
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
File: zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft (raw, json)
Hash identifier: cxXqBQc3dOIZBeTXc5yK384asRNJMUYr3JXj88OsIPA=
Subject key identifier: ED:57:04:86:44:27:08:DF:F5:5F:B4:BA:E8:6F:7D:A6:0E:77:16:D1
Authority key identifier: CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
Certificate issuer: /CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Certificate serial: 019615B43F288A4118FC615014FD40352791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
Manifest number: 0BC4
Signing time: Tue 08 Apr 2025 14:00:56 +0000
Manifest this update: Tue 08 Apr 2025 14:00:56 +0000
Manifest next update: Wed 09 Apr 2025 14:00:56 +0000
Files and hashes: 1: ZAf_TODdz2GvAFp8P1cZfLoHZ80.roa (hash: 9Jk74qPLddxgXTpIwOhtoLR2sBPTBQ9n+Rt24Gzi21Q=)
2: zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl (hash: Afl6Dm026DsPf+3aayxpdekzKb4qERC8hNR2bY/q3Ak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:b4:3f:28:8a:41:18:fc:61:50:14:fd:40:35:27:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1557b2c3adfbb25d37ea2a2dfd19b2d4ea510e
Validity
Not Before: Apr 8 14:00:56 2025 GMT
Not After : Apr 9 14:00:56 2025 GMT
Subject: CN=ed570486442708dff55fb4bae86f7da60e7716d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:7a:11:5f:47:8b:0d:60:f0:b6:f1:d4:99:
41:e9:66:04:b8:91:b9:19:3d:1d:d5:62:0b:8e:09:
56:b6:a6:0b:18:4a:af:ce:09:00:dd:2d:61:25:14:
ca:ba:3c:bc:57:bc:36:15:99:2a:33:a4:69:93:24:
76:ff:c1:7d:aa:2e:05:c8:68:10:ea:c8:05:7d:26:
c3:ec:0c:5a:25:89:d3:3e:c7:c0:47:98:54:90:27:
52:1e:29:26:6f:c5:d2:5e:70:0c:54:d5:11:e9:18:
44:57:be:c6:d1:eb:ad:60:33:cf:6d:13:ca:48:23:
8d:65:26:2f:30:04:81:cd:40:36:ba:a6:be:73:d4:
8d:ef:99:71:eb:ba:67:14:a7:3d:ca:13:04:7b:a8:
f3:4d:01:5f:60:45:7e:a7:79:00:eb:63:1a:c8:15:
2f:20:d7:9c:54:8c:3d:33:99:90:70:cb:d3:17:e8:
c0:24:9f:83:57:38:4d:9d:48:81:a3:03:28:1e:74:
cb:98:26:a9:95:12:1a:9f:d5:23:80:cc:6b:79:81:
cd:66:e7:f1:77:97:e2:65:9e:bc:8f:e0:f7:51:49:
f0:e0:f1:78:73:5a:b3:02:3f:47:0f:73:61:83:8c:
66:ee:b7:2a:74:45:15:7e:1c:bf:63:3e:ca:e5:a7:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:57:04:86:44:27:08:DF:F5:5F:B4:BA:E8:6F:7D:A6:0E:77:16:D1
X509v3 Authority Key Identifier:
keyid:CC:15:57:B2:C3:AD:FB:B2:5D:37:EA:2A:2D:FD:19:B2:D4:EA:51:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBVXssOt-7JdN-oqLf0ZstTqUQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e25ef5-67bf-463b-858b-a56dc50121dd/1/zBVXssOt-7JdN-oqLf0ZstTqUQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dc:25:1e:1b:a6:a9:e8:4a:3a:0c:a4:86:7f:31:36:69:14:
08:aa:61:25:a6:66:b6:08:56:4a:2f:0c:72:2d:88:a8:b3:70:
fd:7b:56:e7:3e:53:6c:c1:94:b5:2a:09:31:b6:96:c2:a5:8e:
77:d1:f7:ee:b9:00:12:ab:8e:ee:73:30:52:2c:55:37:a2:12:
bc:21:2c:da:b3:26:70:b6:6a:8c:9e:88:a0:95:69:c0:d1:28:
47:02:c1:14:3f:08:ad:0e:51:88:e9:94:67:e4:89:26:b0:d7:
f2:d6:6a:95:c0:72:31:98:db:04:bd:e3:f7:7f:ac:23:6e:e1:
22:06:b8:df:42:f0:fa:b9:a2:aa:68:50:76:c0:d9:a0:7f:7d:
82:ea:dd:de:79:8e:ce:f5:d6:78:d7:f5:e6:a4:1f:89:8a:82:
8b:ec:4c:4b:24:9b:68:34:1e:10:ac:5e:52:da:a6:b3:af:ef:
de:b0:87:c1:8c:17:63:ee:8d:bf:10:a7:df:a4:2d:5d:b6:9d:
08:cb:98:88:82:a3:31:18:91:51:27:9e:2b:f8:58:23:4f:4d:
d9:2e:30:22:d9:4e:91:f9:60:e7:3a:82:70:ef:97:99:6b:4b:
02:f0:03:48:30:2b:6d:a0:e5:e2:c4:e6:2a:8c:cd:b4:65:44:
59:4b:1d:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYVtD8oikEY/GFQFP1ANSeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMTU1N2IyYzNhZGZiYjI1ZDM3ZWEyYTJkZmQxOWIyZDRl
YTUxMGUwHhcNMjUwNDA4MTQwMDU2WhcNMjUwNDA5MTQwMDU2WjAzMTEwLwYDVQQD
EyhlZDU3MDQ4NjQ0MjcwOGRmZjU1ZmI0YmFlODZmN2RhNjBlNzcxNmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZZ6EV9Hiw1g8Lbx1JlB6WYEuJG5
GT0d1WILjglWtqYLGEqvzgkA3S1hJRTKujy8V7w2FZkqM6RpkyR2/8F9qi4FyGgQ
6sgFfSbD7AxaJYnTPsfAR5hUkCdSHikmb8XSXnAMVNUR6RhEV77G0eutYDPPbRPK
SCONZSYvMASBzUA2uqa+c9SN75lx67pnFKc9yhMEe6jzTQFfYEV+p3kA62MayBUv
INecVIw9M5mQcMvTF+jAJJ+DVzhNnUiBowMoHnTLmCaplRIan9UjgMxreYHNZufx
d5fiZZ68j+D3UUnw4PF4c1qzAj9HD3Nhg4xm7rcqdEUVfhy/Yz7K5adKoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1XBIZEJwjf9V+0uuhvfaYOdxbRMB8GA1UdIwQY
MBaAFMwVV7LDrfuyXTfqKi39GbLU6lEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMjVlZjUtNjdiZi00NjNiLTg1OGIt
YTU2ZGM1MDEyMWRkLzEvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMjVlZjUtNjdiZi00NjNiLTg1OGItYTU2ZGM1MDEyMWRk
LzEvekJWWHNzT3QtN0pkTi1vcUxmMFpzdFRxVVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNwlHhum
qehKOgykhn8xNmkUCKphJaZmtghWSi8Mci2IqLNw/XtW5z5TbMGUtSoJMbaWwqWO
d9H37rkAEquO7nMwUixVN6ISvCEs2rMmcLZqjJ6IoJVpwNEoRwLBFD8IrQ5RiOmU
Z+SJJrDX8tZqlcByMZjbBL3j93+sI27hIga430Lw+rmiqmhQdsDZoH99gurd3nmO
zvXWeNf15qQfiYqCi+xMSySbaDQeEKxeUtqms6/v3rCHwYwXY+6NvxCn36QtXbad
CMuYiIKjMRiRUSeeK/hYI09N2S4wItlOkflg5zqCcO+XmWtLAvADSDArbaDl4sTm
KozNtGVEWUsdYg==
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:23:06 2025 by rpki-client