Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
File: ZdqE27TGoS08m44ht3MEVooD21A.mft (raw, json)
Hash identifier: lAQWpByRrTJgngo5usLRyHWG5g2PMBBH7JhBe58XeME=
Subject key identifier: 60:76:C5:1D:24:9F:A5:2C:FF:FD:0D:CC:90:39:BD:A9:66:3F:E8:D4
Authority key identifier: 65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
Certificate issuer: /CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Certificate serial: 019643D6F9030A6D62AF9F3655B28E260702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
Manifest number: 14FA
Signing time: Thu 17 Apr 2025 13:01:23 +0000
Manifest this update: Thu 17 Apr 2025 13:01:23 +0000
Manifest next update: Fri 18 Apr 2025 13:01:23 +0000
Files and hashes: 1: ZdqE27TGoS08m44ht3MEVooD21A.crl (hash: GbyXXi4793FQLk6MHAhK5YK9BH/OYQcqUQNx+8j6QvE=)
2: _rRQdKAM7uxfZ2rXreMkfx0DeSU.roa (hash: 1S9r9dgtBtjJtT3hRQaeliv6L2sNDV6BEV+j0Jy6Qn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:f9:03:0a:6d:62:af:9f:36:55:b2:8e:26:07:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65da84dbb4c6a12d3c9b8e21b77304568a03db50
Validity
Not Before: Apr 17 13:01:23 2025 GMT
Not After : Apr 18 13:01:23 2025 GMT
Subject: CN=6076c51d249fa52cfffd0dcc9039bda9663fe8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:3e:e7:c5:0e:35:ca:76:13:d2:da:a7:ea:
b7:77:7b:d3:6e:36:b4:e3:f3:84:38:c5:cf:21:a8:
79:c1:d1:40:c2:04:99:e3:3f:77:18:d9:4e:d1:ef:
5f:70:1f:c1:d3:9d:fb:16:0f:3a:cb:dc:31:b2:02:
8e:08:59:c4:4c:63:39:aa:36:98:6b:3d:6d:c6:58:
8a:1d:fe:c6:b7:40:a1:8d:44:90:09:9a:25:e4:45:
2d:3c:04:0e:c2:6b:60:00:f0:07:03:3a:22:fa:ba:
4d:27:eb:6a:af:2b:41:62:90:43:33:fd:32:08:75:
79:0d:77:f4:c1:7a:d8:84:aa:88:54:0e:aa:c8:64:
e0:fb:56:0f:e8:f7:90:ee:c2:33:7e:1b:c8:90:77:
85:5e:a4:45:49:bb:11:66:8f:26:2e:ab:86:ca:d8:
54:d1:da:98:d3:b4:6b:61:13:08:5e:6d:6a:e0:19:
4c:cc:65:b5:ab:62:24:84:0c:3b:95:4e:e7:90:c2:
12:90:66:15:a7:ad:2e:c2:8c:59:83:04:e5:56:ea:
7d:a7:8e:4c:6e:d0:8a:3b:0a:bf:fc:a9:e3:f8:33:
2c:82:c6:ce:d1:cb:e1:1b:00:26:a0:6f:7a:ce:c7:
b6:4b:2e:04:a0:fe:f4:12:d2:fd:2d:d0:8b:a1:1b:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:76:C5:1D:24:9F:A5:2C:FF:FD:0D:CC:90:39:BD:A9:66:3F:E8:D4
X509v3 Authority Key Identifier:
keyid:65:DA:84:DB:B4:C6:A1:2D:3C:9B:8E:21:B7:73:04:56:8A:03:DB:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdqE27TGoS08m44ht3MEVooD21A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fb265f-bbb6-49d8-9b29-57b917ce4765/1/ZdqE27TGoS08m44ht3MEVooD21A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3d:c4:25:af:5f:26:d0:c5:c2:0f:51:4d:f7:8c:ea:6f:60:
32:ff:da:4d:2f:3a:69:29:b9:99:e8:e1:a1:58:02:99:b7:a2:
8a:1a:d2:e4:0a:8b:7f:0c:0f:05:02:a6:4e:3c:bc:1c:3c:91:
6d:fa:dd:fa:ab:57:ff:a0:48:ef:1b:03:cd:44:30:98:d3:bc:
f6:63:39:91:d6:e9:8a:fc:b8:61:86:70:08:6b:8a:d4:de:b2:
7e:4f:19:f8:90:cc:bd:0d:3e:a7:07:f1:cb:04:f5:93:fb:57:
8e:98:73:72:0b:54:ca:e4:a1:22:4b:53:b5:09:c3:26:e0:e6:
fa:04:0b:f3:00:82:55:ac:83:0f:0b:cb:f2:69:7c:64:a8:7b:
f8:ab:c7:34:6b:22:f2:4c:37:71:3b:34:c5:16:4e:d3:fe:32:
e5:77:26:69:a9:71:69:d3:e6:3c:f5:2c:d9:3e:6c:50:13:9a:
50:9a:62:11:38:58:ff:70:43:4d:62:ae:5d:fd:09:f5:b9:00:
a5:34:50:60:eb:01:da:6e:d1:24:41:ee:5d:bd:74:c2:f7:81:
37:b3:5f:f1:d0:19:a1:93:a9:5a:c3:03:ef:af:9d:1a:32:47:
f7:de:9f:92:d6:6a:c5:37:8a:53:56:43:da:eb:69:70:e2:9d:
31:83:d5:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1vkDCm1ir582VbKOJgcCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZGE4NGRiYjRjNmExMmQzYzliOGUyMWI3NzMwNDU2OGEw
M2RiNTAwHhcNMjUwNDE3MTMwMTIzWhcNMjUwNDE4MTMwMTIzWjAzMTEwLwYDVQQD
Eyg2MDc2YzUxZDI0OWZhNTJjZmZmZDBkY2M5MDM5YmRhOTY2M2ZlOGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdE+58UONcp2E9Lap+q3d3vTbja0
4/OEOMXPIah5wdFAwgSZ4z93GNlO0e9fcB/B0537Fg86y9wxsgKOCFnETGM5qjaY
az1txliKHf7Gt0ChjUSQCZol5EUtPAQOwmtgAPAHAzoi+rpNJ+tqrytBYpBDM/0y
CHV5DXf0wXrYhKqIVA6qyGTg+1YP6PeQ7sIzfhvIkHeFXqRFSbsRZo8mLquGythU
0dqY07RrYRMIXm1q4BlMzGW1q2IkhAw7lU7nkMISkGYVp60uwoxZgwTlVup9p45M
btCKOwq//Knj+DMsgsbO0cvhGwAmoG96zse2Sy4EoP70EtL9LdCLoRv79QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGB2xR0kn6Us//0NzJA5valmP+jUMB8GA1UdIwQY
MBaAFGXahNu0xqEtPJuOIbdzBFaKA9tQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmRxRTI3VEdvUzA4bTQ0aHQzTUVWb29EMjFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mYjI2NWYtYmJiNi00OWQ4LTliMjkt
NTdiOTE3Y2U0NzY1LzEvWmRxRTI3VEdvUzA4bTQ0aHQzTUVWb29EMjFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mYjI2NWYtYmJiNi00OWQ4LTliMjktNTdiOTE3Y2U0NzY1
LzEvWmRxRTI3VEdvUzA4bTQ0aHQzTUVWb29EMjFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJj3EJa9f
JtDFwg9RTfeM6m9gMv/aTS86aSm5mejhoVgCmbeiihrS5AqLfwwPBQKmTjy8HDyR
bfrd+qtX/6BI7xsDzUQwmNO89mM5kdbpivy4YYZwCGuK1N6yfk8Z+JDMvQ0+pwfx
ywT1k/tXjphzcgtUyuShIktTtQnDJuDm+gQL8wCCVayDDwvL8ml8ZKh7+KvHNGsi
8kw3cTs0xRZO0/4y5XcmaalxadPmPPUs2T5sUBOaUJpiEThY/3BDTWKuXf0J9bkA
pTRQYOsB2m7RJEHuXb10wveBN7Nf8dAZoZOpWsMD76+dGjJH996fktZqxTeKU1ZD
2utpcOKdMYPVOA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:53 2025 by rpki-client