Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
File: z2hDzhUimoAj2X-iejflkniyv9c.mft (raw, json)
Hash identifier: n2PSghSCXn9fytClH+K/eg90O+TTbNxBynxcCkS8k5c=
Subject key identifier: 96:1C:D9:44:B0:C9:0F:B1:BA:89:40:98:F5:8A:E6:E3:62:1B:69:AD
Authority key identifier: CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
Certificate issuer: /CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Certificate serial: 01951247654C829C2430C7436EE4EF20E87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
Manifest number: 0A44
Signing time: Mon 17 Feb 2025 05:00:23 +0000
Manifest this update: Mon 17 Feb 2025 05:00:23 +0000
Manifest next update: Tue 18 Feb 2025 05:00:23 +0000
Files and hashes: 1: pZ2-rl1wvNOlZXWq6r9tiMcpCLE.roa (hash: UTgRZg+3/3Y1WSaSgU/Ax1MIkqu5a18zaZd2IsaahgY=)
2: z2hDzhUimoAj2X-iejflkniyv9c.crl (hash: 5R4IArcUhK600I/XBXXkqclQFuPBDjXDZmUUbFVcNoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:65:4c:82:9c:24:30:c7:43:6e:e4:ef:20:e8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf6843ce15229a8023d97fa27a37e59278b2bfd7
Validity
Not Before: Feb 17 05:00:23 2025 GMT
Not After : Feb 18 05:00:23 2025 GMT
Subject: CN=961cd944b0c90fb1ba894098f58ae6e3621b69ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:cc:2a:6e:9e:e5:8c:23:56:a5:f7:22:1a:
cb:ac:a5:b6:99:e0:41:85:8c:02:8c:41:7c:2e:24:
55:c7:96:af:9f:44:b3:d5:0c:d9:df:d6:b0:54:8b:
08:52:f1:d4:9b:2a:bd:a3:f8:47:92:dd:3d:3c:32:
41:88:36:c9:c2:d1:8b:b3:a7:8e:af:18:1b:f6:55:
14:e0:31:80:47:2a:54:bf:94:1f:bc:33:45:18:fb:
8d:71:ab:7d:86:b5:ff:b7:fc:68:67:ef:af:8f:10:
bf:52:eb:58:2a:9b:6e:f8:28:91:5a:cf:95:d3:52:
0d:32:4f:d7:da:44:ad:85:17:eb:64:81:98:7e:75:
a1:b7:0d:77:3e:57:86:93:ec:08:35:ef:c1:69:fe:
26:1d:32:6f:94:6a:4b:8d:19:09:a2:a6:7d:73:a7:
26:62:1f:43:2f:ce:4d:27:15:2b:e1:44:3a:9a:1f:
d4:d3:2e:4a:f6:d0:6e:ad:75:4d:23:31:87:6e:29:
9a:81:74:c2:44:45:99:1d:3e:1f:0d:0a:01:6a:bd:
14:df:7e:1c:5b:b4:e7:a8:85:f1:1e:2e:35:a7:eb:
c1:27:45:98:81:95:eb:cb:63:2a:6a:d1:80:20:98:
a5:37:81:e2:51:5e:a0:bf:0f:1f:5e:d9:68:a7:c6:
a1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1C:D9:44:B0:C9:0F:B1:BA:89:40:98:F5:8A:E6:E3:62:1B:69:AD
X509v3 Authority Key Identifier:
keyid:CF:68:43:CE:15:22:9A:80:23:D9:7F:A2:7A:37:E5:92:78:B2:BF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2hDzhUimoAj2X-iejflkniyv9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/761b48-69ea-40e4-8d7c-64cd194f7f4f/1/z2hDzhUimoAj2X-iejflkniyv9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:dd:ca:f2:4f:77:31:07:e0:bb:af:ba:ca:cf:38:94:de:d4:
d1:7c:81:ee:09:68:02:09:9e:92:2a:03:38:85:f5:05:ad:11:
e9:12:1c:fd:09:e3:ec:d5:62:e6:a2:d6:bc:b3:55:0b:e5:cc:
76:d8:9e:65:19:36:bf:df:5a:a3:3e:e5:c0:25:f3:ba:66:fe:
1f:f3:ed:d1:62:6b:02:1b:3d:7d:cc:d3:eb:64:a1:70:a8:28:
aa:e4:b0:97:47:5e:ee:d1:54:f5:3a:bb:6a:2e:00:7f:cf:76:
ef:68:5e:63:e3:37:30:14:26:a6:40:17:23:f1:3c:2d:47:40:
2d:0a:ff:3b:9b:80:f6:55:9e:b0:d9:f8:9d:59:24:b1:f6:a4:
88:7e:55:40:1c:cd:a7:92:ca:20:91:7b:cc:47:b0:70:ef:04:
5f:6f:1b:60:d2:2d:ac:14:75:33:4d:93:2c:5f:32:93:5c:4e:
4d:f8:b3:fa:e0:d0:88:b7:f4:d5:12:f2:57:2f:4c:87:b3:70:
0a:02:6c:5b:e0:45:2b:42:21:ab:d2:5f:21:ae:c4:16:40:f9:
5d:be:5f:20:f7:3b:3b:01:fc:1a:5d:9f:17:2e:1c:de:2f:88:
65:93:c7:7d:24:4f:06:7c:b2:16:31:6b:be:16:3c:74:5d:50:
34:df:83:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR2VMgpwkMMdDbuTvIOh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNjg0M2NlMTUyMjlhODAyM2Q5N2ZhMjdhMzdlNTkyNzhi
MmJmZDcwHhcNMjUwMjE3MDUwMDIzWhcNMjUwMjE4MDUwMDIzWjAzMTEwLwYDVQQD
Eyg5NjFjZDk0NGIwYzkwZmIxYmE4OTQwOThmNThhZTZlMzYyMWI2OWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksbMKm6e5YwjVqX3IhrLrKW2meBB
hYwCjEF8LiRVx5avn0Sz1QzZ39awVIsIUvHUmyq9o/hHkt09PDJBiDbJwtGLs6eO
rxgb9lUU4DGARypUv5QfvDNFGPuNcat9hrX/t/xoZ++vjxC/UutYKptu+CiRWs+V
01INMk/X2kSthRfrZIGYfnWhtw13PleGk+wINe/Baf4mHTJvlGpLjRkJoqZ9c6cm
Yh9DL85NJxUr4UQ6mh/U0y5K9tBurXVNIzGHbimagXTCREWZHT4fDQoBar0U334c
W7TnqIXxHi41p+vBJ0WYgZXry2MqatGAIJilN4HiUV6gvw8fXtlop8ahNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYc2USwyQ+xuolAmPWK5uNiG2mtMB8GA1UdIwQY
MBaAFM9oQ84VIpqAI9l/ono35ZJ4sr/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2Mt
NjRjZDE5NGY3ZjRmLzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy83NjFiNDgtNjllYS00MGU0LThkN2MtNjRjZDE5NGY3ZjRm
LzEvejJoRHpoVWltb0FqMlgtaWVqZmxrbml5djljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEN3K8k93
MQfgu6+6ys84lN7U0XyB7gloAgmekioDOIX1Ba0R6RIc/Qnj7NVi5qLWvLNVC+XM
dtieZRk2v99aoz7lwCXzumb+H/Pt0WJrAhs9fczT62ShcKgoquSwl0de7tFU9Tq7
ai4Af89272heY+M3MBQmpkAXI/E8LUdALQr/O5uA9lWesNn4nVkksfakiH5VQBzN
p5LKIJF7zEewcO8EX28bYNItrBR1M02TLF8yk1xOTfiz+uDQiLf01RLyVy9Mh7Nw
CgJsW+BFK0Ihq9JfIa7EFkD5Xb5fIPc7OwH8Gl2fFy4c3i+IZZPHfSRPBnyyFjFr
vhY8dF1QNN+DWA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:56 2025 by rpki-client