Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
File: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft (raw, json)
Hash identifier: I8fnY4IblNBHcYQ0HWdY6FLoZrkVO7iXzZAPG/kWwi4=
Subject key identifier: 61:DE:82:E8:52:C2:B2:31:32:73:6A:CB:BF:09:76:34:2F:7A:92:B1
Authority key identifier: CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
Certificate issuer: /CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Certificate serial: 0195127E16478007F3B32578F091319D55A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
Manifest number: 11C4
Signing time: Mon 17 Feb 2025 06:00:07 +0000
Manifest this update: Mon 17 Feb 2025 06:00:07 +0000
Manifest next update: Tue 18 Feb 2025 06:00:07 +0000
Files and hashes: 1: 37BH2BbkewJajf7AdygbF5Ybmow.roa (hash: MUXiTIQEk3N6SMfHkWKTmXV6HOZLx5S5G+E0pT81UGY=)
2: zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl (hash: 7Is6Li7w5UnlJuuxAXGaIYw2CC9CDB8rjP6fa7RZIn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:7e:16:47:80:07:f3:b3:25:78:f0:91:31:9d:55:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1d7ff016fff5d039a9689a43c93e84fe45dbc8
Validity
Not Before: Feb 17 06:00:07 2025 GMT
Not After : Feb 18 06:00:07 2025 GMT
Subject: CN=61de82e852c2b23132736acbbf0976342f7a92b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:9f:0c:c9:6d:de:69:9c:35:55:f8:55:81:
8a:70:d0:00:9e:8c:7d:7a:49:af:d2:bd:a2:6e:e1:
44:af:14:a3:87:1b:f2:27:74:9d:73:fd:a0:69:e9:
29:58:b8:9a:fd:86:96:e8:e8:f3:1e:2f:15:bd:c9:
db:75:55:e1:60:4b:7f:95:7d:2d:e7:77:13:2f:78:
97:73:5d:0c:5d:09:aa:2c:b7:b4:a4:c1:58:4b:9d:
b3:bc:dc:42:be:fe:b9:6e:ed:a9:13:08:bf:a8:56:
c1:14:3d:7d:c7:4d:d3:00:3d:8a:ac:57:a3:11:98:
4e:1d:71:12:0d:51:6c:ef:cb:7e:7a:04:23:eb:91:
b2:a0:66:90:44:5b:ce:45:12:f2:cf:8b:57:1e:8d:
23:c5:a1:ee:35:2d:c0:69:95:13:91:e0:33:b7:a7:
ea:74:a6:a2:f7:35:00:c0:24:1b:65:6e:40:f1:0c:
e6:73:85:fb:4e:9c:89:5c:45:b9:48:97:c5:0d:9f:
e1:ae:25:d2:7d:7e:8a:d6:15:45:5c:27:cf:7c:e4:
8a:00:9d:25:39:cd:b9:2a:f7:0d:25:cc:ba:d1:15:
1e:8f:91:68:6a:a3:b1:bd:c9:22:df:4b:f9:84:68:
8d:08:58:c5:47:19:cd:aa:67:fa:b7:92:7a:3d:b9:
0e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DE:82:E8:52:C2:B2:31:32:73:6A:CB:BF:09:76:34:2F:7A:92:B1
X509v3 Authority Key Identifier:
keyid:CF:1D:7F:F0:16:FF:F5:D0:39:A9:68:9A:43:C9:3E:84:FE:45:DB:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ce69f0-b6e1-4ba6-b9e0-4eb2695a868d/1/zx1_8Bb_9dA5qWiaQ8k-hP5F28g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e0:27:42:80:ae:e7:8f:1b:52:69:46:e2:4e:de:67:aa:fc:
43:65:21:bf:76:70:47:e8:d6:b6:0e:6d:f6:d1:34:d2:92:0c:
fd:85:5e:ab:04:d3:ed:de:85:11:bc:15:e7:3b:97:c4:ad:14:
94:6c:a2:78:63:43:c6:dd:66:21:c6:d2:88:b1:59:fa:e1:47:
0b:0c:67:06:ce:d8:07:5a:56:9e:bc:1f:3b:ca:af:ee:47:b4:
10:a0:a9:92:f1:07:dc:ff:cd:8c:52:43:02:75:96:9b:77:97:
c5:6a:04:ad:6b:9e:2d:d1:e4:45:7e:24:ab:de:9e:3b:0d:aa:
40:d3:01:b0:8e:7a:19:b6:dc:d0:ac:b2:d7:8e:71:e6:3d:6c:
b8:53:a7:58:49:e1:e7:87:4d:80:2c:06:32:8e:2e:32:f6:d9:
79:09:3f:bd:b8:4c:57:bd:f3:c4:4a:b5:9d:6d:46:4e:85:a6:
4e:28:dc:75:f8:40:7d:92:34:13:9f:52:6f:e7:e5:96:22:9e:
c6:26:0e:d2:02:3b:b0:20:74:34:f2:8c:2a:fa:e3:3a:6b:89:
4d:2d:28:55:fd:d3:e4:33:f6:a9:dc:36:f0:d7:13:6c:59:5e:
b5:54:08:91:68:30:ce:2a:63:bc:f0:8f:61:0d:b4:63:c9:4b:
c7:a6:97:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSfhZHgAfzsyV48JExnVWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWQ3ZmYwMTZmZmY1ZDAzOWE5Njg5YTQzYzkzZTg0ZmU0
NWRiYzgwHhcNMjUwMjE3MDYwMDA3WhcNMjUwMjE4MDYwMDA3WjAzMTEwLwYDVQQD
Eyg2MWRlODJlODUyYzJiMjMxMzI3MzZhY2JiZjA5NzYzNDJmN2E5MmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0afDMlt3mmcNVX4VYGKcNAAnox9
ekmv0r2ibuFErxSjhxvyJ3Sdc/2gaekpWLia/YaW6OjzHi8VvcnbdVXhYEt/lX0t
53cTL3iXc10MXQmqLLe0pMFYS52zvNxCvv65bu2pEwi/qFbBFD19x03TAD2KrFej
EZhOHXESDVFs78t+egQj65GyoGaQRFvORRLyz4tXHo0jxaHuNS3AaZUTkeAzt6fq
dKai9zUAwCQbZW5A8Qzmc4X7TpyJXEW5SJfFDZ/hriXSfX6K1hVFXCfPfOSKAJ0l
Oc25KvcNJcy60RUej5FoaqOxvcki30v5hGiNCFjFRxnNqmf6t5J6PbkOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHeguhSwrIxMnNqy78JdjQvepKxMB8GA1UdIwQY
MBaAFM8df/AW//XQOalomkPJPoT+RdvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAt
NGViMjY5NWE4NjhkLzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jZTY5ZjAtYjZlMS00YmE2LWI5ZTAtNGViMjY5NWE4Njhk
LzEvengxXzhCYl85ZEE1cVdpYVE4ay1oUDVGMjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeAnQoCu
548bUmlG4k7eZ6r8Q2Uhv3ZwR+jWtg5t9tE00pIM/YVeqwTT7d6FEbwV5zuXxK0U
lGyieGNDxt1mIcbSiLFZ+uFHCwxnBs7YB1pWnrwfO8qv7ke0EKCpkvEH3P/NjFJD
AnWWm3eXxWoErWueLdHkRX4kq96eOw2qQNMBsI56Gbbc0Kyy145x5j1suFOnWEnh
54dNgCwGMo4uMvbZeQk/vbhMV73zxEq1nW1GToWmTijcdfhAfZI0E59Sb+flliKe
xiYO0gI7sCB0NPKMKvrjOmuJTS0oVf3T5DP2qdw28NcTbFletVQIkWgwzipjvPCP
YQ20Y8lLx6aX1w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:33 2025 by rpki-client