Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File: z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier: 0ortMjLezPNOhKYdCLK45cY3lefqj+tGizeMVC7hMJ4=
Subject key identifier: F9:5E:49:4A:CC:9C:43:64:BF:DC:82:4B:B7:52:47:C6:4F:66:9A:9D
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer: /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial: 0196501170A9B78A92F418C524D781CBD7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number: 1045
Signing time: Sat 19 Apr 2025 22:00:42 +0000
Manifest this update: Sat 19 Apr 2025 22:00:42 +0000
Manifest next update: Sun 20 Apr 2025 22:00:42 +0000
Files and hashes: 1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=)
2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: ITCr7HapxOJ36uzXBI1WMXh3NPWCCvd+//HnM9rutuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:70:a9:b7:8a:92:f4:18:c5:24:d7:81:cb:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Validity
Not Before: Apr 19 22:00:42 2025 GMT
Not After : Apr 20 22:00:42 2025 GMT
Subject: CN=f95e494acc9c4364bfdc824bb75247c64f669a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:ed:af:a2:78:28:cf:6e:33:dc:8a:12:bd:
e1:aa:3d:bb:b0:ec:f0:b7:ca:34:91:9c:b9:1e:dd:
b5:bc:8c:04:52:86:0b:80:ba:66:2f:4d:a3:32:1d:
e8:83:f1:c5:32:a6:5b:f2:6d:9a:5b:5b:d5:4e:61:
a9:70:88:60:d6:d3:4b:22:95:47:71:79:08:3c:6e:
bf:2d:32:f4:b6:ff:57:22:d9:68:df:df:12:cf:35:
0f:2e:72:1c:ab:5c:c7:2d:03:2c:e8:99:1f:ba:aa:
ed:f5:b6:be:91:d5:d9:57:b4:25:77:46:93:3c:fe:
e4:3e:be:25:d1:20:b9:0e:cd:cf:73:82:40:b0:4f:
a6:9d:0a:66:5a:dc:08:03:2a:34:64:0b:4d:0d:6f:
fb:77:c0:92:32:d4:47:2b:27:13:16:b6:9a:38:e8:
c9:fb:22:63:44:26:10:9f:d3:4b:ff:4a:f8:26:6e:
29:ff:0f:91:04:c0:21:06:f4:0f:82:3d:6e:fa:e0:
35:5f:df:ea:5d:9f:c3:0c:34:5a:22:68:a7:05:b3:
9d:69:d2:ec:18:ae:3c:da:a4:45:9d:29:9c:69:84:
70:d2:4c:ec:92:b9:85:8f:9c:cd:5e:21:ae:9f:8b:
f8:ea:15:ec:5a:f7:25:9c:e7:f8:e7:b2:ef:2e:88:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5E:49:4A:CC:9C:43:64:BF:DC:82:4B:B7:52:47:C6:4F:66:9A:9D
X509v3 Authority Key Identifier:
keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:31:b4:ac:55:f6:2a:bf:2d:54:db:4e:67:a5:84:ba:6b:35:
87:e8:06:9b:22:b9:fb:78:e4:b6:c6:69:af:6d:9f:44:88:30:
e8:b8:7f:56:aa:10:4c:c4:60:e1:be:29:de:8c:d1:e4:35:7d:
fd:1d:df:9b:4c:36:82:1b:79:27:fe:b8:92:8e:ba:2f:0a:1c:
e1:ea:ba:c1:7e:dd:0b:07:60:aa:e5:13:71:ce:85:b5:62:76:
eb:00:ae:3a:cd:ee:3a:f4:51:ba:43:3d:ee:67:05:73:18:30:
b0:1b:c2:a3:d0:ba:f8:6f:13:f2:04:62:4e:c7:47:ca:ef:0f:
f1:d6:d8:e2:9f:6b:b0:a7:b8:0b:dc:3a:55:16:a8:fa:02:48:
42:1e:2c:f7:14:06:e3:e2:63:28:9d:dc:65:1b:1b:ff:e5:7a:
92:5b:f1:86:22:7e:cc:02:17:5c:93:26:fa:79:fc:63:81:31:
96:eb:5b:83:3b:63:ee:0a:d9:58:cc:38:ba:ac:97:6c:7e:d4:
2f:e6:80:2f:c2:af:cb:7b:3c:93:98:84:5d:2f:5a:95:1f:69:
1f:0b:b9:ff:b9:ec:a9:7c:72:9f:ff:26:7b:e7:a8:95:e0:30:
55:e2:00:e0:13:68:a8:a7:8f:73:57:92:e2:8c:15:37:91:1d:
b0:fb:d5:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEXCpt4qS9BjFJNeBy9fnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODM3NWMzMjFkZWY5MjY1OTgzZTIxOTRkNDBiYTk3YWZl
N2YxY2MwHhcNMjUwNDE5MjIwMDQyWhcNMjUwNDIwMjIwMDQyWjAzMTEwLwYDVQQD
EyhmOTVlNDk0YWNjOWM0MzY0YmZkYzgyNGJiNzUyNDdjNjRmNjY5YTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgvtr6J4KM9uM9yKEr3hqj27sOzw
t8o0kZy5Ht21vIwEUoYLgLpmL02jMh3og/HFMqZb8m2aW1vVTmGpcIhg1tNLIpVH
cXkIPG6/LTL0tv9XItlo398SzzUPLnIcq1zHLQMs6Jkfuqrt9ba+kdXZV7Qld0aT
PP7kPr4l0SC5Ds3Pc4JAsE+mnQpmWtwIAyo0ZAtNDW/7d8CSMtRHKycTFraaOOjJ
+yJjRCYQn9NL/0r4Jm4p/w+RBMAhBvQPgj1u+uA1X9/qXZ/DDDRaIminBbOdadLs
GK482qRFnSmcaYRw0kzskrmFj5zNXiGun4v46hXsWvclnOf457LvLojzvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPleSUrMnENkv9yCS7dSR8ZPZpqdMB8GA1UdIwQY
MBaAFM+DdcMh3vkmWYPiGU1Aupev5/HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUt
ZTBjN2I5NmI1N2YyLzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUtZTBjN2I5NmI1N2Yy
LzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzG0rFX2
Kr8tVNtOZ6WEums1h+gGmyK5+3jktsZpr22fRIgw6Lh/VqoQTMRg4b4p3ozR5DV9
/R3fm0w2ght5J/64ko66Lwoc4eq6wX7dCwdgquUTcc6FtWJ26wCuOs3uOvRRukM9
7mcFcxgwsBvCo9C6+G8T8gRiTsdHyu8P8dbY4p9rsKe4C9w6VRao+gJIQh4s9xQG
4+JjKJ3cZRsb/+V6klvxhiJ+zAIXXJMm+nn8Y4Exlutbgztj7grZWMw4uqyXbH7U
L+aAL8Kvy3s8k5iEXS9alR9pHwu5/7nsqXxyn/8me+eoleAwVeIA4BNoqKePc1eS
4owVN5EdsPvVJg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:44:39 2025 by rpki-client