Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
File: ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft (raw, json)
Hash identifier: F0pBKAFU89ivN2bqViQZNVGT7NSsEY2ydVDpZdKH7/w=
Subject key identifier: B7:D7:D0:E3:62:00:FE:91:71:2B:7A:74:43:80:F3:45:06:D3:D7:EC
Authority key identifier: 65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
Certificate issuer: /CN=6516844d245d4124a22a536b046da86332d0b911
Certificate serial: 019644B23CB7E393BC55B706D2AAC506D638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
Manifest number: 0573
Signing time: Thu 17 Apr 2025 17:00:53 +0000
Manifest this update: Thu 17 Apr 2025 17:00:53 +0000
Manifest next update: Fri 18 Apr 2025 17:00:53 +0000
Files and hashes: 1: 59hx8MiVy0L5bbCsrmz6L5yJrmQ.roa (hash: tUrCnGXwIpcsX6KWOsldh7ImOj30jilIGBTNNVRq1UU=)
2: ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl (hash: dn2/eUq7RF73W0mmgLN+iTbC9dWw9Ozs2s6QkAv03KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:3c:b7:e3:93:bc:55:b7:06:d2:aa:c5:06:d6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6516844d245d4124a22a536b046da86332d0b911
Validity
Not Before: Apr 17 17:00:53 2025 GMT
Not After : Apr 18 17:00:53 2025 GMT
Subject: CN=b7d7d0e36200fe91712b7a744380f34506d3d7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:fb:55:b8:1b:80:03:4f:9d:05:f2:49:e5:
83:7f:32:62:7d:b7:92:de:57:02:38:9c:cf:1a:3d:
37:be:27:7e:b0:c4:94:49:25:df:ee:84:06:f8:b3:
14:ec:2a:9d:bb:d6:4b:af:5e:0b:10:c1:09:be:38:
cb:b7:fb:68:cc:b9:50:75:3c:87:5a:f3:9c:37:b8:
c1:db:9b:25:7a:9c:30:82:0d:aa:10:8f:86:f3:92:
ba:8b:8e:fd:01:43:31:c2:ed:a4:31:20:e7:e3:09:
8f:d1:ce:ec:b4:60:46:9a:82:9a:99:3c:44:9a:3b:
d9:58:64:c2:ee:d0:96:0c:8c:46:9a:d9:3b:dd:00:
b7:ef:b8:68:55:01:9b:2f:d6:63:e9:6b:26:91:ee:
10:fe:99:fc:83:51:bb:27:03:89:8f:0a:a5:97:f6:
2a:8b:72:49:67:48:62:7b:2e:b9:60:b6:70:b3:3d:
45:73:30:b0:d3:64:d7:b9:9c:dd:e1:bc:1a:55:6a:
71:26:10:a1:9f:73:34:51:b3:27:83:1c:c9:8c:05:
93:a8:cb:76:c7:6b:cb:85:2e:b7:56:14:a8:14:aa:
59:9b:81:cf:1a:67:fc:97:08:52:7b:f3:ef:f1:1a:
1b:43:68:7b:5d:b4:80:8d:45:a9:79:6b:e4:25:75:
95:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:D0:E3:62:00:FE:91:71:2B:7A:74:43:80:F3:45:06:D3:D7:EC
X509v3 Authority Key Identifier:
keyid:65:16:84:4D:24:5D:41:24:A2:2A:53:6B:04:6D:A8:63:32:D0:B9:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRaETSRdQSSiKlNrBG2oYzLQuRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/493985-c270-429e-91b2-d570483c368b/1/ZRaETSRdQSSiKlNrBG2oYzLQuRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c8:57:85:38:7b:1e:c4:31:c0:f3:b8:96:8d:d1:55:fa:bd:
8c:85:5b:61:7b:13:ac:9d:e2:80:88:c6:a8:7a:b1:8a:20:d3:
0d:7b:33:06:79:3b:7d:8a:6f:37:e1:ba:1a:af:27:00:15:89:
35:f1:64:4d:b2:63:5b:ae:63:ba:4e:a4:6a:5f:b5:c1:60:4a:
e0:81:16:32:e0:fb:07:63:3d:8c:8c:94:9b:a1:5b:06:0b:1d:
6e:1e:f7:0b:5f:4f:e6:54:a5:d9:2d:b1:c4:36:5f:a4:8b:29:
ef:53:f2:10:36:80:f3:38:89:48:8f:3f:09:a9:4d:67:a5:27:
38:f4:5f:c2:f1:8e:1f:59:e8:10:6e:a5:86:d0:0b:99:08:fb:
b6:93:36:9a:b4:74:e8:d1:b0:b2:a5:b9:56:b3:f7:47:59:7f:
15:09:47:77:e6:72:23:a6:b6:9b:a2:9f:7b:e8:3d:05:8b:08:
f6:ba:d3:e8:f2:50:5c:f9:c0:73:ad:03:ff:6e:0a:0c:6d:3a:
7a:5d:ce:76:07:31:27:55:8b:5f:e1:4a:fc:d7:44:ab:2e:ed:
5a:8d:31:6b:d8:d1:45:0c:45:e4:ed:5c:51:0e:b6:b3:c6:a3:
ee:24:cd:cd:3f:ac:8c:26:3b:0f:6d:51:69:3c:9f:ef:59:4a:
96:a5:d6:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsjy345O8VbcG0qrFBtY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MTY4NDRkMjQ1ZDQxMjRhMjJhNTM2YjA0NmRhODYzMzJk
MGI5MTEwHhcNMjUwNDE3MTcwMDUzWhcNMjUwNDE4MTcwMDUzWjAzMTEwLwYDVQQD
EyhiN2Q3ZDBlMzYyMDBmZTkxNzEyYjdhNzQ0MzgwZjM0NTA2ZDNkN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTr7VbgbgANPnQXySeWDfzJifbeS
3lcCOJzPGj03vid+sMSUSSXf7oQG+LMU7Cqdu9ZLr14LEMEJvjjLt/tozLlQdTyH
WvOcN7jB25slepwwgg2qEI+G85K6i479AUMxwu2kMSDn4wmP0c7stGBGmoKamTxE
mjvZWGTC7tCWDIxGmtk73QC377hoVQGbL9Zj6Wsmke4Q/pn8g1G7JwOJjwqll/Yq
i3JJZ0hiey65YLZwsz1FczCw02TXuZzd4bwaVWpxJhChn3M0UbMngxzJjAWTqMt2
x2vLhS63VhSoFKpZm4HPGmf8lwhSe/Pv8RobQ2h7XbSAjUWpeWvkJXWVoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfX0ONiAP6RcSt6dEOA80UG09fsMB8GA1UdIwQY
MBaAFGUWhE0kXUEkoipTawRtqGMy0LkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjIt
ZDU3MDQ4M2MzNjhiLzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80OTM5ODUtYzI3MC00MjllLTkxYjItZDU3MDQ4M2MzNjhi
LzEvWlJhRVRTUmRRU1NpS2xOckJHMm9ZekxRdVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8hXhTh7
HsQxwPO4lo3RVfq9jIVbYXsTrJ3igIjGqHqxiiDTDXszBnk7fYpvN+G6Gq8nABWJ
NfFkTbJjW65juk6kal+1wWBK4IEWMuD7B2M9jIyUm6FbBgsdbh73C19P5lSl2S2x
xDZfpIsp71PyEDaA8ziJSI8/CalNZ6UnOPRfwvGOH1noEG6lhtALmQj7tpM2mrR0
6NGwsqW5VrP3R1l/FQlHd+ZyI6a2m6Kfe+g9BYsI9rrT6PJQXPnAc60D/24KDG06
el3OdgcxJ1WLX+FK/NdEqy7tWo0xa9jRRQxF5O1cUQ62s8aj7iTNzT+sjCY7D21R
aTyf71lKlqXWqQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 20:16:50 2025 by rpki-client