Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
File: z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft (raw, json)
Hash identifier: sDySM3lBKkk+GyumtZUmGk/Te5XQaITp/8wODBe6IfQ=
Subject key identifier: 3B:D3:B1:D0:4C:B7:75:0D:E1:2E:FC:79:DB:88:9C:86:26:CB:13:02
Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Certificate serial: 01965C4C514D32B6462FB96C4B20987E48D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
Manifest number: 0954
Signing time: Tue 22 Apr 2025 07:00:27 +0000
Manifest this update: Tue 22 Apr 2025 07:00:27 +0000
Manifest next update: Wed 23 Apr 2025 07:00:27 +0000
Files and hashes: 1: NfL_EgCXFD9v0tnPQCNcR4Zs7dY.roa (hash: 3L+biwYBL7kWKWLcHYU08oqapVdlu0GbcU2/Kta7c7M=)
2: vx37pmJyLlye-9dl2uWrRUf7xJU.roa (hash: 4JRoa9ZFR/6K1f135/WkX1+rr9SDaGJYSOppqdKq2H0=)
3: z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl (hash: lUrX+6JqXmVLCJSwGAiokoG93ICwierP7yZPML6x93A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:4c:51:4d:32:b6:46:2f:b9:6c:4b:20:98:7e:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f
Validity
Not Before: Apr 22 07:00:27 2025 GMT
Not After : Apr 23 07:00:27 2025 GMT
Subject: CN=3bd3b1d04cb7750de12efc79db889c8626cb1302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:91:fa:3a:5f:89:02:79:62:b1:fc:76:b7:
79:71:87:e3:b9:43:ac:d4:ab:3f:61:91:7e:e2:f7:
6b:4f:99:97:88:61:a8:fd:55:a5:20:c6:7a:4c:83:
69:eb:e7:58:c9:d8:d6:0f:c2:3a:eb:c2:8e:a0:8e:
b3:46:bb:43:ec:1f:48:9a:73:d6:e4:56:ed:fe:af:
08:11:2a:91:3b:4d:5b:67:d1:b3:2e:80:38:db:60:
34:4f:9c:2a:13:69:01:3f:81:50:4a:17:75:06:77:
00:a3:80:47:90:80:09:85:c6:d7:aa:e4:56:46:bf:
35:66:6d:3e:d5:b3:d9:02:3d:8c:85:5b:f9:90:43:
7d:aa:e8:6c:05:77:05:7a:c6:80:a3:66:eb:df:59:
74:55:6b:0f:95:f9:29:4a:17:a4:f2:2e:0f:ae:01:
85:e0:a5:d1:1d:14:aa:70:b1:ab:4f:b9:95:12:d0:
02:3a:56:92:a1:15:a1:b6:c0:55:b7:f4:c3:c9:26:
80:6d:6f:38:4a:5f:2b:72:55:1e:55:24:a8:09:2c:
72:50:eb:e0:b8:c9:e6:4e:c2:e3:59:ec:a4:6c:81:
e6:61:a0:5d:49:52:80:89:45:82:6d:81:3d:09:c7:
ea:f0:8e:c1:37:06:86:57:c5:d9:81:77:08:8d:6c:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D3:B1:D0:4C:B7:75:0D:E1:2E:FC:79:DB:88:9C:86:26:CB:13:02
X509v3 Authority Key Identifier:
keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:3a:74:74:06:c3:7b:47:dc:0c:42:e3:db:42:ba:ba:c8:
c5:9c:4a:d1:70:b0:bd:0d:b9:8e:73:24:81:f6:b8:4e:5b:ec:
93:5b:db:73:50:8b:f6:70:ad:f2:05:ec:33:c6:75:59:68:64:
49:37:ba:f6:74:1a:29:38:92:25:24:4d:c5:25:50:ac:b5:43:
ae:e4:1f:5b:41:d1:e0:f1:21:5a:d0:32:73:8e:46:78:e2:29:
91:56:5f:0e:d2:94:98:26:5d:d9:69:4b:93:a3:f7:ac:74:c1:
5c:b6:6b:e1:e1:dc:75:a6:75:e9:6d:46:1a:52:2d:54:26:61:
56:a1:51:58:8b:44:51:fd:2d:29:92:c2:a4:b8:35:15:db:7c:
ba:b4:6d:18:0a:80:1f:42:1a:ec:60:32:5d:ea:e7:17:e5:3d:
63:bc:1f:d9:fa:3a:52:c6:01:5f:08:16:cf:70:5a:8c:16:f6:
06:c8:96:56:aa:86:e9:a4:ae:8d:8f:30:69:a2:ee:56:90:00:
b2:6b:93:54:6b:22:93:dd:b4:06:7d:04:28:89:67:92:b9:bd:
c9:1d:ec:a1:f0:b8:06:8d:d1:b2:b8:d0:dd:0d:52:54:1a:d4:
90:17:a6:e9:ae:d0:04:12:6c:98:48:fe:9e:0b:53:2c:6b:06:
d1:a9:3c:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZcTFFNMrZGL7lsSyCYfkjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk
ZWJiMGYwHhcNMjUwNDIyMDcwMDI3WhcNMjUwNDIzMDcwMDI3WjAzMTEwLwYDVQQD
EygzYmQzYjFkMDRjYjc3NTBkZTEyZWZjNzlkYjg4OWM4NjI2Y2IxMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqmR+jpfiQJ5YrH8drd5cYfjuUOs
1Ks/YZF+4vdrT5mXiGGo/VWlIMZ6TINp6+dYydjWD8I668KOoI6zRrtD7B9ImnPW
5Fbt/q8IESqRO01bZ9GzLoA422A0T5wqE2kBP4FQShd1BncAo4BHkIAJhcbXquRW
Rr81Zm0+1bPZAj2MhVv5kEN9quhsBXcFesaAo2br31l0VWsPlfkpShek8i4PrgGF
4KXRHRSqcLGrT7mVEtACOlaSoRWhtsBVt/TDySaAbW84Sl8rclUeVSSoCSxyUOvg
uMnmTsLjWeykbIHmYaBdSVKAiUWCbYE9Ccfq8I7BNwaGV8XZgXcIjWxbWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvTsdBMt3UN4S78eduInIYmyxMCMB8GA1UdIwQY
MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt
MzgyOTIwMTU1ZmZiLzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi
LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFM6dHQG
w3tH3AxC49tCurrIxZxK0XCwvQ25jnMkgfa4Tlvsk1vbc1CL9nCt8gXsM8Z1WWhk
STe69nQaKTiSJSRNxSVQrLVDruQfW0HR4PEhWtAyc45GeOIpkVZfDtKUmCZd2WlL
k6P3rHTBXLZr4eHcdaZ16W1GGlItVCZhVqFRWItEUf0tKZLCpLg1Fdt8urRtGAqA
H0Ia7GAyXernF+U9Y7wf2fo6UsYBXwgWz3BajBb2BsiWVqqG6aSujY8waaLuVpAA
smuTVGsik920Bn0EKIlnkrm9yR3sofC4Bo3RsrjQ3Q1SVBrUkBem6a7QBBJsmEj+
ngtTLGsG0ak8Sg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:41:00 2025 by rpki-client