Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier: oTSvOxfpuGK6FVotOY11ZxTNaLz+sRQhZ+Faqe+XVeA=
Subject key identifier: 67:92:87:DC:0E:8F:4A:80:10:7B:81:51:76:AA:C9:72:B3:DC:A6:0C
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer: /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial: 019655DC9BB02E4E2E573C930A413FEF39C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 01:00:43 +0000
Manifest this update: Mon 21 Apr 2025 01:00:43 +0000
Manifest next update: Tue 22 Apr 2025 01:00:43 +0000
Files and hashes: 1: CGIluw5b3rFNq3TYcrDu-mJjjcY.roa (hash: 7XYO0sh+h2BXkgYXdxURNA8WGt1oRVxjTX46cE0gy/o=)
2: RLQ2xMmRZoZiAtZFS_YRcySPvAc.roa (hash: P8RbzLYf4UK0GuClJazmarq7imv/ewysF1Ivpx0otS4=)
3: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: Xm8qwdr2ohFELCGfHFXFBQe94Y6mL+MftH4HJIvdjx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:9b:b0:2e:4e:2e:57:3c:93:0a:41:3f:ef:39:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Validity
Not Before: Apr 21 01:00:43 2025 GMT
Not After : Apr 22 01:00:43 2025 GMT
Subject: CN=679287dc0e8f4a80107b815176aac972b3dca60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:09:a5:0d:8e:34:7d:e9:8e:d8:01:06:03:
ae:d1:da:20:96:7b:bc:3a:34:57:88:ea:bf:fc:0a:
83:1c:60:41:4e:92:e8:6f:7c:00:00:b5:73:89:cb:
fb:92:9f:3a:63:2c:67:52:3f:89:06:74:55:bf:94:
23:c7:dc:2b:39:c1:c2:95:57:7b:73:b9:ec:12:71:
90:20:48:96:85:63:60:30:8e:30:63:fe:4e:8d:2d:
5f:23:f3:28:cf:51:5d:fe:2f:ac:25:78:2f:94:0d:
58:c3:e4:80:ba:6b:af:ae:d5:dc:38:26:f6:5e:e7:
90:ad:03:3a:f6:df:92:dc:1b:aa:53:7a:f0:49:45:
d6:8e:73:6b:5c:34:c8:4f:5b:7b:c1:e2:09:16:ec:
e6:c6:bf:c8:58:b7:f5:f7:db:8a:09:a4:b0:7a:1b:
d0:13:22:6b:67:1b:19:d4:d6:ea:0d:59:6a:be:1a:
33:7a:09:de:a3:4f:68:51:6b:18:1d:75:cd:ba:3b:
5d:57:52:ae:8b:70:f7:82:52:ef:9f:3a:c0:97:d6:
23:26:4f:4f:f7:ea:b5:39:07:e3:ff:94:ec:b3:4b:
f0:df:2c:2d:ee:07:08:fb:04:34:fe:e1:de:3f:7b:
08:58:9b:48:17:94:d9:fc:16:e9:e7:ff:c2:82:67:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:92:87:DC:0E:8F:4A:80:10:7B:81:51:76:AA:C9:72:B3:DC:A6:0C
X509v3 Authority Key Identifier:
keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cc:b0:47:d8:b8:b9:1d:2d:c5:8d:ce:3b:bf:5f:b9:b6:a9:
13:c1:93:04:30:0e:a5:79:59:9f:db:8c:a8:1c:07:40:ff:70:
fb:06:f1:d8:5a:22:4c:7a:ef:a5:10:a7:8e:c1:91:60:c9:ba:
52:0b:86:73:f5:25:73:31:07:9a:9b:6c:a0:b2:55:bf:59:80:
33:5e:de:4f:6a:21:85:81:e5:89:45:28:63:37:97:ed:2c:6c:
4f:78:0b:1e:b1:69:5d:5d:fe:8a:95:bf:d4:d1:aa:87:a0:95:
0d:2f:7b:5d:8b:d8:02:9d:74:00:fd:fb:5d:a6:2b:35:c4:2e:
32:88:41:90:68:d5:03:93:06:ea:90:27:e3:b7:c6:a5:50:4a:
9f:19:65:57:8a:90:34:dd:82:cd:06:bf:ad:27:35:dd:23:ea:
55:00:0c:ba:e3:69:41:fb:26:c6:37:2d:fe:61:8f:93:d2:a4:
55:18:cd:3e:45:dd:0c:c2:10:32:3c:e1:18:4c:de:01:a7:55:
c2:c3:6a:6c:5f:d9:cd:18:3d:83:06:19:f7:61:6f:19:81:5a:
d9:50:4b:e8:96:53:3a:eb:fd:af:a0:38:b1:f5:f4:2f:eb:6e:
13:c7:46:56:0c:8c:83:0a:02:b7:b7:cd:50:79:b4:b1:cf:36:
68:42:c7:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZV3JuwLk4uVzyTCkE/7znHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh
YTMwNDQwHhcNMjUwNDIxMDEwMDQzWhcNMjUwNDIyMDEwMDQzWjAzMTEwLwYDVQQD
Eyg2NzkyODdkYzBlOGY0YTgwMTA3YjgxNTE3NmFhYzk3MmIzZGNhNjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsooJpQ2ONH3pjtgBBgOu0doglnu8
OjRXiOq//AqDHGBBTpLob3wAALVzicv7kp86YyxnUj+JBnRVv5Qjx9wrOcHClVd7
c7nsEnGQIEiWhWNgMI4wY/5OjS1fI/Moz1Fd/i+sJXgvlA1Yw+SAumuvrtXcOCb2
XueQrQM69t+S3BuqU3rwSUXWjnNrXDTIT1t7weIJFuzmxr/IWLf199uKCaSwehvQ
EyJrZxsZ1NbqDVlqvhozegneo09oUWsYHXXNujtdV1Kui3D3glLvnzrAl9YjJk9P
9+q1OQfj/5Tss0vw3ywt7gcI+wQ0/uHeP3sIWJtIF5TZ/Bbp5//CgmdHDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeSh9wOj0qAEHuBUXaqyXKz3KYMMB8GA1UdIwQY
MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt
YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1
LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsywR9i4
uR0txY3OO79fubapE8GTBDAOpXlZn9uMqBwHQP9w+wbx2FoiTHrvpRCnjsGRYMm6
UguGc/UlczEHmptsoLJVv1mAM17eT2ohhYHliUUoYzeX7SxsT3gLHrFpXV3+ipW/
1NGqh6CVDS97XYvYAp10AP37XaYrNcQuMohBkGjVA5MG6pAn47fGpVBKnxllV4qQ
NN2CzQa/rSc13SPqVQAMuuNpQfsmxjct/mGPk9KkVRjNPkXdDMIQMjzhGEzeAadV
wsNqbF/ZzRg9gwYZ92FvGYFa2VBL6JZTOuv9r6A4sfX0L+tuE8dGVgyMgwoCt7fN
UHm0sc82aELHpg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:04:02 2025 by rpki-client