Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: 9T/k0zJT2YuvF6Q6bPyiNLQ+bHfO9RlP2DCuzu/du2s=
Subject key identifier: 86:34:88:45:A9:93:AD:C0:ED:B4:7C:67:1E:A7:59:B0:45:7E:55:6E
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 01958B846E65A8FBF71438A72AB45A34885F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 027D
Signing time: Wed 12 Mar 2025 18:01:06 +0000
Manifest this update: Wed 12 Mar 2025 18:01:06 +0000
Manifest next update: Thu 13 Mar 2025 18:01:06 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: 4q87gIyGSHCqX/1daEePlIl0O4wPDFg161XAPd57td8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:6e:65:a8:fb:f7:14:38:a7:2a:b4:5a:34:88:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Mar 12 18:01:06 2025 GMT
Not After : Mar 13 18:01:06 2025 GMT
Subject: CN=86348845a993adc0edb47c671ea759b0457e556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:99:d0:b0:e7:50:83:89:5a:6a:45:73:5a:
d0:9c:2c:69:88:6c:57:33:59:00:09:b7:48:66:57:
95:c1:ac:e9:0b:64:99:ee:21:6e:fa:8a:6e:21:d4:
48:e3:45:b3:89:27:09:6a:40:57:ef:d5:d3:c7:b6:
ff:9e:06:f6:18:4a:fd:7d:af:e9:d9:18:40:78:9c:
26:74:64:75:3a:97:94:28:77:91:b5:51:3b:ad:d4:
8e:78:18:9f:b4:be:7e:05:aa:03:45:62:6f:28:d7:
8d:68:c3:e9:14:2d:8d:b4:d1:ab:3b:24:87:f7:78:
66:71:7f:5d:b7:b5:69:3c:85:2e:d5:59:1a:35:41:
83:ac:0b:1d:98:9e:aa:db:90:ec:0e:1a:e6:77:c7:
99:46:1b:af:93:ce:f6:b1:20:d2:9d:42:49:70:ec:
55:61:6a:18:71:18:61:1f:78:56:a4:5b:fe:c5:68:
1a:94:da:25:ad:99:97:35:5c:d1:2a:6e:29:3d:bc:
0a:f5:53:2c:33:ce:70:ba:aa:47:6f:50:cf:6f:40:
e4:c4:19:3d:04:d9:1f:cc:37:fa:25:b2:ac:3f:19:
b5:73:d8:5a:e8:69:d0:bc:65:9b:16:ce:c5:51:c4:
d9:df:6c:72:b0:41:97:39:7f:66:16:86:38:9e:5e:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:34:88:45:A9:93:AD:C0:ED:B4:7C:67:1E:A7:59:B0:45:7E:55:6E
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2c:fb:08:96:6a:3e:4c:4b:54:77:5a:33:42:18:00:7f:e7:
30:9a:40:f3:03:d5:45:f7:5f:6f:48:64:ba:a3:4f:b7:1f:73:
77:49:46:d9:be:21:7a:4a:01:f6:e1:57:98:79:18:2c:0f:48:
c2:0b:6f:44:39:ca:47:c9:39:dd:e2:2f:53:be:8e:2d:37:d3:
f4:e7:13:6b:c5:d0:99:ac:08:15:c7:ee:db:d7:22:66:51:ca:
d6:7e:96:0a:82:5e:39:aa:cd:66:67:1c:1f:3e:e8:7b:fd:e3:
f2:9d:cb:a6:7f:60:93:c7:db:24:54:a8:28:22:b6:95:fe:03:
52:dd:d5:92:38:ae:66:3a:f3:c3:3d:0a:a3:ba:e8:fb:13:f7:
83:b5:5f:24:c2:7c:fc:e8:30:68:2d:ac:e6:9c:f1:1b:19:c3:
21:02:9b:85:a2:1b:a2:10:40:b7:45:8e:8c:8f:7a:e9:cf:4c:
cb:35:81:fa:1b:b1:ec:b6:79:66:38:7f:da:94:86:a3:2c:cd:
40:ee:f6:b4:5f:b0:cd:66:ab:fc:3f:78:8b:33:90:27:05:65:
cf:8d:d9:70:94:bd:a9:fb:1e:36:5a:b5:03:69:11:08:dd:31:
d6:4e:f3:a0:40:e9:a1:2e:da:7d:98:22:d0:cb:b2:aa:f8:51:
0b:5d:e7:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhG5lqPv3FDinKrRaNIhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjEyOGE1YWRjYmNjZGYxNWNiOTc5YWQ2YWJmMmI5NjQw
ZmRiZGIwHhcNMjUwMzEyMTgwMTA2WhcNMjUwMzEzMTgwMTA2WjAzMTEwLwYDVQQD
Eyg4NjM0ODg0NWE5OTNhZGMwZWRiNDdjNjcxZWE3NTliMDQ1N2U1NTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzGZ0LDnUIOJWmpFc1rQnCxpiGxX
M1kACbdIZleVwazpC2SZ7iFu+opuIdRI40WziScJakBX79XTx7b/ngb2GEr9fa/p
2RhAeJwmdGR1OpeUKHeRtVE7rdSOeBiftL5+BaoDRWJvKNeNaMPpFC2NtNGrOySH
93hmcX9dt7VpPIUu1VkaNUGDrAsdmJ6q25DsDhrmd8eZRhuvk872sSDSnUJJcOxV
YWoYcRhhH3hWpFv+xWgalNolrZmXNVzRKm4pPbwK9VMsM85wuqpHb1DPb0DkxBk9
BNkfzDf6JbKsPxm1c9ha6GnQvGWbFs7FUcTZ32xysEGXOX9mFoY4nl6aWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY0iEWpk63A7bR8Zx6nWbBFflVuMB8GA1UdIwQY
MBaAFGWxKKWty8zfFcuXmtar8rlkD9vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUt
YmQ4NmQ0YjMyYzU4LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUtYmQ4NmQ0YjMyYzU4
LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiz7CJZq
PkxLVHdaM0IYAH/nMJpA8wPVRfdfb0hkuqNPtx9zd0lG2b4hekoB9uFXmHkYLA9I
wgtvRDnKR8k53eIvU76OLTfT9OcTa8XQmawIFcfu29ciZlHK1n6WCoJeOarNZmcc
Hz7oe/3j8p3Lpn9gk8fbJFSoKCK2lf4DUt3VkjiuZjrzwz0Ko7ro+xP3g7VfJMJ8
/OgwaC2s5pzxGxnDIQKbhaIbohBAt0WOjI966c9MyzWB+hux7LZ5Zjh/2pSGoyzN
QO72tF+wzWar/D94izOQJwVlz43ZcJS9qfseNlq1A2kRCN0x1k7zoEDpoS7afZgi
0MuyqvhRC13nTA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:16 2025 by rpki-client