Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
File: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft (raw, json)
Hash identifier: NwHbI/z9c6aHQ6+hwwa8QHqFhoNJ8dSOdcRwk4LMxyg=
Subject key identifier: A9:93:62:88:B1:13:FC:6B:75:91:2F:02:40:E7:79:25:13:88:F6:FB
Authority key identifier: CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
Certificate issuer: /CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Certificate serial: 01964DEBB7A34EB2D596E02B260A411230E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
Manifest number: 0F6A
Signing time: Sat 19 Apr 2025 12:00:15 +0000
Manifest this update: Sat 19 Apr 2025 12:00:15 +0000
Manifest next update: Sun 20 Apr 2025 12:00:15 +0000
Files and hashes: 1: 5v6A4UTaVNnG76X4ZwGMDnQzyLI.roa (hash: 5R/djtYEZfTdmNEidh6IhadbWNbc/9kAqtQiTmQynIQ=)
2: z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl (hash: TqTgbPDmWhd6Wq4r2u/wCDyUJ8dfVyk68KJNnBpi7Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:b7:a3:4e:b2:d5:96:e0:2b:26:0a:41:12:30:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf70f3d1118361b59f3315f591643e1dabbb2008
Validity
Not Before: Apr 19 12:00:15 2025 GMT
Not After : Apr 20 12:00:15 2025 GMT
Subject: CN=a9936288b113fc6b75912f0240e779251388f6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:89:9b:1f:f8:61:b7:66:05:fe:33:f1:53:
73:e6:88:8f:1e:28:81:1f:1d:49:2f:e7:08:05:8b:
90:51:10:57:5f:3b:a9:dc:f6:2b:5b:35:72:a2:a0:
1a:81:82:f1:0b:6e:f9:d2:15:48:8f:c6:0f:07:c7:
c8:76:ee:d5:a1:bc:16:e0:4f:3b:9b:9e:1f:88:51:
5b:1c:0b:a2:9e:42:62:a2:88:a8:32:50:76:9e:6b:
5e:fb:83:f4:3d:54:78:05:f3:bb:5c:2a:0a:fa:53:
04:7b:6d:9c:fc:93:f6:cd:40:f5:53:a7:0c:02:f5:
82:91:4c:04:7f:cd:58:5c:7c:63:8b:72:0e:84:26:
0c:dc:c3:44:6c:f6:36:2b:9e:5a:a2:ab:8b:20:3f:
93:40:81:56:19:1d:0f:8f:23:61:bb:03:5d:c7:86:
63:2b:c4:e6:b8:6b:56:12:75:f2:a3:0b:d2:0b:2f:
62:01:7a:de:e0:be:08:a6:ce:8e:44:a6:6e:e2:b8:
28:a7:3a:ec:21:23:34:be:b6:ce:1b:0a:80:8f:e8:
05:39:6f:04:db:ef:fe:4c:1b:3d:55:6b:d9:08:be:
f5:1c:be:1d:a9:7e:73:00:e4:fc:6b:cf:7f:2d:42:
e1:5f:f8:f6:a7:7e:e7:be:61:1c:f0:38:2e:a2:e9:
97:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:93:62:88:B1:13:FC:6B:75:91:2F:02:40:E7:79:25:13:88:F6:FB
X509v3 Authority Key Identifier:
keyid:CF:70:F3:D1:11:83:61:B5:9F:33:15:F5:91:64:3E:1D:AB:BB:20:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9260d5-f97d-4168-b22a-fbb9f91c8cce/1/z3Dz0RGDYbWfMxX1kWQ-Hau7IAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:65:84:0c:af:46:05:e9:bd:c0:00:78:06:e3:79:50:32:
3e:9a:bc:a9:e0:f6:c3:da:9e:32:b5:d1:94:75:d3:2f:19:0b:
04:56:1c:38:e7:c7:9a:ea:9a:31:95:7e:c9:0f:19:47:a5:d1:
11:c9:73:ce:58:de:a5:47:5f:47:d8:56:0d:46:c6:8e:1d:cf:
3a:cd:81:50:67:c6:e7:b2:c4:ac:e7:ff:20:85:98:f3:cb:d0:
8a:1f:7b:4f:a3:cf:42:39:39:94:9d:0e:ea:74:f4:81:00:b1:
b4:f9:60:4a:4e:95:19:8e:ed:a4:dc:d7:00:75:ad:97:8c:92:
1a:12:91:4b:37:a6:cb:e1:2f:0b:86:60:a0:75:a3:b9:b5:b6:
45:0a:b0:99:fc:ba:8d:fd:7b:09:f9:5e:aa:b6:97:6e:59:5d:
e6:85:f3:61:42:4f:3b:ac:40:82:ab:ee:2d:14:ef:bd:84:99:
2e:3f:64:bf:d2:4b:f5:a1:c6:d9:d6:22:b5:4c:f8:a8:45:09:
44:85:c5:c2:7b:8a:56:d8:e8:69:78:05:a8:ce:0d:02:ce:b9:
bc:7d:72:4b:18:10:b1:97:0a:f0:7f:31:99:6b:99:da:a5:ce:
ca:48:31:fa:9a:1f:c7:39:1e:6a:69:79:de:2a:6f:08:9d:20:
b9:4a:7b:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZN67ejTrLVluArJgpBEjDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNzBmM2QxMTE4MzYxYjU5ZjMzMTVmNTkxNjQzZTFkYWJi
YjIwMDgwHhcNMjUwNDE5MTIwMDE1WhcNMjUwNDIwMTIwMDE1WjAzMTEwLwYDVQQD
EyhhOTkzNjI4OGIxMTNmYzZiNzU5MTJmMDI0MGU3NzkyNTEzODhmNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugKJmx/4YbdmBf4z8VNz5oiPHiiB
Hx1JL+cIBYuQURBXXzup3PYrWzVyoqAagYLxC2750hVIj8YPB8fIdu7VobwW4E87
m54fiFFbHAuinkJiooioMlB2nmte+4P0PVR4BfO7XCoK+lMEe22c/JP2zUD1U6cM
AvWCkUwEf81YXHxji3IOhCYM3MNEbPY2K55aoquLID+TQIFWGR0PjyNhuwNdx4Zj
K8TmuGtWEnXyowvSCy9iAXre4L4Ips6ORKZu4rgopzrsISM0vrbOGwqAj+gFOW8E
2+/+TBs9VWvZCL71HL4dqX5zAOT8a89/LULhX/j2p37nvmEc8DguoumXgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmTYoixE/xrdZEvAkDneSUTiPb7MB8GA1UdIwQY
MBaAFM9w89ERg2G1nzMV9ZFkPh2ruyAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEt
ZmJiOWY5MWM4Y2NlLzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85MjYwZDUtZjk3ZC00MTY4LWIyMmEtZmJiOWY5MWM4Y2Nl
LzEvejNEejBSR0RZYldmTXhYMWtXUS1IYXU3SUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpllhAyv
RgXpvcAAeAbjeVAyPpq8qeD2w9qeMrXRlHXTLxkLBFYcOOfHmuqaMZV+yQ8ZR6XR
EclzzljepUdfR9hWDUbGjh3POs2BUGfG57LErOf/IIWY88vQih97T6PPQjk5lJ0O
6nT0gQCxtPlgSk6VGY7tpNzXAHWtl4ySGhKRSzemy+EvC4ZgoHWjubW2RQqwmfy6
jf17CfleqraXblld5oXzYUJPO6xAgqvuLRTvvYSZLj9kv9JL9aHG2dYitUz4qEUJ
RIXFwnuKVtjoaXgFqM4NAs65vH1ySxgQsZcK8H8xmWuZ2qXOykgx+pofxzkeaml5
3ipvCJ0guUp7Yw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:21:28 2025 by rpki-client