Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json)
Hash identifier: 9wVnAWXoKG5jz5gdHWCnfeTorJ+hH04ne3PztB8L1mQ=
Subject key identifier: A7:EC:2E:64:F8:8F:2A:FD:C4:C7:89:C6:E8:93:93:B3:9A:60:7A:43
Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Certificate serial: 01965537BC6338A3CE71B9B84C2306140C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:38 +0000
Manifest this update: Sun 20 Apr 2025 22:00:38 +0000
Manifest next update: Mon 21 Apr 2025 22:00:38 +0000
Files and hashes: 1: oi2OU2MII40wJvGP04NHRArOFvs.roa (hash: VTkXyNDb4jg5wGXFkKirwnltERuwe0Q4j4rmz+H0ul4=)
2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: glpB+8yrap+kEMqj6ojGQoqe7VEItg6c413aTwKIApM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:bc:63:38:a3:ce:71:b9:b8:4c:23:06:14:0c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a
Validity
Not Before: Apr 20 22:00:38 2025 GMT
Not After : Apr 21 22:00:38 2025 GMT
Subject: CN=a7ec2e64f88f2afdc4c789c6e89393b39a607a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:75:ae:f4:71:30:9b:29:7a:81:7c:f7:b4:
17:0e:cd:ca:64:75:3f:db:28:7d:dc:32:36:9a:33:
09:80:36:51:8e:78:ba:64:18:79:d8:af:45:12:f7:
d3:bc:50:92:f4:17:55:2d:d4:30:cd:6f:a1:fc:05:
9b:0e:9c:7b:34:4d:47:32:ce:b4:3d:fe:fd:f3:85:
c0:a0:2d:ae:02:3c:f8:0d:07:e6:23:20:d1:20:71:
e9:94:26:30:9e:ab:0f:d8:b9:48:3c:8d:13:b4:0b:
88:b3:a0:9f:7b:1a:82:a6:6c:cd:e4:c8:05:20:fe:
0d:a6:af:5f:46:fe:fc:cd:a6:47:81:65:c3:0a:9b:
d5:8d:cf:3a:34:4a:8b:8e:cf:0c:b4:35:28:5e:9e:
f5:02:00:d4:39:56:10:25:77:84:04:f3:5e:82:6c:
ac:f7:62:51:47:07:99:aa:b0:62:7c:3d:6e:7b:1c:
22:26:3a:08:ea:6c:5c:dd:b5:05:b4:0f:d1:15:81:
e2:4f:ca:07:8f:19:fb:b9:4f:23:03:e5:c4:e5:7b:
60:60:a6:c8:f4:76:f8:e6:30:67:8e:79:a0:3e:44:
a1:07:14:7d:6d:7c:f1:63:ea:d0:e4:bd:35:4b:a8:
25:f6:55:0e:a3:ac:5f:ec:83:f2:c8:f8:39:96:4f:
bb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EC:2E:64:F8:8F:2A:FD:C4:C7:89:C6:E8:93:93:B3:9A:60:7A:43
X509v3 Authority Key Identifier:
keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b6:2a:9a:49:bc:ba:f1:49:b9:82:15:52:6c:3b:ae:24:18:
b3:16:6f:e4:b3:9b:2d:31:b5:50:b8:14:ba:20:02:36:57:fa:
f4:bf:fe:18:1a:ca:f3:fa:39:f0:fb:c7:58:54:92:88:19:88:
88:29:65:03:24:f9:8e:6b:bf:7e:7f:1c:d6:7f:21:16:9e:8e:
bb:e6:f2:d1:f0:4b:95:b3:59:20:16:e1:23:17:23:5e:be:f1:
f4:d6:3a:a9:80:4a:1a:7f:bb:b6:94:d7:38:76:c3:f5:1a:e4:
0f:61:84:64:db:87:9f:99:27:c3:3c:93:78:35:ac:4b:a2:cc:
7d:89:5e:9b:65:0c:76:0a:92:04:c8:d5:06:a5:22:98:f4:b4:
1f:6f:a4:c1:bb:49:7c:e3:e5:28:5d:18:c2:09:e6:90:1a:0e:
4f:1f:a2:56:9c:ad:91:16:87:2c:a7:92:e6:9a:ce:ed:e9:c6:
06:83:f2:d6:ba:9d:c5:35:55:c4:02:a7:b3:d0:16:64:aa:86:
a7:66:97:d7:40:89:ac:ea:e2:8b:4f:3b:8d:a1:c8:cd:51:a7:
0b:e0:4e:03:ad:5f:42:9d:1e:7d:93:fa:6f:7f:a9:ba:7f:20:
d9:16:ec:44:88:5d:dc:94:7e:3f:ee:c1:61:f2:de:98:dc:71:
fa:c5:41:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVN7xjOKPOcbm4TCMGFAwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMjc1MzFhZDk5OWI2ZDVhMDQ0MWI3NWZhZWE3ZDU3ODY1
M2U0MmEwHhcNMjUwNDIwMjIwMDM4WhcNMjUwNDIxMjIwMDM4WjAzMTEwLwYDVQQD
EyhhN2VjMmU2NGY4OGYyYWZkYzRjNzg5YzZlODkzOTNiMzlhNjA3YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7N1rvRxMJspeoF897QXDs3KZHU/
2yh93DI2mjMJgDZRjni6ZBh52K9FEvfTvFCS9BdVLdQwzW+h/AWbDpx7NE1HMs60
Pf7984XAoC2uAjz4DQfmIyDRIHHplCYwnqsP2LlIPI0TtAuIs6CfexqCpmzN5MgF
IP4Npq9fRv78zaZHgWXDCpvVjc86NEqLjs8MtDUoXp71AgDUOVYQJXeEBPNegmys
92JRRweZqrBifD1uexwiJjoI6mxc3bUFtA/RFYHiT8oHjxn7uU8jA+XE5XtgYKbI
9Hb45jBnjnmgPkShBxR9bXzxY+rQ5L01S6gl9lUOo6xf7IPyyPg5lk+7/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfsLmT4jyr9xMeJxuiTk7OaYHpDMB8GA1UdIwQY
MBaAFMwnUxrZmbbVoEQbdfrqfVeGU+QqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgt
ZmE0MTE3ZGIxNTU1LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgtZmE0MTE3ZGIxNTU1
LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7Yqmkm8
uvFJuYIVUmw7riQYsxZv5LObLTG1ULgUuiACNlf69L/+GBrK8/o58PvHWFSSiBmI
iCllAyT5jmu/fn8c1n8hFp6Ou+by0fBLlbNZIBbhIxcjXr7x9NY6qYBKGn+7tpTX
OHbD9RrkD2GEZNuHn5knwzyTeDWsS6LMfYlem2UMdgqSBMjVBqUimPS0H2+kwbtJ
fOPlKF0YwgnmkBoOTx+iVpytkRaHLKeS5prO7enGBoPy1rqdxTVVxAKns9AWZKqG
p2aX10CJrOrii087jaHIzVGnC+BOA61fQp0efZP6b3+pun8g2RbsRIhd3JR+P+7B
YfLemNxx+sVB3g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 02:11:01 2025 by rpki-client