Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
File: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft (raw, json)
Hash identifier: sY9/HrvBX9c9oQlHvBfNm8Uualx8svpa9nR5rvKTGNk=
Subject key identifier: FD:0F:66:F1:49:98:6A:D5:D1:BE:13:92:AD:8C:1E:6B:A5:5F:C7:10
Authority key identifier: 66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
Certificate issuer: /CN=66953361ff6c0083fd93d52865033319863fbc46
Certificate serial: 019652371BC731712B093BAF0B1DBF386774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
Manifest number: 073D
Signing time: Sun 20 Apr 2025 08:01:05 +0000
Manifest this update: Sun 20 Apr 2025 08:01:05 +0000
Manifest next update: Mon 21 Apr 2025 08:01:05 +0000
Files and hashes: 1: ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl (hash: hHX/UqrB6ZCzqsVBBUAcK0cD7Q184Yo2mlNZqxb+CN4=)
2: x7YKpAfSkOct6Fg0XF9orQA6c8g.roa (hash: TXWS81jR34NiA/SsVNyLTEvMyxNkcObY8WiOh+sls1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:37:1b:c7:31:71:2b:09:3b:af:0b:1d:bf:38:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66953361ff6c0083fd93d52865033319863fbc46
Validity
Not Before: Apr 20 08:01:05 2025 GMT
Not After : Apr 21 08:01:05 2025 GMT
Subject: CN=fd0f66f149986ad5d1be1392ad8c1e6ba55fc710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:e8:0f:4e:ab:27:bf:b3:18:c3:3d:e1:8e:
60:55:c3:ad:2f:61:8f:54:b9:0b:4d:06:c0:07:77:
c8:2b:3d:65:03:8f:42:7d:31:5b:c9:e6:3f:7d:0e:
9c:73:b8:9b:75:28:78:85:1b:62:db:c1:3e:db:fa:
51:2d:60:9f:c6:6a:93:fd:16:06:1b:f9:0c:f6:18:
9e:14:88:28:64:53:82:23:a3:1a:0a:c6:5f:0c:a1:
43:a8:0a:f2:b3:ff:da:59:b7:9a:b2:c0:f9:0d:36:
f5:5d:e1:fc:29:89:92:6f:35:94:1c:22:28:e1:f5:
af:95:6c:89:4e:be:20:02:44:c8:2a:5b:d1:53:b8:
1b:86:06:a7:c6:e2:bf:b0:55:73:18:77:a7:3f:91:
ee:04:24:59:ad:b0:39:65:c7:72:a6:96:a8:d0:92:
72:6a:27:aa:45:d4:3e:c2:e5:63:e3:0f:25:27:ea:
de:2a:ef:43:69:5f:8a:ef:ad:79:de:8a:62:76:23:
0e:29:09:fd:5c:6c:85:94:f4:f8:1b:c4:cf:dc:f4:
ca:63:45:71:4b:32:72:c5:df:5f:af:7d:8c:75:3e:
ff:25:aa:8c:e7:8c:37:e3:c1:08:b6:3e:f9:4b:4c:
3a:24:95:0e:b9:b0:41:69:b4:84:bd:09:a9:29:3d:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0F:66:F1:49:98:6A:D5:D1:BE:13:92:AD:8C:1E:6B:A5:5F:C7:10
X509v3 Authority Key Identifier:
keyid:66:95:33:61:FF:6C:00:83:FD:93:D5:28:65:03:33:19:86:3F:BC:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/013526-7710-4bb0-b514-fbb7d30dce38/1/ZpUzYf9sAIP9k9UoZQMzGYY_vEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:14:ca:56:50:cf:89:03:3b:ab:db:db:d4:d2:ac:66:57:bd:
8a:f2:45:09:2b:a2:23:af:48:52:1f:99:77:59:cb:a5:60:42:
d5:e2:16:54:6d:59:43:8e:9f:0c:4c:85:66:34:2d:b4:1d:b9:
d9:d6:1c:06:46:69:3e:b4:64:39:d3:ae:58:60:0d:f6:29:41:
7a:3f:22:c9:44:bb:ea:28:ce:b0:a2:ec:c5:f5:a5:e0:20:20:
2e:5f:ab:cc:ea:98:ff:e0:4e:8c:ad:af:c9:e8:2f:cc:ca:6f:
09:c3:f6:3a:e9:54:34:fc:81:df:99:7b:f6:65:ba:57:dc:97:
97:b8:d9:f9:89:13:ae:14:01:23:4c:42:36:b6:d0:2b:0b:f6:
b9:01:34:da:54:98:23:c6:4a:db:b9:9b:4a:1d:22:0b:ca:0b:
24:5e:72:61:06:a1:26:b2:80:11:c7:e4:cb:ca:de:69:21:4c:
c8:26:25:13:e8:45:b8:50:08:0c:6a:f8:84:c3:c8:b1:a6:9a:
81:a9:e1:9d:47:f0:cf:ce:c7:b0:cf:f2:de:73:d1:6b:42:ff:
c0:c3:7b:4c:45:98:84:9d:01:fe:3a:c5:1d:24:a6:d7:7c:85:
80:b1:5a:68:b4:d0:b1:dc:97:7e:af:3b:eb:bb:5b:c6:90:74:
20:e4:a3:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSNxvHMXErCTuvCx2/OGd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTUzMzYxZmY2YzAwODNmZDkzZDUyODY1MDMzMzE5ODYz
ZmJjNDYwHhcNMjUwNDIwMDgwMTA1WhcNMjUwNDIxMDgwMTA1WjAzMTEwLwYDVQQD
EyhmZDBmNjZmMTQ5OTg2YWQ1ZDFiZTEzOTJhZDhjMWU2YmE1NWZjNzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgHoD06rJ7+zGMM94Y5gVcOtL2GP
VLkLTQbAB3fIKz1lA49CfTFbyeY/fQ6cc7ibdSh4hRti28E+2/pRLWCfxmqT/RYG
G/kM9hieFIgoZFOCI6MaCsZfDKFDqArys//aWbeassD5DTb1XeH8KYmSbzWUHCIo
4fWvlWyJTr4gAkTIKlvRU7gbhganxuK/sFVzGHenP5HuBCRZrbA5Zcdyppao0JJy
aieqRdQ+wuVj4w8lJ+reKu9DaV+K76153opidiMOKQn9XGyFlPT4G8TP3PTKY0Vx
SzJyxd9fr32MdT7/JaqM54w348EItj75S0w6JJUOubBBabSEvQmpKT34/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0PZvFJmGrV0b4Tkq2MHmulX8cQMB8GA1UdIwQY
MBaAFGaVM2H/bACD/ZPVKGUDMxmGP7xGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQt
ZmJiN2QzMGRjZTM4LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wMTM1MjYtNzcxMC00YmIwLWI1MTQtZmJiN2QzMGRjZTM4
LzEvWnBVellmOXNBSVA5azlVb1pRTXpHWVlfdkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhTKVlDP
iQM7q9vb1NKsZle9ivJFCSuiI69IUh+Zd1nLpWBC1eIWVG1ZQ46fDEyFZjQttB25
2dYcBkZpPrRkOdOuWGAN9ilBej8iyUS76ijOsKLsxfWl4CAgLl+rzOqY/+BOjK2v
yegvzMpvCcP2OulUNPyB35l79mW6V9yXl7jZ+YkTrhQBI0xCNrbQKwv2uQE02lSY
I8ZK27mbSh0iC8oLJF5yYQahJrKAEcfky8reaSFMyCYlE+hFuFAIDGr4hMPIsaaa
ganhnUfwz87HsM/y3nPRa0L/wMN7TEWYhJ0B/jrFHSSm13yFgLFaaLTQsdyXfq87
67tbxpB0IOSjOA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:17 2025 by rpki-client