Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier: ovtvboR1D3CmXxbR3OxEZlDDNSOuYTKKo+g9nFcIdUo=
Subject key identifier: 05:83:73:E1:43:13:91:C3:E8:CD:7F:2B:9C:E9:78:7C:F8:08:9B:82
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer: /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial: 01964AEB463C1687542B207BF1FBEF72A98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number: 121E
Signing time: Fri 18 Apr 2025 22:00:54 +0000
Manifest this update: Fri 18 Apr 2025 22:00:54 +0000
Manifest next update: Sat 19 Apr 2025 22:00:54 +0000
Files and hashes: 1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: E3pPGOyPSY354HezmAaeWC8BSh+MYA9JMUoKJViHrRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:46:3c:16:87:54:2b:20:7b:f1:fb:ef:72:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Validity
Not Before: Apr 18 22:00:54 2025 GMT
Not After : Apr 19 22:00:54 2025 GMT
Subject: CN=058373e1431391c3e8cd7f2b9ce9787cf8089b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:d0:31:fb:e2:f5:88:7b:dd:7e:2e:d3:3e:
d3:56:67:e1:d0:8d:f0:7b:9c:99:2b:d2:f6:08:56:
bd:d5:ee:63:65:58:9e:04:ce:61:7d:1b:73:b5:b1:
da:69:d8:55:57:bf:27:30:72:6c:13:aa:f8:6c:03:
76:6c:5e:37:4c:82:32:88:5d:eb:e6:88:c0:f3:97:
3d:15:9b:3e:84:41:a3:9a:9a:9d:3d:22:a0:af:df:
b4:53:3e:3e:7a:80:83:db:9c:ec:6e:ef:0d:a3:f7:
57:e7:9e:b8:12:8b:fb:5d:32:5a:5a:0a:2e:c6:0d:
9b:0d:c0:20:4e:cd:b4:de:6a:62:9a:27:8b:20:e7:
31:4a:e1:6d:c6:95:70:d4:aa:b7:b2:67:6f:87:46:
d9:3a:eb:b6:95:9c:98:5a:68:c4:e3:f9:f4:ce:3a:
bd:15:3c:e8:da:9e:50:3f:60:69:84:ad:4b:a9:67:
9d:c8:86:26:eb:ef:fb:04:3f:22:8f:ef:6d:50:9b:
bb:ce:6d:1c:4b:e5:9e:74:f5:19:da:64:09:b9:07:
73:ac:76:77:3b:c8:33:49:66:86:a4:82:31:02:cc:
bc:d3:91:eb:be:2f:85:ce:89:96:42:06:84:2e:c5:
bd:5e:7e:a0:97:0a:86:ac:c9:ba:04:25:dd:e0:25:
e2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:83:73:E1:43:13:91:C3:E8:CD:7F:2B:9C:E9:78:7C:F8:08:9B:82
X509v3 Authority Key Identifier:
keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c9:37:a4:b3:ef:db:15:5c:8e:80:fb:0e:f5:19:07:ff:6a:
7a:26:82:8b:41:e9:15:7a:0c:a3:7e:dc:8b:4b:d5:47:0f:ad:
6e:19:d2:36:71:9e:b4:4a:68:85:84:40:c7:83:c0:65:b1:d0:
af:3e:05:a3:c0:7b:12:bc:01:f3:59:d2:d1:55:e0:9a:5f:9e:
98:11:cd:87:22:51:c1:84:81:a2:1b:f0:fb:73:56:63:84:64:
f4:dd:bf:b5:18:bd:1c:7d:ab:3c:18:19:83:05:a1:0c:dd:5e:
48:bd:c2:86:a3:c7:9d:a1:59:09:12:e9:79:b2:3c:97:f3:f7:
14:97:34:4d:5e:8b:bb:3d:1d:71:71:b9:9d:2a:e8:ca:88:45:
9d:ca:cc:a9:a9:68:21:6f:13:4a:11:17:e4:de:f3:5b:6f:dc:
6f:33:2a:b7:71:cb:67:e4:ad:a9:fe:5b:8b:6a:f1:37:be:80:
68:ec:68:03:c2:42:3b:f7:f5:e8:04:90:a1:67:c9:a8:0d:8b:
ec:26:0d:47:4a:03:bf:97:8a:70:93:23:67:5c:14:f4:f0:e3:
d0:4c:75:c9:84:46:65:ee:73:73:98:fc:26:36:1f:fe:36:7f:
fa:86:d4:ea:bc:b4:88:33:85:64:40:1b:7f:65:7a:0b:a4:d1:
76:a2:c7:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZK60Y8FodUKyB78fvvcqmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODljYjg4OWY5OTIxMmU4YmY1M2QwNmU0NWQ4N2FiYjkx
Njk1MDYwHhcNMjUwNDE4MjIwMDU0WhcNMjUwNDE5MjIwMDU0WjAzMTEwLwYDVQQD
EygwNTgzNzNlMTQzMTM5MWMzZThjZDdmMmI5Y2U5Nzg3Y2Y4MDg5YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I3QMfvi9Yh73X4u0z7TVmfh0I3w
e5yZK9L2CFa91e5jZVieBM5hfRtztbHaadhVV78nMHJsE6r4bAN2bF43TIIyiF3r
5ojA85c9FZs+hEGjmpqdPSKgr9+0Uz4+eoCD25zsbu8No/dX5564Eov7XTJaWgou
xg2bDcAgTs203mpimieLIOcxSuFtxpVw1Kq3smdvh0bZOuu2lZyYWmjE4/n0zjq9
FTzo2p5QP2BphK1LqWedyIYm6+/7BD8ij+9tUJu7zm0cS+WedPUZ2mQJuQdzrHZ3
O8gzSWaGpIIxAsy805Hrvi+FzomWQgaELsW9Xn6glwqGrMm6BCXd4CXi+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWDc+FDE5HD6M1/K5zpeHz4CJuCMB8GA1UdIwQY
MBaAFM+Jy4ifmSEui/U9BuRdh6u5FpUGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjct
ZDlhNDBjNGQzMjkxLzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8wYjg5NTEtMjY5OS00NGIzLTkwNjctZDlhNDBjNGQzMjkx
LzEvejRuTGlKLVpJUzZMOVQwRzVGMkhxN2tXbFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8k3pLPv
2xVcjoD7DvUZB/9qeiaCi0HpFXoMo37ci0vVRw+tbhnSNnGetEpohYRAx4PAZbHQ
rz4Fo8B7ErwB81nS0VXgml+emBHNhyJRwYSBohvw+3NWY4Rk9N2/tRi9HH2rPBgZ
gwWhDN1eSL3ChqPHnaFZCRLpebI8l/P3FJc0TV6Luz0dcXG5nSroyohFncrMqalo
IW8TShEX5N7zW2/cbzMqt3HLZ+Stqf5bi2rxN76AaOxoA8JCO/f16ASQoWfJqA2L
7CYNR0oDv5eKcJMjZ1wU9PDj0Ex1yYRGZe5zc5j8JjYf/jZ/+obU6ry0iDOFZEAb
f2V6C6TRdqLHiA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:00:25 2025 by rpki-client