Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json)
Hash identifier: /DxompG1Wk7XzFceXSmaH3K4yafZACa9L/2EIV2SQOY=
Subject key identifier: BA:C0:67:D9:72:FF:70:56:A7:E0:12:80:C3:04:F2:D2:15:AA:1D:B1
Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Certificate serial: 019643D6C09D9B9A69391AE6006CB72C626F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
Manifest number: 1501
Signing time: Thu 17 Apr 2025 13:01:09 +0000
Manifest this update: Thu 17 Apr 2025 13:01:09 +0000
Manifest next update: Fri 18 Apr 2025 13:01:09 +0000
Files and hashes: 1: XA0CQqMcOPYYccV3sepNDTS0yhw.roa (hash: 4pMf0cRKCztacYsNRlFf/QDf3VqwFTPcvQ/RQcBBA+8=)
2: ZZQHimemT1Yqan2xZ5-h03SN2fg.roa (hash: 6foyLQXTh/VHEAP/zlvNZfav60Qqh/Jwfeou7E9KXFE=)
3: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: OlXM6YCNygLTvdLsQeLNDXyvox8LatnZjKpIQ3YbP+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:c0:9d:9b:9a:69:39:1a:e6:00:6c:b7:2c:62:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9
Validity
Not Before: Apr 17 13:01:09 2025 GMT
Not After : Apr 18 13:01:09 2025 GMT
Subject: CN=bac067d972ff7056a7e01280c304f2d215aa1db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:07:b6:61:c3:cf:19:58:b2:ce:77:0f:b6:
c5:f7:d3:c9:25:81:d8:34:68:81:b5:e5:be:58:b6:
4f:53:bf:90:c8:e2:83:d6:3d:55:c3:72:bc:67:2a:
d4:0b:9f:d1:1f:5f:d4:a7:5a:d8:b1:1a:2c:85:a1:
ad:39:47:2c:2a:18:29:cf:9d:59:f8:72:11:d4:67:
03:c3:ad:5e:93:25:a3:55:53:67:3a:63:07:a1:30:
cc:63:bf:9e:82:a1:52:a2:6a:69:d0:b6:b3:2a:21:
9a:f7:4b:97:86:e2:80:7c:e8:cc:e5:27:ca:a3:10:
7f:61:ab:09:ee:8a:db:b2:73:a2:fa:54:8c:8d:36:
90:62:14:b3:58:06:42:df:3a:d7:5e:b6:a1:89:2f:
a4:52:b4:4b:fc:01:f5:33:b6:4b:f4:6f:65:c6:8c:
45:ce:ec:e1:6f:ca:e1:b8:79:25:c3:81:a0:5e:aa:
38:eb:db:f3:b4:a1:fb:af:8a:da:14:e3:c7:10:19:
16:47:4c:53:6c:b4:81:8c:e0:3c:a5:72:d0:34:c8:
3f:94:ea:1f:9b:ba:a7:5a:ae:ac:08:da:c1:ce:a6:
e2:61:68:b7:42:6d:f4:41:da:b3:e5:89:a3:02:da:
7a:d6:2c:0c:2d:62:a6:1a:23:30:68:9c:fd:6f:e2:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C0:67:D9:72:FF:70:56:A7:E0:12:80:C3:04:F2:D2:15:AA:1D:B1
X509v3 Authority Key Identifier:
keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:75:92:c6:06:38:49:10:ef:e2:1e:87:07:82:4d:db:98:b7:
81:73:3a:13:3e:fe:ce:e8:cf:fc:68:0e:96:be:15:e0:4c:cc:
ae:8f:7a:f5:3b:93:cd:58:39:05:fd:4c:52:03:bb:59:4c:b6:
91:dc:48:8a:db:74:da:86:7f:3c:f3:4e:9b:22:7f:83:5e:cd:
3d:cf:6b:2c:f0:13:6c:72:d3:ba:11:ea:a8:ab:fc:6e:fe:b2:
d5:6f:77:a6:c2:06:d0:91:8d:38:61:ed:96:be:7b:13:07:cd:
9c:15:48:73:f1:ea:82:57:fd:74:82:d6:74:ce:43:dd:e3:77:
8d:e2:82:b2:6c:8c:cc:fe:96:32:a2:80:64:79:3e:5c:d7:41:
7b:bf:e5:fc:69:ee:4f:22:d8:81:8e:fa:94:c0:e0:6c:a3:c6:
c0:4c:94:06:2f:e0:33:06:06:44:13:10:2b:06:9f:59:2c:88:
2f:71:7a:6d:ee:f9:56:06:5e:fa:2a:6e:c1:42:cd:6f:f6:48:
d6:76:67:51:46:46:ad:8f:8d:f4:cb:57:c3:35:15:d6:ed:49:
e6:18:f2:47:d8:88:90:08:60:97:83:e4:17:7e:a0:f3:6d:e6:
c8:55:a2:b1:31:93:b5:98:76:20:4e:e4:31:72:53:63:93:b8:
ce:d2:77:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZD1sCdm5ppORrmAGy3LGJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk
ZjI3ZTkwHhcNMjUwNDE3MTMwMTA5WhcNMjUwNDE4MTMwMTA5WjAzMTEwLwYDVQQD
EyhiYWMwNjdkOTcyZmY3MDU2YTdlMDEyODBjMzA0ZjJkMjE1YWExZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny0HtmHDzxlYss53D7bF99PJJYHY
NGiBteW+WLZPU7+QyOKD1j1Vw3K8ZyrUC5/RH1/Up1rYsRoshaGtOUcsKhgpz51Z
+HIR1GcDw61ekyWjVVNnOmMHoTDMY7+egqFSompp0LazKiGa90uXhuKAfOjM5SfK
oxB/YasJ7orbsnOi+lSMjTaQYhSzWAZC3zrXXrahiS+kUrRL/AH1M7ZL9G9lxoxF
zuzhb8rhuHklw4GgXqo469vztKH7r4raFOPHEBkWR0xTbLSBjOA8pXLQNMg/lOof
m7qnWq6sCNrBzqbiYWi3Qm30Qdqz5YmjAtp61iwMLWKmGiMwaJz9b+LxuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrAZ9ly/3BWp+ASgMME8tIVqh2xMB8GA1UdIwQY
MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt
MjNiYTRhOTFhMTA1LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1
LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnWSxgY4
SRDv4h6HB4JN25i3gXM6Ez7+zujP/GgOlr4V4EzMro969TuTzVg5Bf1MUgO7WUy2
kdxIitt02oZ/PPNOmyJ/g17NPc9rLPATbHLTuhHqqKv8bv6y1W93psIG0JGNOGHt
lr57EwfNnBVIc/Hqglf9dILWdM5D3eN3jeKCsmyMzP6WMqKAZHk+XNdBe7/l/Gnu
TyLYgY76lMDgbKPGwEyUBi/gMwYGRBMQKwafWSyIL3F6be75VgZe+ipuwULNb/ZI
1nZnUUZGrY+N9MtXwzUV1u1J5hjyR9iIkAhgl4PkF36g823myFWisTGTtZh2IE7k
MXJTY5O4ztJ3MA==
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:51:49 2025 by rpki-client