Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
File: zixQX3fcqBF-8GJXEHRMs1lzaxk.mft (raw, json)
Hash identifier: ZMy3Llf2wv4vNzMuOFxjq3lpfZErlSAvrGMg/XmCD+Q=
Subject key identifier: 2E:D5:FE:D9:12:58:6E:E8:40:97:65:8A:5E:33:DF:83:FC:97:C9:F5
Authority key identifier: CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
Certificate issuer: /CN=ce2c505f77dca8117ef0625710744cb359736b19
Certificate serial: 01958C606A16E7CEDDCCEE975C9E1412A305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 22:01:23 +0000
Manifest this update: Wed 12 Mar 2025 22:01:23 +0000
Manifest next update: Thu 13 Mar 2025 22:01:23 +0000
Files and hashes: 1: hD4ft5vuw1Wk9UZZqMkIcSTxRFk.roa (hash: h4/9pXQ7Wpk9BBxdxTpq0aRzvgxJkU0Udbbc6bAhob8=)
2: zixQX3fcqBF-8GJXEHRMs1lzaxk.crl (hash: Tjo++zSSzVyiLZC1b02eRmE24MqU2Z0fjCPjNl3cCvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:6a:16:e7:ce:dd:cc:ee:97:5c:9e:14:12:a3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce2c505f77dca8117ef0625710744cb359736b19
Validity
Not Before: Mar 12 22:01:23 2025 GMT
Not After : Mar 13 22:01:23 2025 GMT
Subject: CN=2ed5fed912586ee84097658a5e33df83fc97c9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:ce:61:f6:76:ce:dd:6f:10:ff:04:f2:ee:
80:e9:f7:b0:3d:75:68:a4:59:60:ea:b3:e2:bb:b4:
a3:32:30:f7:df:ab:83:8f:32:13:e7:10:e3:13:5c:
61:f0:b7:f4:05:41:da:cb:de:ce:6d:14:f2:33:1c:
ac:ba:70:89:a3:c2:f3:eb:1c:0b:e7:d2:75:7b:ea:
d5:d5:1d:d6:9f:83:b5:15:42:be:b3:11:00:53:46:
a2:3d:9f:1b:10:b7:9f:bd:ca:fa:e6:37:47:51:e1:
5e:42:0c:ce:a4:63:10:0e:40:50:d0:f0:19:f0:20:
5e:8c:bd:b1:f5:29:1b:36:17:0b:86:f3:9d:43:57:
c3:6e:0a:29:7e:25:87:c3:d9:68:fd:7e:d7:ad:ee:
c3:c5:a7:95:54:dc:1e:0c:8c:c6:99:12:78:b3:95:
70:fe:43:01:71:35:2a:75:a2:06:57:2d:19:9e:87:
2c:2c:4d:01:04:4c:de:92:0b:a4:f2:5d:14:d5:5e:
dc:ec:61:ff:2d:1d:70:dd:5e:d9:29:fb:50:64:15:
c1:b7:31:48:cf:76:57:17:5c:58:2c:6b:df:01:52:
8b:e9:dc:6b:bf:e8:33:47:8e:7d:b0:8f:57:51:ec:
89:da:2c:cd:22:82:c3:1d:70:f9:52:5b:6d:cf:d0:
1c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D5:FE:D9:12:58:6E:E8:40:97:65:8A:5E:33:DF:83:FC:97:C9:F5
X509v3 Authority Key Identifier:
keyid:CE:2C:50:5F:77:DC:A8:11:7E:F0:62:57:10:74:4C:B3:59:73:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zixQX3fcqBF-8GJXEHRMs1lzaxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/09f918-aced-42a8-8a3a-33e2705b4c3e/1/zixQX3fcqBF-8GJXEHRMs1lzaxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:67:a2:7a:28:18:25:27:41:1b:6b:35:73:ca:53:01:58:fa:
a1:90:70:0e:e2:66:57:2b:c6:35:24:c9:81:65:81:d7:cd:96:
b5:b7:a0:fd:42:1c:dd:14:3b:65:21:51:c9:a7:67:3b:13:ef:
cc:e9:0f:cc:cc:8a:ca:2c:97:ce:eb:4a:99:5f:f2:14:ce:13:
24:95:b4:da:3d:47:18:1f:58:3e:cd:86:de:55:4c:57:b6:91:
24:1b:75:a2:52:c7:6b:ab:a1:12:71:a7:5b:7d:b7:bd:54:1a:
a9:3c:42:80:3a:e6:0e:c1:a6:34:d8:ec:d0:22:98:fd:29:8e:
3f:2f:bb:e7:bb:fc:ec:8e:9e:00:5f:c7:b0:8c:53:9f:ce:9d:
b8:cc:28:06:27:30:d1:47:39:6d:b1:3f:00:fa:0d:00:59:5d:
90:cc:ef:c1:2b:17:35:a9:83:8c:1f:ba:a8:90:c9:25:3f:2e:
13:ba:f6:e3:84:02:08:fb:56:e5:34:63:de:cb:76:10:38:44:
ae:ef:11:45:86:6e:e4:6f:1b:2b:dc:62:9a:66:e7:41:13:5c:
1b:74:1b:b9:ca:2f:b0:ca:dd:b4:0d:26:e5:e5:08:9d:39:7c:
f5:68:12:6f:4e:fb:af:2a:08:a2:ff:6e:65:e7:1f:5d:9c:59:
ac:65:8e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYGoW587dzO6XXJ4UEqMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlMmM1MDVmNzdkY2E4MTE3ZWYwNjI1NzEwNzQ0Y2IzNTk3
MzZiMTkwHhcNMjUwMzEyMjIwMTIzWhcNMjUwMzEzMjIwMTIzWjAzMTEwLwYDVQQD
EygyZWQ1ZmVkOTEyNTg2ZWU4NDA5NzY1OGE1ZTMzZGY4M2ZjOTdjOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdDOYfZ2zt1vEP8E8u6A6fewPXVo
pFlg6rPiu7SjMjD336uDjzIT5xDjE1xh8Lf0BUHay97ObRTyMxysunCJo8Lz6xwL
59J1e+rV1R3Wn4O1FUK+sxEAU0aiPZ8bELefvcr65jdHUeFeQgzOpGMQDkBQ0PAZ
8CBejL2x9SkbNhcLhvOdQ1fDbgopfiWHw9lo/X7Xre7DxaeVVNweDIzGmRJ4s5Vw
/kMBcTUqdaIGVy0ZnocsLE0BBEzekguk8l0U1V7c7GH/LR1w3V7ZKftQZBXBtzFI
z3ZXF1xYLGvfAVKL6dxrv+gzR459sI9XUeyJ2izNIoLDHXD5Ulttz9Ac3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7V/tkSWG7oQJdlil4z34P8l8n1MB8GA1UdIwQY
MBaAFM4sUF933KgRfvBiVxB0TLNZc2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2Et
MzNlMjcwNWI0YzNlLzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wOWY5MTgtYWNlZC00MmE4LThhM2EtMzNlMjcwNWI0YzNl
LzEveml4UVgzZmNxQkYtOEdKWEVIUk1zMWx6YXhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWeieigY
JSdBG2s1c8pTAVj6oZBwDuJmVyvGNSTJgWWB182Wtbeg/UIc3RQ7ZSFRyadnOxPv
zOkPzMyKyiyXzutKmV/yFM4TJJW02j1HGB9YPs2G3lVMV7aRJBt1olLHa6uhEnGn
W323vVQaqTxCgDrmDsGmNNjs0CKY/SmOPy+757v87I6eAF/HsIxTn86duMwoBicw
0Uc5bbE/APoNAFldkMzvwSsXNamDjB+6qJDJJT8uE7r244QCCPtW5TRj3st2EDhE
ru8RRYZu5G8bK9ximmbnQRNcG3QbucovsMrdtA0m5eUInTl89WgSb077ryoIov9u
ZecfXZxZrGWOGw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:25 2025 by rpki-client