Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
File: zzilE7XDd_kf5MeEdLwmobYbSiA.mft (raw, json)
Hash identifier: ga3LoOWAIRmEkLF5HeUHLtYQv8vPHaY1WxJENz9RB2k=
Subject key identifier: BE:D9:C6:DA:76:B9:FF:2C:96:0C:0A:08:5A:85:58:85:9C:DA:43:A1
Authority key identifier: CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
Certificate issuer: /CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Certificate serial: 01963FF9C0DEAB75586F4E3C6D026FA58296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
Manifest number: 1233
Signing time: Wed 16 Apr 2025 19:00:54 +0000
Manifest this update: Wed 16 Apr 2025 19:00:54 +0000
Manifest next update: Thu 17 Apr 2025 19:00:54 +0000
Files and hashes: 1: 1-X_5rBwO6Q0mEqVO-H7YXQRbP88.roa (hash: 8zLMXDHfnNNjoX0VOIs5QNAoq7kKY/ejXy/m4VQalNM=)
2: zzilE7XDd_kf5MeEdLwmobYbSiA.crl (hash: hi3lVDJDitgOdw6ceB/Sso5mNpmPDApXPpsVyOEVzJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:c0:de:ab:75:58:6f:4e:3c:6d:02:6f:a5:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf38a513b5c377f91fe4c78474bc26a1b61b4a20
Validity
Not Before: Apr 16 19:00:54 2025 GMT
Not After : Apr 17 19:00:54 2025 GMT
Subject: CN=bed9c6da76b9ff2c960c0a085a8558859cda43a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:88:5e:cc:7a:bc:78:33:0c:35:e9:32:dd:
73:f3:9e:1e:ad:3b:84:2e:30:58:6f:00:7f:2e:1a:
54:02:e9:da:21:5b:c5:2b:63:b6:4a:45:3f:7e:8b:
d2:6f:68:82:ca:83:4b:cf:56:1d:8c:11:f9:8e:44:
1c:0b:3d:ce:11:63:ab:2a:cf:74:d9:60:f9:fa:09:
22:aa:5a:dd:46:9a:b4:02:d3:2a:32:55:d3:b9:51:
ee:b1:60:60:f0:de:f6:af:ff:17:f3:a7:8e:11:93:
d4:5d:40:aa:56:44:4c:24:d5:bc:36:d7:e0:11:bf:
53:ca:94:bf:37:e9:8e:2d:96:1c:24:f5:a2:fa:19:
1c:fb:92:8a:bd:5b:19:69:d2:88:2b:ff:20:fd:7e:
2b:9c:1d:e1:6c:59:b4:15:8a:12:d6:3e:fd:05:48:
71:f2:19:98:77:30:89:e9:c6:3d:63:23:27:fc:73:
8e:10:63:e2:60:4c:1f:21:33:ce:e3:e6:f4:05:db:
7a:c4:fd:9a:56:53:85:23:af:ad:a5:29:f7:f3:cd:
30:89:36:68:4a:76:23:7e:1e:66:e6:79:b2:94:54:
d9:e6:01:13:16:50:64:67:19:06:ae:31:ac:e3:0a:
cf:6a:a3:2a:9b:88:ba:21:c8:06:3e:65:e9:78:93:
55:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D9:C6:DA:76:B9:FF:2C:96:0C:0A:08:5A:85:58:85:9C:DA:43:A1
X509v3 Authority Key Identifier:
keyid:CF:38:A5:13:B5:C3:77:F9:1F:E4:C7:84:74:BC:26:A1:B6:1B:4A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzilE7XDd_kf5MeEdLwmobYbSiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8cee81-d466-4137-a91b-fec083f63e0e/1/zzilE7XDd_kf5MeEdLwmobYbSiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:e8:65:12:41:61:5d:82:f8:ae:6b:d8:55:13:dd:97:2a:c8:
b6:97:c2:40:82:cd:d9:db:83:cf:56:96:14:e2:a6:0d:39:13:
e8:16:9e:84:67:59:87:6f:85:39:43:be:41:49:9f:a8:08:df:
3f:8a:b9:28:71:a2:03:5d:5c:51:7e:36:b4:4d:61:f2:d6:ab:
3d:c5:f0:65:84:83:14:da:a3:ff:ee:a8:02:aa:34:ef:32:90:
7b:0b:dd:26:10:04:03:70:5c:ea:38:43:e8:6b:79:5c:6b:6d:
f6:8d:b0:23:b5:15:c7:4e:b1:85:96:47:da:1e:1e:4d:e6:8f:
cc:a5:e7:5d:84:f1:09:ce:7a:68:83:7f:c1:e6:07:0e:cd:99:
53:97:ee:cf:59:31:53:59:79:27:7d:1f:96:67:09:8b:aa:e2:
b5:e2:eb:3c:8c:be:e1:8e:90:76:35:99:a9:fe:db:f4:70:31:
c9:0a:a3:e9:e7:62:f0:74:07:8a:4f:b3:91:77:6d:81:f4:1e:
a7:30:0a:13:36:cf:83:34:8f:82:01:e4:b1:08:b7:1e:2f:62:
1e:b0:b1:ec:52:f9:36:6d:5d:08:9c:b7:66:e4:d7:0a:c3:3f:
6c:14:08:23:84:89:db:fc:76:50:a4:18:1d:47:2e:e1:6f:03:
39:08:ae:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY/+cDeq3VYb048bQJvpYKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMzhhNTEzYjVjMzc3ZjkxZmU0Yzc4NDc0YmMyNmExYjYx
YjRhMjAwHhcNMjUwNDE2MTkwMDU0WhcNMjUwNDE3MTkwMDU0WjAzMTEwLwYDVQQD
EyhiZWQ5YzZkYTc2YjlmZjJjOTYwYzBhMDg1YTg1NTg4NTljZGE0M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuuIXsx6vHgzDDXpMt1z854erTuE
LjBYbwB/LhpUAunaIVvFK2O2SkU/fovSb2iCyoNLz1YdjBH5jkQcCz3OEWOrKs90
2WD5+gkiqlrdRpq0AtMqMlXTuVHusWBg8N72r/8X86eOEZPUXUCqVkRMJNW8Ntfg
Eb9TypS/N+mOLZYcJPWi+hkc+5KKvVsZadKIK/8g/X4rnB3hbFm0FYoS1j79BUhx
8hmYdzCJ6cY9YyMn/HOOEGPiYEwfITPO4+b0Bdt6xP2aVlOFI6+tpSn3880wiTZo
SnYjfh5m5nmylFTZ5gETFlBkZxkGrjGs4wrPaqMqm4i6IcgGPmXpeJNVFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7Zxtp2uf8slgwKCFqFWIWc2kOhMB8GA1UdIwQY
MBaAFM84pRO1w3f5H+THhHS8JqG2G0ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWIt
ZmVjMDgzZjYzZTBlLzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84Y2VlODEtZDQ2Ni00MTM3LWE5MWItZmVjMDgzZjYzZTBl
LzEvenppbEU3WERkX2tmNU1lRWRMd21vYlliU2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ehlEkFh
XYL4rmvYVRPdlyrItpfCQILN2duDz1aWFOKmDTkT6BaehGdZh2+FOUO+QUmfqAjf
P4q5KHGiA11cUX42tE1h8tarPcXwZYSDFNqj/+6oAqo07zKQewvdJhAEA3Bc6jhD
6Gt5XGtt9o2wI7UVx06xhZZH2h4eTeaPzKXnXYTxCc56aIN/weYHDs2ZU5fuz1kx
U1l5J30flmcJi6riteLrPIy+4Y6QdjWZqf7b9HAxyQqj6edi8HQHik+zkXdtgfQe
pzAKEzbPgzSPggHksQi3Hi9iHrCx7FL5Nm1dCJy3ZuTXCsM/bBQII4SJ2/x2UKQY
HUcu4W8DOQiuVQ==
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:14:29 2025 by rpki-client