:6c:bb:a2:c9:2c:86:29:d7:d8:f3:0d:56:9e:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E3:4B:02:6B:E5:3D:E7:D4:CA:58:76:E7:79:1F:D6:8C:C1:44:6D
X509v3 Authority Key Identifier:
keyid:65:66:AD:DF:9C:A0:DE:49:A6:EE:F4:98:58:38:4F:54:F4:7A:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWat35yg3kmm7vSYWDhPVPR6VvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bd56d7-3899-40e5-9612-3f28b6adbda9/1/ZWat35yg3kmm7vSYWDhPVPR6VvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1d:ae:8c:3b:d7:4e:8f:c2:41:be:ed:5d:36:a3:73:e2:96:
5f:02:92:38:f5:38:56:3d:30:30:4d:12:8e:69:12:a4:ea:3d:
f8:1e:a5:99:96:8f:59:bb:c3:55:f0:4c:69:dd:22:08:c0:84:
f0:a5:82:d4:68:bd:3f:a7:9f:bd:02:22:e3:dc:cb:2f:76:5d:
d7:86:99:c3:82:cf:76:87:f5:14:ab:c4:43:97:49:0f:6c:46:
e8:1c:d8:88:e8:ab:a5:2d:04:f0:47:f2:1a:cc:2b:92:70:5a:
07:59:5d:94:78:e7:7b:19:db:d7:bf:b3:7e:9d:3e:a6:b9:cb:
61:fe:cc:1a:bb:88:ce:ff:ea:65:8e:4c:fd:82:48:48:9a:30:
a3:0d:f0:d7:e3:a5:3c:43:9a:b9:c8:2e:80:6c:53:41:56:29:
aa:95:dd:e5:24:e8:17:be:81:61:eb:00:86:26:51:4a:a6:c0:
34:05:04:65:13:88:3b:74:cd:b9:23:68:08:22:5c:75:82:cc:
c9:56:e3:55:64:ca:85:2d:53:5c:09:6b:48:d6:99:7e:21:c9:
e4:a5:88:73:f2:1f:f3:d9:2c:a2:3d:05:35:f1:8b:6e:a4:90:
8d:ec:4c:78:a8:75:12:90:68:bf:7e:25:51:64:9c:ce:12:23:
f1:49:08:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSRzDG2yMMs4Z5vr2Lm2umMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NjZhZGRmOWNhMGRlNDlhNmVlZjQ5ODU4Mzg0ZjU0ZjQ3
YTU2ZjAwHhcNMjUwMjE3MDUwMDEwWhcNMjUwMjE4MDUwMDEwWjAzMTEwLwYDVQQD
Eyg2YmUzNGIwMjZiZTUzZGU3ZDRjYTU4NzZlNzc5MWZkNjhjYzE0NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D7eSVo0pG0Jd1ckNrJKFKg/lg7u
dbeuCr9wcFXvaJYkOSiZTy5fT1dEkshJQxdkEyAmgn2Gd9WbqzPWnAz+jMc68+0o
dokUzQiyKeaVYEtC/6hEh/WOmJRcqsKs4oy+1I3NDWXJoUw3xcCRh7Z4y3R91vw8
EC3LGDFH164UGwJRM2Pdq6YmrBnkXFUd4fIU2bXHQIDpYG1ddj7cYWoctMUdrqyH
DDL+5umQFcZLZUG29br3yqgGXxU+sSnYCVdgmAKpXaD1Q+8X59fmeSBVFsD20wL2
Bz8HxEWQqzfRGy05r+vTaiJ/WwFs26SFsNyf92y7oskshinX2PMNVp7B2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvjSwJr5T3n1MpYdud5H9aMwURtMB8GA1UdIwQY
MBaAFGVmrd+coN5Jpu70mFg4T1T0elbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTIt
M2YyOGI2YWRiZGE5LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iZDU2ZDctMzg5OS00MGU1LTk2MTItM2YyOGI2YWRiZGE5
LzEvWldhdDM1eWcza21tN3ZTWVdEaFBWUFI2VnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALx2ujDvX
To/CQb7tXTajc+KWXwKSOPU4Vj0wME0SjmkSpOo9+B6lmZaPWbvDVfBMad0iCMCE
8KWC1Gi9P6efvQIi49zLL3Zd14aZw4LPdof1FKvEQ5dJD2xG6BzYiOirpS0E8Efy
GswrknBaB1ldlHjnexnb17+zfp0+prnLYf7MGruIzv/qZY5M/YJISJowow3w1+Ol
PEOaucgugGxTQVYpqpXd5SToF76BYesAhiZRSqbANAUEZROIO3TNuSNoCCJcdYLM
yVbjVWTKhS1TXAlrSNaZfiHJ5KWIc/If89ksoj0FNfGLbqSQjexMeKh1EpBov34l
UWSczhIj8UkI5Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:49 2025 by rpki-client