Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
File: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft (raw, json)
Hash identifier: A2LyKgGoleUVyfLbAA75AUeyfyMzp4+dbQL/SKaMS2E=
Subject key identifier: 1A:5B:63:4C:2B:6B:D1:30:00:E6:7F:DB:09:D7:D0:92:60:C4:76:05
Authority key identifier: CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
Certificate issuer: /CN=cf40e25606651a075484c709fa766d80dad52d9c
Certificate serial: 0196534A3B6D73F256674F52F7A0759D5ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
Manifest number: 0309
Signing time: Sun 20 Apr 2025 13:01:35 +0000
Manifest this update: Sun 20 Apr 2025 13:01:35 +0000
Manifest next update: Mon 21 Apr 2025 13:01:35 +0000
Files and hashes: 1: hGH_yKtqtaewmmke-m1I7cISSH0.roa (hash: T3QXU6gMQq0RcA3qUlvm1jUKiUtDYtXE4Lz78+TSbU8=)
2: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl (hash: k4LS0Cw2CaqeiM71xwvn/0ujdg7YQ15Z4fLGwCVyIao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:3b:6d:73:f2:56:67:4f:52:f7:a0:75:9d:5e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40e25606651a075484c709fa766d80dad52d9c
Validity
Not Before: Apr 20 13:01:35 2025 GMT
Not After : Apr 21 13:01:35 2025 GMT
Subject: CN=1a5b634c2b6bd13000e67fdb09d7d09260c47605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:70:0d:49:88:13:30:5b:81:d7:02:7f:de:
23:ca:43:49:ef:98:d7:07:e3:7c:79:ce:40:81:38:
3b:b7:f0:07:9f:2d:77:6c:e0:9c:96:f3:aa:19:d1:
ef:21:a7:33:99:e0:7c:1e:9b:84:b7:c5:ed:0b:3e:
7d:01:f0:cf:ab:e7:96:9f:a6:47:06:53:88:9e:06:
d6:2a:7a:6c:18:eb:8a:93:46:f5:02:40:2c:7b:53:
fa:c1:cd:24:4c:f9:b4:40:f4:d5:ce:73:4f:2a:a2:
b7:bb:3c:cc:dd:55:f4:e6:65:84:d0:af:98:51:08:
ce:79:35:cb:e2:a9:1d:60:64:54:ca:cb:d9:3c:a2:
a8:b2:36:58:fc:7f:06:b2:78:14:dc:b7:6c:31:08:
fa:59:39:04:7b:5a:42:3a:c4:a4:87:da:82:21:8e:
d2:23:f2:b3:aa:e9:e1:92:0f:a2:e8:e1:40:a2:cd:
22:d9:dc:fe:b0:2c:db:28:61:4f:8c:ac:4d:ca:47:
3c:a3:40:d5:ec:76:40:79:0c:1b:bb:6b:fa:e1:c4:
90:87:ef:c9:fc:66:49:c5:54:c5:eb:a8:07:2d:85:
20:7a:63:1c:36:bf:cc:59:28:a9:4f:de:d1:81:e6:
8b:0c:78:32:87:96:be:b1:8b:df:e1:91:e6:17:c0:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5B:63:4C:2B:6B:D1:30:00:E6:7F:DB:09:D7:D0:92:60:C4:76:05
X509v3 Authority Key Identifier:
keyid:CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:48:5b:d4:b5:d2:f1:a0:a1:5d:74:10:be:1b:83:e6:d9:
c8:8a:a2:8f:c0:31:1a:c4:b6:65:ac:5a:50:d6:bf:b7:4a:01:
0b:1a:af:f0:22:e2:76:6e:97:19:6d:2e:5b:2c:a7:5e:73:c2:
4d:1d:5d:43:10:c5:aa:3d:3e:a9:c9:17:43:b7:c0:14:c8:b4:
4f:f9:df:56:f3:4b:e6:98:b8:32:e7:dd:24:4c:18:8b:60:bf:
81:16:ea:38:76:49:1f:9a:61:a0:7d:67:67:29:17:44:9f:07:
c7:96:de:9b:77:09:c1:d6:93:68:90:2a:27:24:bc:0e:d4:84:
53:6b:dd:5f:4d:e7:14:af:ac:ff:a3:f1:d3:77:f6:7c:66:d0:
cb:52:74:4a:fa:c8:de:ff:2e:39:8d:a3:7a:19:4e:bb:b5:c6:
fd:2c:12:04:ec:cd:10:3c:0c:48:cc:87:55:78:20:b9:6f:7d:
61:63:9b:1e:fd:b0:55:1b:ff:f6:87:6c:ac:da:44:68:de:af:
5b:a3:0b:f3:09:16:3c:1d:6d:a0:e9:ac:d1:0e:43:7c:57:fb:
69:ff:2f:e8:b9:fd:69:e8:3d:77:bc:cd:b2:13:6f:b9:54:2a:
f8:8c:8b:08:b4:d8:5a:f2:89:85:2a:99:2d:50:c6:0f:c2:be:
13:19:12:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTSjttc/JWZ09S96B1nV7YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNDBlMjU2MDY2NTFhMDc1NDg0YzcwOWZhNzY2ZDgwZGFk
NTJkOWMwHhcNMjUwNDIwMTMwMTM1WhcNMjUwNDIxMTMwMTM1WjAzMTEwLwYDVQQD
EygxYTViNjM0YzJiNmJkMTMwMDBlNjdmZGIwOWQ3ZDA5MjYwYzQ3NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRNwDUmIEzBbgdcCf94jykNJ75jX
B+N8ec5AgTg7t/AHny13bOCclvOqGdHvIaczmeB8HpuEt8XtCz59AfDPq+eWn6ZH
BlOIngbWKnpsGOuKk0b1AkAse1P6wc0kTPm0QPTVznNPKqK3uzzM3VX05mWE0K+Y
UQjOeTXL4qkdYGRUysvZPKKosjZY/H8GsngU3LdsMQj6WTkEe1pCOsSkh9qCIY7S
I/Kzqunhkg+i6OFAos0i2dz+sCzbKGFPjKxNykc8o0DV7HZAeQwbu2v64cSQh+/J
/GZJxVTF66gHLYUgemMcNr/MWSipT97RgeaLDHgyh5a+sYvf4ZHmF8CUXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpbY0wra9EwAOZ/2wnX0JJgxHYFMB8GA1UdIwQY
MBaAFM9A4lYGZRoHVITHCfp2bYDa1S2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejBEaVZnWmxHZ2RVaE1jSi1uWnRnTnJWTFp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83ZDVlMWMtOWQ3OS00YjM5LWI1NjAt
ZTk5N2U1NThkNzNhLzEvejBEaVZnWmxHZ2RVaE1jSi1uWnRnTnJWTFp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83ZDVlMWMtOWQ3OS00YjM5LWI1NjAtZTk5N2U1NThkNzNh
LzEvejBEaVZnWmxHZ2RVaE1jSi1uWnRnTnJWTFp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3JIW9S1
0vGgoV10EL4bg+bZyIqij8AxGsS2ZaxaUNa/t0oBCxqv8CLidm6XGW0uWyynXnPC
TR1dQxDFqj0+qckXQ7fAFMi0T/nfVvNL5pi4MufdJEwYi2C/gRbqOHZJH5phoH1n
ZykXRJ8Hx5bem3cJwdaTaJAqJyS8DtSEU2vdX03nFK+s/6Px03f2fGbQy1J0SvrI
3v8uOY2jehlOu7XG/SwSBOzNEDwMSMyHVXgguW99YWObHv2wVRv/9odsrNpEaN6v
W6ML8wkWPB1toOms0Q5DfFf7af8v6Ln9aeg9d7zNshNvuVQq+IyLCLTYWvKJhSqZ
LVDGD8K+ExkStg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:33:40 2025 by rpki-client