Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json)
Hash identifier: T0tb3+ZC85vTy4/luSLcvIZLTa5gylWTjueIIw8XeuA=
Subject key identifier: 88:C2:C1:91:16:61:12:09:14:47:CF:DC:71:EF:4D:EF:8F:61:49:54
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 019511D9B967E7D86AD7087CC9253241B7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
Manifest number: 145A
Signing time: Mon 17 Feb 2025 03:00:36 +0000
Manifest this update: Mon 17 Feb 2025 03:00:36 +0000
Manifest next update: Tue 18 Feb 2025 03:00:36 +0000
Files and hashes: 1: Wkz81xMUDLClFehnNcO08jklh9k.roa (hash: BKlpXBQEP/op0lp2TcMqqMdmqdUhy61w00wNP+uB+Zw=)
2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: OLK0NelcEmTCax2qS+o5TnrQNmkIOw/q9MxcDd0TYiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:b9:67:e7:d8:6a:d7:08:7c:c9:25:32:41:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Feb 17 03:00:36 2025 GMT
Not After : Feb 18 03:00:36 2025 GMT
Subject: CN=88c2c191166112091447cfdc71ef4def8f614954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:9d:bd:2f:51:bf:5a:34:81:44:c0:e1:50:
f5:3f:73:62:ea:0b:c7:66:b2:ee:5c:35:73:6c:46:
c2:d4:c7:83:82:0b:0a:db:e1:db:d2:1b:c5:ba:b8:
43:83:f5:70:0c:1d:ee:e2:fa:0e:76:25:5e:88:0d:
39:02:6d:4d:92:5f:4a:e5:88:3b:e6:f3:09:d8:70:
3f:6b:c1:9d:67:43:44:1a:48:66:17:77:a2:21:0f:
d2:c8:55:75:62:2a:6f:b5:f1:0a:8d:eb:40:3b:73:
78:e0:eb:e1:1c:91:a7:69:5c:b9:ff:b2:9c:bb:57:
ea:f3:6e:bd:c5:51:3b:70:8e:d6:fa:23:b3:60:57:
ae:d3:c6:70:41:08:72:84:ba:03:f0:1e:13:95:04:
07:c4:88:8d:67:59:d2:38:ef:3a:80:23:fe:0a:0b:
70:fd:32:fe:81:65:bb:f1:03:fa:7d:65:87:47:62:
a4:7b:48:b4:32:8f:53:26:08:d0:11:a4:c7:00:d8:
08:4c:32:60:ae:ec:1e:4f:c1:f1:28:6d:c6:41:48:
69:21:e9:2f:2b:b4:1a:ee:09:ef:32:64:ba:ac:26:
b3:b7:1b:67:fc:f3:bb:2e:0e:7c:8e:05:d7:ea:f5:
25:b9:6f:bc:06:88:78:43:23:b8:3a:70:69:f3:a6:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C2:C1:91:16:61:12:09:14:47:CF:DC:71:EF:4D:EF:8F:61:49:54
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:28:ef:64:16:58:fe:8a:c8:e1:30:a8:8d:36:f6:62:4d:51:
78:c2:a2:61:bc:2c:34:66:19:ed:90:cb:10:60:91:69:09:a1:
cc:51:d3:59:e1:13:d3:d7:12:33:36:f0:a7:61:a5:c0:67:ee:
e1:d7:b1:f3:2a:c3:9d:79:6f:c4:7f:a9:09:22:16:7d:99:ba:
f0:3d:14:07:33:02:d0:c0:f9:0e:1d:fa:4f:a7:88:30:d2:98:
31:41:29:7e:b7:4e:1c:cb:43:d5:19:31:e0:8e:2f:d2:11:c4:
c7:a6:da:11:4c:4d:4f:a8:96:18:dd:18:35:25:ca:24:c1:2d:
91:a5:51:c6:55:7e:b3:66:fe:bf:83:6d:e8:93:21:46:2b:34:
af:e3:f2:3b:97:49:7f:65:10:40:8d:ca:74:42:81:8c:a7:b4:
f3:87:c7:92:7d:f8:51:b5:9a:6a:01:f0:4a:ff:ba:da:8f:d4:
10:fe:20:0a:86:19:19:f3:d2:67:24:33:0b:ca:26:11:b6:59:
02:71:f0:07:74:e8:3c:66:4c:50:39:fb:52:08:58:95:2c:00:
d2:ff:e0:a4:42:20:02:97:7d:cd:c1:68:7b:bd:a5:b7:a1:30:
69:75:ac:5f:2e:21:26:19:07:ad:6e:4c:f3:78:74:47:36:54:
db:9a:5f:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2bln59hq1wh8ySUyQbelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMGNjN2ZkODg5OGIwZjdkZjRiOWRmMGI5OTMxOWJjYjI5
ZWMyNDMwHhcNMjUwMjE3MDMwMDM2WhcNMjUwMjE4MDMwMDM2WjAzMTEwLwYDVQQD
Eyg4OGMyYzE5MTE2NjExMjA5MTQ0N2NmZGM3MWVmNGRlZjhmNjE0OTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhidvS9Rv1o0gUTA4VD1P3Ni6gvH
ZrLuXDVzbEbC1MeDggsK2+Hb0hvFurhDg/VwDB3u4voOdiVeiA05Am1Nkl9K5Yg7
5vMJ2HA/a8GdZ0NEGkhmF3eiIQ/SyFV1YipvtfEKjetAO3N44OvhHJGnaVy5/7Kc
u1fq8269xVE7cI7W+iOzYFeu08ZwQQhyhLoD8B4TlQQHxIiNZ1nSOO86gCP+Cgtw
/TL+gWW78QP6fWWHR2Kke0i0Mo9TJgjQEaTHANgITDJgruweT8HxKG3GQUhpIekv
K7Qa7gnvMmS6rCaztxtn/PO7Lg58jgXX6vUluW+8Boh4QyO4OnBp86YuGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjCwZEWYRIJFEfP3HHvTe+PYUlUMB8GA1UdIwQY
MBaAFM0Mx/2ImLD330ud8LmTGbyynsJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEt
YWIwNjM5MzhmMWNlLzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEtYWIwNjM5MzhmMWNl
LzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCjvZBZY
/orI4TCojTb2Yk1ReMKiYbwsNGYZ7ZDLEGCRaQmhzFHTWeET09cSMzbwp2GlwGfu
4dex8yrDnXlvxH+pCSIWfZm68D0UBzMC0MD5Dh36T6eIMNKYMUEpfrdOHMtD1Rkx
4I4v0hHEx6baEUxNT6iWGN0YNSXKJMEtkaVRxlV+s2b+v4Nt6JMhRis0r+PyO5dJ
f2UQQI3KdEKBjKe084fHkn34UbWaagHwSv+62o/UEP4gCoYZGfPSZyQzC8omEbZZ
AnHwB3ToPGZMUDn7UghYlSwA0v/gpEIgApd9zcFoe72lt6EwaXWsXy4hJhkHrW5M
83h0RzZU25pfmA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:13 2025 by rpki-client