Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
File: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft (raw, json)
Hash identifier: QrwCqKsYJJUh0XVOsPr+Qc7gHMrCRdogZ0yaYG093Pc=
Subject key identifier: 9B:04:3B:77:29:BC:68:BB:39:7F:8E:8B:27:0F:BC:16:A1:DB:EF:F4
Authority key identifier: 67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
Certificate issuer: /CN=67b3b58b452239001eac2e221ba56c3afed7a790
Certificate serial: 0196501189DE5A95144ECDB8CF26AF57A1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
Manifest number: 0BF1
Signing time: Sat 19 Apr 2025 22:00:48 +0000
Manifest this update: Sat 19 Apr 2025 22:00:48 +0000
Manifest next update: Sun 20 Apr 2025 22:00:48 +0000
Files and hashes: 1: AXUdeaKjWR6aO2hmOp1QpAZAT1I.roa (hash: jHy+WZea/KY2LIPLNfFyrSljh52WzofvhmuIGDrREzM=)
2: YLIoRJYq6MERaFZ7IGLqUkZ2WNA.roa (hash: FDzee6XqGxeVxnvKkrH/BVWvy6+j3Z62PPnSpcuiI80=)
3: Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl (hash: kj9MhJge8Kw3vB/sCaYDJyPhC8YKgm3BNATE7EhNaII=)
4: zx2sQUv3rsJGXAZABCst4_xZkOQ.roa (hash: FBqifBeUX2hPnOiisT6KsJiWdU/gan88BUTxXJkwpMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:89:de:5a:95:14:4e:cd:b8:cf:26:af:57:a1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b3b58b452239001eac2e221ba56c3afed7a790
Validity
Not Before: Apr 19 22:00:48 2025 GMT
Not After : Apr 20 22:00:48 2025 GMT
Subject: CN=9b043b7729bc68bb397f8e8b270fbc16a1dbeff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:28:96:71:1c:5a:6b:71:df:9c:b4:16:51:
1c:f7:45:58:cd:db:e8:7e:95:ff:81:c5:ed:0d:63:
d9:bf:06:3c:f1:20:3a:3b:de:f2:0c:1a:70:9c:e6:
c4:1b:68:45:10:08:95:b7:5b:64:2e:64:1c:54:6d:
3f:17:03:f1:4a:27:78:8a:bc:4c:79:05:cd:77:35:
ea:ae:73:e1:2b:75:34:2b:16:04:36:d9:5f:e6:37:
ae:18:2f:59:f6:77:92:cc:9c:86:96:29:12:d0:6b:
02:ac:17:dc:03:04:de:83:f7:6a:95:5d:bd:a9:e1:
3c:77:eb:7f:44:f3:8c:d0:3c:02:d9:6f:86:ed:da:
79:6c:e1:38:8b:af:04:70:58:35:1f:74:38:31:f0:
cc:5d:d8:d2:b3:91:ee:95:ad:32:38:5d:45:2b:5a:
2b:75:7b:8f:0c:14:44:b9:27:48:f5:8e:0e:0f:b4:
83:d3:ee:29:c4:a4:c9:db:54:13:b4:f5:c4:15:0b:
3d:87:dd:f5:83:da:b5:98:03:af:aa:03:89:70:d8:
3a:56:a7:8b:2e:a5:62:06:7d:dd:a1:18:5d:80:51:
5b:fb:b8:ee:c7:b1:31:65:4e:95:78:7d:f6:58:68:
af:b3:89:f1:ea:e7:96:0a:d8:8d:50:70:9f:27:e4:
da:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:04:3B:77:29:BC:68:BB:39:7F:8E:8B:27:0F:BC:16:A1:DB:EF:F4
X509v3 Authority Key Identifier:
keyid:67:B3:B5:8B:45:22:39:00:1E:AC:2E:22:1B:A5:6C:3A:FE:D7:A7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/73e504-b7bb-4ff8-bad8-b79552e700c5/1/Z7O1i0UiOQAerC4iG6VsOv7Xp5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:56:82:ed:bf:c4:4c:28:fb:15:40:43:85:60:3a:5f:f9:0c:
bc:eb:6f:db:35:1e:ef:f0:de:e7:c8:25:09:8b:cb:20:73:2e:
54:c9:2a:13:91:f6:8f:29:10:ba:9d:9b:b1:e4:9b:93:82:dc:
5c:b6:68:b7:b0:48:b7:a0:9d:d8:da:20:ae:9f:a7:12:ab:2f:
f7:cc:17:db:13:27:b3:58:dc:46:ce:05:13:b1:66:fa:a9:76:
4d:3e:9d:27:a9:18:46:07:83:24:d6:5e:56:47:2b:8e:eb:6a:
43:46:b0:12:1c:8f:5d:bd:dc:58:75:12:b8:1e:bd:4f:1b:bf:
e0:22:65:1c:4b:84:99:d6:06:e9:a5:d0:96:09:4c:dd:72:4e:
5f:42:c1:f9:65:40:10:df:6e:d5:71:78:20:8b:81:50:1a:12:
3c:8a:88:6c:65:82:ef:57:dd:aa:a1:00:a6:bd:ed:a5:87:1a:
fd:b2:98:8c:13:f0:61:0e:59:a8:18:06:7b:b1:a1:fd:de:33:
18:ed:99:05:6e:aa:0a:5b:09:74:bd:09:c6:e4:76:5b:ba:4b:
cd:13:42:c2:d5:47:a9:59:48:05:7d:fb:1e:1b:d1:4e:04:25:
d7:2c:8e:1b:4e:9e:bc:c6:05:7b:d8:7b:67:a2:99:ed:3c:95:
a7:7d:47:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQEYneWpUUTs24zyavV6H9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjNiNThiNDUyMjM5MDAxZWFjMmUyMjFiYTU2YzNhZmVk
N2E3OTAwHhcNMjUwNDE5MjIwMDQ4WhcNMjUwNDIwMjIwMDQ4WjAzMTEwLwYDVQQD
Eyg5YjA0M2I3NzI5YmM2OGJiMzk3ZjhlOGIyNzBmYmMxNmExZGJlZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdgolnEcWmtx35y0FlEc90VYzdvo
fpX/gcXtDWPZvwY88SA6O97yDBpwnObEG2hFEAiVt1tkLmQcVG0/FwPxSid4irxM
eQXNdzXqrnPhK3U0KxYENtlf5jeuGC9Z9neSzJyGlikS0GsCrBfcAwTeg/dqlV29
qeE8d+t/RPOM0DwC2W+G7dp5bOE4i68EcFg1H3Q4MfDMXdjSs5Hula0yOF1FK1or
dXuPDBREuSdI9Y4OD7SD0+4pxKTJ21QTtPXEFQs9h931g9q1mAOvqgOJcNg6VqeL
LqViBn3doRhdgFFb+7jux7ExZU6VeH32WGivs4nx6ueWCtiNUHCfJ+TatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsEO3cpvGi7OX+OiycPvBah2+/0MB8GA1UdIwQY
MBaAFGeztYtFIjkAHqwuIhulbDr+16eQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgt
Yjc5NTUyZTcwMGM1LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83M2U1MDQtYjdiYi00ZmY4LWJhZDgtYjc5NTUyZTcwMGM1
LzEvWjdPMWkwVWlPUUFlckM0aUc2VnNPdjdYcDVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflaC7b/E
TCj7FUBDhWA6X/kMvOtv2zUe7/De58glCYvLIHMuVMkqE5H2jykQup2bseSbk4Lc
XLZot7BIt6Cd2Nogrp+nEqsv98wX2xMns1jcRs4FE7Fm+ql2TT6dJ6kYRgeDJNZe
VkcrjutqQ0awEhyPXb3cWHUSuB69Txu/4CJlHEuEmdYG6aXQlglM3XJOX0LB+WVA
EN9u1XF4IIuBUBoSPIqIbGWC71fdqqEApr3tpYca/bKYjBPwYQ5ZqBgGe7Gh/d4z
GO2ZBW6qClsJdL0JxuR2W7pLzRNCwtVHqVlIBX37HhvRTgQl1yyOG06evMYFe9h7
Z6KZ7TyVp31Hcg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:02 2025 by rpki-client