Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File: ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier: rdRUU3sLMnsd5aZwLQrCyKFE/A2jYhotxRB8ZIDIyUo=
Subject key identifier: 90:35:D4:61:CF:5D:91:D9:0F:FE:C1:EF:DF:FC:E3:B3:D9:77:A9:C8
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer: /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial: 0196526D4CBF3D82E67793432E283B9E3DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number: 02E4
Signing time: Sun 20 Apr 2025 09:00:16 +0000
Manifest this update: Sun 20 Apr 2025 09:00:16 +0000
Manifest next update: Mon 21 Apr 2025 09:00:16 +0000
Files and hashes: 1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: 1A1FSM8bC9CLxGPlTHvuyHacWaQO4GNvkEbbsEmhJ5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:4c:bf:3d:82:e6:77:93:43:2e:28:3b:9e:3d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Validity
Not Before: Apr 20 09:00:16 2025 GMT
Not After : Apr 21 09:00:16 2025 GMT
Subject: CN=9035d461cf5d91d90ffec1efdffce3b3d977a9c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:f8:b0:37:d5:59:be:b8:0d:0d:10:e2:3b:
40:b8:b7:8c:c1:af:c2:ef:0a:d1:1e:ae:16:20:15:
17:75:c8:1d:0c:9b:d6:1c:b2:04:7a:63:5e:09:ea:
e7:ba:14:46:74:ce:16:4a:8d:a6:b5:95:cd:28:93:
04:76:b7:79:2b:be:f0:50:51:88:f7:f4:d3:76:fa:
eb:94:31:76:d3:72:8d:51:21:b3:87:78:38:44:44:
c7:a5:f0:56:d8:c0:8b:a8:fb:bc:73:fd:b1:6b:67:
32:8e:b2:3d:a4:85:67:6a:25:f1:a5:2e:1b:e9:9b:
46:2c:d8:99:07:0e:44:0e:d3:7c:95:6d:44:71:c6:
e3:f7:7f:f5:9b:cb:a7:d0:63:ab:50:a7:f6:d5:96:
13:86:9f:62:f4:19:d3:04:fa:cd:3b:28:ac:ec:3b:
24:60:d4:e6:e6:97:86:6f:a3:9d:02:e1:19:8f:7a:
a4:d7:a5:18:d0:fe:7a:e5:64:e7:11:32:2a:62:fd:
28:26:59:4b:7a:49:f2:84:5f:e1:67:5a:30:35:27:
f7:38:4d:d3:56:3d:5a:e7:28:c9:e9:a2:24:f0:64:
96:9b:18:b2:ce:dc:e4:22:de:b0:22:00:8d:6f:dc:
2d:8f:eb:cc:93:dd:76:38:b7:19:7e:b9:cd:12:1f:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:35:D4:61:CF:5D:91:D9:0F:FE:C1:EF:DF:FC:E3:B3:D9:77:A9:C8
X509v3 Authority Key Identifier:
keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1b:a2:d2:4d:b1:6b:0f:35:1a:f4:db:53:02:c4:d4:6c:ea:
50:79:55:b2:54:a3:0c:51:5a:92:bf:44:25:93:f6:5a:16:66:
0e:5f:13:b3:37:1d:c5:07:cd:c9:b6:48:63:a9:d8:a6:3c:2f:
8a:54:51:9b:7b:71:84:72:26:41:77:4a:6f:95:92:db:27:2c:
0d:ef:fe:87:88:02:f7:d1:54:8f:26:11:3c:6a:79:ab:e6:b8:
b7:97:5d:40:74:05:76:58:3e:56:89:a5:ea:cc:d2:b5:1b:d2:
93:bc:62:25:3e:ca:e8:55:7b:1a:7d:ea:52:f0:4b:6d:6d:2b:
b7:4e:60:d7:60:6a:b8:08:8f:b5:b0:e1:72:2e:8f:1f:02:dc:
3f:e9:05:97:55:32:2f:07:ad:50:33:31:7f:41:35:ff:60:fb:
44:bd:9a:2b:5f:55:b6:07:42:4a:4f:ae:89:19:3a:96:e6:d9:
aa:54:0d:b2:6e:b7:58:fb:55:7e:c6:16:df:40:e5:84:09:ae:
45:3a:6a:1f:af:65:8d:29:49:f9:0b:68:1e:f9:40:b9:a2:f2:
28:84:aa:fc:d4:c5:38:99:0b:69:cd:a7:5b:65:4e:81:6d:da:
74:c8:cc:b6:5a:0c:0d:37:3f:c8:82:fd:fa:c9:2b:76:36:94:
bc:b0:a7:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbUy/PYLmd5NDLig7nj3BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjEyOGE1YWRjYmNjZGYxNWNiOTc5YWQ2YWJmMmI5NjQw
ZmRiZGIwHhcNMjUwNDIwMDkwMDE2WhcNMjUwNDIxMDkwMDE2WjAzMTEwLwYDVQQD
Eyg5MDM1ZDQ2MWNmNWQ5MWQ5MGZmZWMxZWZkZmZjZTNiM2Q5NzdhOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN34sDfVWb64DQ0Q4jtAuLeMwa/C
7wrRHq4WIBUXdcgdDJvWHLIEemNeCernuhRGdM4WSo2mtZXNKJMEdrd5K77wUFGI
9/TTdvrrlDF203KNUSGzh3g4RETHpfBW2MCLqPu8c/2xa2cyjrI9pIVnaiXxpS4b
6ZtGLNiZBw5EDtN8lW1Eccbj93/1m8un0GOrUKf21ZYThp9i9BnTBPrNOyis7Dsk
YNTm5peGb6OdAuEZj3qk16UY0P565WTnETIqYv0oJllLeknyhF/hZ1owNSf3OE3T
Vj1a5yjJ6aIk8GSWmxiyztzkIt6wIgCNb9wtj+vMk912OLcZfrnNEh9avQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA11GHPXZHZD/7B79/847PZd6nIMB8GA1UdIwQY
MBaAFGWxKKWty8zfFcuXmtar8rlkD9vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUt
YmQ4NmQ0YjMyYzU4LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUtYmQ4NmQ0YjMyYzU4
LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChui0k2x
aw81GvTbUwLE1GzqUHlVslSjDFFakr9EJZP2WhZmDl8TszcdxQfNybZIY6nYpjwv
ilRRm3txhHImQXdKb5WS2ycsDe/+h4gC99FUjyYRPGp5q+a4t5ddQHQFdlg+Voml
6szStRvSk7xiJT7K6FV7Gn3qUvBLbW0rt05g12BquAiPtbDhci6PHwLcP+kFl1Uy
LwetUDMxf0E1/2D7RL2aK19VtgdCSk+uiRk6lubZqlQNsm63WPtVfsYW30DlhAmu
RTpqH69ljSlJ+QtoHvlAuaLyKISq/NTFOJkLac2nW2VOgW3adMjMtloMDTc/yIL9
+skrdjaUvLCnNQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:35 2025 by rpki-client