Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json)
Hash identifier: /URjltT9f64+RI04rCgytfCk9rhzDPNovDXD6pm8sxA=
Subject key identifier: BA:F6:BA:55:0A:36:F7:C8:A8:44:79:65:36:5F:A3:3C:DB:BD:8F:2F
Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Certificate serial: 019611A100F0820F89755D652B35A5C9654F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
Manifest number: 0B9D
Signing time: Mon 07 Apr 2025 19:01:26 +0000
Manifest this update: Mon 07 Apr 2025 19:01:26 +0000
Manifest next update: Tue 08 Apr 2025 19:01:26 +0000
Files and hashes: 1: 3p5nhLsOjt1h69C859DNKbB2MQU.roa (hash: fomkhfBpGlBS0AfRGY4b/l04Zngyijm1T6FQ0+oESso=)
2: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: JgPLrniPB76KPilkfFwM5nuo86UtT8fuvaF/Bog8jQE=)
3: erD0_om35A6G_uqyp6XGZDGLdVI.roa (hash: saEDfeKCqtK6Zf8P00Hi6vY1lHaYntZiHK+rvPRIHjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:11:a1:00:f0:82:0f:89:75:5d:65:2b:35:a5:c9:65:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec
Validity
Not Before: Apr 7 19:01:26 2025 GMT
Not After : Apr 8 19:01:26 2025 GMT
Subject: CN=baf6ba550a36f7c8a8447965365fa33cdbbd8f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:01:84:1e:65:16:c8:a7:0d:a9:ca:55:be:
d4:f3:58:45:27:d5:3f:1e:fa:ea:8d:79:af:da:4b:
a6:13:4b:ce:87:48:2c:56:a6:bf:99:8a:16:06:40:
3c:c3:f6:a8:6b:71:db:bf:6d:b0:55:b7:73:96:d6:
74:53:d5:ab:c0:82:b8:27:c1:50:e9:08:5d:e7:19:
7d:e8:75:3c:8e:0b:15:23:2a:8d:b0:fd:44:59:be:
09:71:34:ab:99:e7:dd:ac:a3:5b:61:e2:b9:73:78:
2e:14:12:4d:a4:06:ff:68:69:8f:3b:b5:29:58:67:
02:c2:c9:35:41:10:63:45:c0:2d:b0:d3:f9:36:4d:
af:69:ed:28:86:ea:1e:07:d6:63:2f:99:2c:2c:59:
76:c7:4c:c6:2d:fd:d2:7e:a0:ef:0e:7f:8b:b1:1d:
1b:c7:aa:96:69:66:4e:c8:44:3c:aa:93:a2:da:3d:
a2:44:c0:e0:52:1f:3c:be:c8:22:77:20:56:34:8c:
c2:08:d8:58:4d:96:7d:c3:a6:0c:55:6e:78:9a:93:
ad:ab:8e:ae:7c:49:5a:e8:17:06:75:2e:99:5e:d5:
b0:74:8b:65:7a:84:ff:d9:af:83:fd:06:2c:56:88:
6c:cb:5b:1a:db:9c:c9:52:7b:26:3a:f2:46:dd:ec:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F6:BA:55:0A:36:F7:C8:A8:44:79:65:36:5F:A3:3C:DB:BD:8F:2F
X509v3 Authority Key Identifier:
keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:41:54:2a:ad:7d:79:53:4b:c7:90:b8:45:1e:dd:ba:06:68:
46:85:cb:bb:b8:2c:32:e9:1a:23:9c:24:ad:17:fe:43:f7:31:
19:c5:54:4c:32:eb:56:0e:03:35:cd:e0:74:28:2f:80:40:fa:
7e:a2:a2:41:43:02:49:e8:9a:97:eb:71:96:89:e0:ed:c8:0d:
01:90:36:00:8e:d3:b7:aa:8d:c7:a4:a1:71:4f:19:c1:99:d4:
67:04:28:4a:9b:f4:90:0a:52:9a:5e:dc:82:3d:53:25:bf:fa:
80:22:df:e4:02:cf:2d:d4:24:80:1a:a5:a1:bb:a2:05:33:23:
ba:cb:f8:79:af:35:d0:95:7d:80:25:17:2e:33:ea:35:17:b3:
e4:16:d9:24:9b:a9:21:60:f1:83:2e:67:e7:ba:e9:86:9b:f6:
91:45:45:98:be:42:e4:d8:a6:e4:44:3f:53:aa:9b:81:5d:f2:
3c:2e:92:62:89:25:3c:b3:db:02:2f:7f:e6:e3:a1:d3:0f:1f:
6c:b4:77:cc:30:b8:b6:71:0e:0d:7d:1d:13:15:e2:46:8b:f7:
3e:52:82:65:3b:27:72:d5:f1:b5:75:5e:31:3c:3a:25:ca:a1:
21:a0:cd:03:3e:ba:81:79:71:a3:20:f3:9a:ab:ba:97:b1:b0:
78:2c:d2:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYRoQDwgg+JdV1lKzWlyWVPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4
OGQ0ZWMwHhcNMjUwNDA3MTkwMTI2WhcNMjUwNDA4MTkwMTI2WjAzMTEwLwYDVQQD
EyhiYWY2YmE1NTBhMzZmN2M4YTg0NDc5NjUzNjVmYTMzY2RiYmQ4ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aABhB5lFsinDanKVb7U81hFJ9U/
HvrqjXmv2kumE0vOh0gsVqa/mYoWBkA8w/aoa3Hbv22wVbdzltZ0U9WrwIK4J8FQ
6Qhd5xl96HU8jgsVIyqNsP1EWb4JcTSrmefdrKNbYeK5c3guFBJNpAb/aGmPO7Up
WGcCwsk1QRBjRcAtsNP5Nk2vae0ohuoeB9ZjL5ksLFl2x0zGLf3SfqDvDn+LsR0b
x6qWaWZOyEQ8qpOi2j2iRMDgUh88vsgidyBWNIzCCNhYTZZ9w6YMVW54mpOtq46u
fEla6BcGdS6ZXtWwdItleoT/2a+D/QYsVohsy1sa25zJUnsmOvJG3exc0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr2ulUKNvfIqER5ZTZfozzbvY8vMB8GA1UdIwQY
MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt
NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5
LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEFUKq19
eVNLx5C4RR7dugZoRoXLu7gsMukaI5wkrRf+Q/cxGcVUTDLrVg4DNc3gdCgvgED6
fqKiQUMCSeial+txlong7cgNAZA2AI7Tt6qNx6ShcU8ZwZnUZwQoSpv0kApSml7c
gj1TJb/6gCLf5ALPLdQkgBqlobuiBTMjusv4ea810JV9gCUXLjPqNRez5BbZJJup
IWDxgy5n57rphpv2kUVFmL5C5Nim5EQ/U6qbgV3yPC6SYoklPLPbAi9/5uOh0w8f
bLR3zDC4tnEODX0dExXiRov3PlKCZTsnctXxtXVeMTw6JcqhIaDNAz66gXlxoyDz
mqu6l7GweCzS5g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:20 2025 by rpki-client