Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
File: zvhOR0nMzVg_78d5fD1nsQiYoYg.mft (raw, json)
Hash identifier: qRZ74LhVwIYnhJg3m7kLrjKaabFZrfITSt0Fws3BHXk=
Subject key identifier: AB:5B:66:D7:89:D8:2C:BA:C9:77:08:A9:6F:8D:51:A7:B1:92:1A:9B
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 01965492F96081E260B480D3B865E02046B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
Manifest number: 0F66
Signing time: Sun 20 Apr 2025 19:00:40 +0000
Manifest this update: Sun 20 Apr 2025 19:00:40 +0000
Manifest next update: Mon 21 Apr 2025 19:00:40 +0000
Files and hashes: 1: f5XMhdDv4boUrAlP04hly_uT_DY.roa (hash: eL7YWqbohX8ob6HoNr2HS/CxgsCuHhS0bMMR1aWHqbs=)
2: zvhOR0nMzVg_78d5fD1nsQiYoYg.crl (hash: 8tAzs99veI0ns15DAGGpOX2gQSS5ikS4i50XN4MDI1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:f9:60:81:e2:60:b4:80:d3:b8:65:e0:20:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Apr 20 19:00:40 2025 GMT
Not After : Apr 21 19:00:40 2025 GMT
Subject: CN=ab5b66d789d82cbac97708a96f8d51a7b1921a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:31:9e:9e:9e:5a:56:79:fa:22:41:cd:98:95:
23:b4:4d:2f:27:78:9b:e4:b7:d3:d5:7c:24:95:e2:
ce:57:a5:c4:69:6d:fa:a6:3c:a7:81:13:59:d4:1d:
d1:4b:06:ce:f4:8b:8c:bb:70:d3:de:ea:b6:38:8c:
00:80:82:48:49:73:6e:82:37:e7:91:04:3b:29:bf:
36:19:4a:20:b7:e6:63:d7:e8:29:48:dd:fc:d0:d9:
1b:14:11:c6:bd:34:39:01:81:25:1e:a4:30:51:e7:
a8:1b:ec:15:8b:0d:8a:f7:f6:90:74:8d:72:9d:0c:
36:33:27:d9:43:c8:fc:43:ec:42:46:5c:df:25:f1:
1a:75:b4:6a:ef:08:7f:d7:74:99:5e:46:64:bc:26:
34:d2:37:ef:a7:0a:7b:e4:94:d1:e7:8f:c0:81:c3:
04:2e:e4:47:53:f4:b9:d3:a6:fe:ba:17:4f:9e:dc:
4f:21:54:10:22:2a:13:6c:eb:60:db:cc:29:71:53:
3f:e3:f0:3a:3b:8f:c4:8c:99:54:c7:81:44:a2:67:
c7:b9:07:d7:85:2e:6a:f5:4a:28:08:70:fa:cf:4d:
d4:a1:bf:f4:ba:be:e2:2e:4b:69:44:45:51:f0:7e:
51:15:f4:e4:6c:38:2d:ea:5a:19:5d:60:64:6d:c8:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:66:D7:89:D8:2C:BA:C9:77:08:A9:6F:8D:51:A7:B1:92:1A:9B
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:c3:19:0f:be:b8:8d:93:6b:58:b6:b4:09:59:3f:00:08:
b4:f0:cc:e1:ae:f2:6e:f0:db:3a:66:c2:6b:f0:dd:05:bc:7d:
79:b8:09:4d:89:67:6c:5f:4b:63:df:c1:61:d4:82:9c:b5:ee:
89:9f:d4:2c:bd:ce:db:6c:fd:9f:66:6a:cd:de:c7:48:e1:3f:
1e:82:57:00:d9:32:a0:bf:79:af:5a:83:69:76:c2:1a:97:b9:
67:92:a3:69:c1:ab:b2:63:e0:2a:f7:45:c2:13:21:52:31:42:
a8:9e:48:33:a5:40:6f:ca:ad:b0:55:d7:06:57:f4:41:c8:a6:
e6:d8:52:9f:df:96:37:7c:6d:2c:c5:66:28:78:e3:a9:84:0b:
95:e1:11:6e:ed:e2:0a:94:a6:86:f6:de:5f:cb:ec:aa:ac:f5:
50:c4:b6:b4:0f:d1:54:35:34:2e:e7:cc:f8:19:ba:30:aa:b9:
95:56:ed:2d:6e:71:19:5c:16:7a:18:60:d6:74:c2:8f:3a:fd:
a0:63:f8:26:59:32:b8:dc:72:14:a5:f6:e8:0c:10:b2:8a:f2:
3e:7c:bd:28:03:7b:d6:45:cd:d7:7f:33:8c:01:ee:a7:e1:22:
e1:1a:c0:41:dd:1d:70:d6:ba:e6:14:ab:45:0a:e8:96:2c:e6:
39:40:57:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkvlggeJgtIDTuGXgIEa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZjg0ZTQ3NDljY2NkNTgzZmVmYzc3OTdjM2Q2N2IxMDg5
OGExODgwHhcNMjUwNDIwMTkwMDQwWhcNMjUwNDIxMTkwMDQwWjAzMTEwLwYDVQQD
EyhhYjViNjZkNzg5ZDgyY2JhYzk3NzA4YTk2ZjhkNTFhN2IxOTIxYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzGenp5aVnn6IkHNmJUjtE0vJ3ib
5LfT1XwkleLOV6XEaW36pjyngRNZ1B3RSwbO9IuMu3DT3uq2OIwAgIJISXNugjfn
kQQ7Kb82GUogt+Zj1+gpSN380NkbFBHGvTQ5AYElHqQwUeeoG+wViw2K9/aQdI1y
nQw2MyfZQ8j8Q+xCRlzfJfEadbRq7wh/13SZXkZkvCY00jfvpwp75JTR54/AgcME
LuRHU/S506b+uhdPntxPIVQQIioTbOtg28wpcVM/4/A6O4/EjJlUx4FEomfHuQfX
hS5q9UooCHD6z03Uob/0ur7iLktpREVR8H5RFfTkbDgt6loZXWBkbcgjEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtbZteJ2Cy6yXcIqW+NUaexkhqbMB8GA1UdIwQY
MBaAFM74TkdJzM1YP+/HeXw9Z7EImKGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2Qt
ZGFiNmUyYzVmZGQ5LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8xNmFmZTUtYTQ0My00MjM3LWFkN2QtZGFiNmUyYzVmZGQ5
LzEvenZoT1Iwbk16VmdfNzhkNWZEMW5zUWlZb1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHDDGQ++
uI2Ta1i2tAlZPwAItPDM4a7ybvDbOmbCa/DdBbx9ebgJTYlnbF9LY9/BYdSCnLXu
iZ/ULL3O22z9n2Zqzd7HSOE/HoJXANkyoL95r1qDaXbCGpe5Z5KjacGrsmPgKvdF
whMhUjFCqJ5IM6VAb8qtsFXXBlf0Qcim5thSn9+WN3xtLMVmKHjjqYQLleERbu3i
CpSmhvbeX8vsqqz1UMS2tA/RVDU0LufM+Bm6MKq5lVbtLW5xGVwWehhg1nTCjzr9
oGP4JlkyuNxyFKX26AwQsoryPny9KAN71kXN138zjAHup+Ei4RrAQd0dcNa65hSr
RQrolizmOUBXEg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:26 2025 by rpki-client