Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
File: ZW5AemuZwPBSkyzHd_8N6bOhl04.mft (raw, json)
Hash identifier: TLI/0Wf6G/ZhMTbfK4wAtlusORRU3ZJ5Hho+RQLu6JE=
Subject key identifier: A6:D4:ED:B8:09:1D:C7:99:78:16:21:27:1B:AE:71:FB:0D:B5:23:BA
Authority key identifier: 65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
Certificate issuer: /CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Certificate serial: 019652000DE20BDC13A4CC399629CD444E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 07:00:57 +0000
Manifest this update: Sun 20 Apr 2025 07:00:57 +0000
Manifest next update: Mon 21 Apr 2025 07:00:57 +0000
Files and hashes: 1: ZW5AemuZwPBSkyzHd_8N6bOhl04.crl (hash: vYuBIjy/mVyJOj8LhWjLtJTCOLcs6nWxvOECL2ssKGI=)
2: aaI39-DbGwiYxab88qud3MKXp8I.roa (hash: hXf3Ze4XBluhbrN2BpmWvri4Oj4OkdW717jPTVFXetQ=)
3: iGABUqcXXN7aOyjtrZCgc7fQPto.roa (hash: GEJ0Of7uNCnr4mLuQTqHOBw0HqR8tQuPsFCRYfeeMcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:00:0d:e2:0b:dc:13:a4:cc:39:96:29:cd:44:4e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=656e407a6b99c0f052932cc777ff0de9b3a1974e
Validity
Not Before: Apr 20 07:00:57 2025 GMT
Not After : Apr 21 07:00:57 2025 GMT
Subject: CN=a6d4edb8091dc799781621271bae71fb0db523ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:a1:13:36:93:e0:f3:f7:c1:97:88:84:12:
01:12:e7:27:5e:3d:13:d0:7a:7d:a5:5a:17:5e:e5:
e4:c4:b1:18:92:c7:8c:09:68:63:4d:39:d6:be:8d:
3c:84:6b:8e:78:ce:f2:96:64:dc:92:69:4e:66:74:
74:c7:dc:34:22:4d:a6:33:ba:aa:5f:96:5c:55:a2:
98:d2:e5:57:41:29:7e:c2:ae:69:86:f9:11:48:a5:
0d:c8:03:8d:4b:5d:9f:9c:43:e5:de:05:05:97:32:
63:5d:fd:07:63:ab:c0:46:db:16:bf:42:a2:39:a2:
6b:45:56:23:a1:63:ca:4f:eb:ee:96:6d:b2:e9:be:
1c:40:cd:c9:28:77:da:d9:1b:81:a3:d9:6b:32:b7:
60:aa:20:52:0b:2c:c4:4b:2e:89:3c:d9:4a:b6:16:
f4:aa:92:bb:a2:46:e2:bf:1d:35:24:42:db:cc:b8:
d1:02:a4:8c:0d:15:89:86:97:99:eb:04:92:85:32:
33:69:37:9c:97:ba:c9:f6:4f:0d:e5:e1:1f:76:d3:
58:97:f1:0c:62:ef:fa:9f:b6:88:b2:43:27:8f:0b:
be:9b:c4:8a:29:0b:8a:64:b9:ca:83:b5:b5:1f:88:
b7:fa:f7:4b:8b:97:78:43:f6:4a:47:39:ae:fd:37:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D4:ED:B8:09:1D:C7:99:78:16:21:27:1B:AE:71:FB:0D:B5:23:BA
X509v3 Authority Key Identifier:
keyid:65:6E:40:7A:6B:99:C0:F0:52:93:2C:C7:77:FF:0D:E9:B3:A1:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZW5AemuZwPBSkyzHd_8N6bOhl04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5af6ba-cec9-414c-b766-c015a9d4f8ef/1/ZW5AemuZwPBSkyzHd_8N6bOhl04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c0:98:9c:4e:64:f2:d2:ee:6c:14:e4:af:c1:71:96:34:d4:
08:55:1f:8f:fb:57:a1:0b:a1:54:0f:f3:07:2f:da:4b:67:76:
5e:d0:30:cd:9a:42:d2:03:fc:6d:34:b0:5d:98:f6:d7:7f:ba:
ec:72:35:d3:6f:5b:9e:cf:9b:91:0e:13:91:7f:aa:94:e9:47:
cf:c2:b3:ac:06:02:8d:21:2c:61:c1:37:21:d3:1b:9f:a5:82:
94:3b:18:be:79:bb:4f:48:06:34:90:7b:90:98:94:0c:a2:51:
4d:e4:af:94:1c:fd:6d:cf:0e:b0:f0:1f:98:c1:6e:8e:31:a5:
26:32:f8:31:4c:aa:51:09:ab:c7:62:fa:f8:30:33:3b:63:db:
f8:26:8d:3d:aa:3e:08:86:7a:9c:b7:ef:d7:05:76:4a:97:6a:
bd:a9:91:8c:8f:cc:15:48:60:eb:6a:e0:3f:1e:eb:e8:e5:7f:
22:26:61:60:1b:6f:b9:db:72:a0:f3:e9:5d:1e:fc:21:fd:c1:
5b:11:bc:25:07:ed:ed:fd:55:d2:9a:82:63:f9:89:10:f1:c7:
d5:e6:2c:75:fa:9b:90:6d:23:10:67:52:78:be:03:ae:53:71:
0e:a5:49:87:c0:73:4b:ee:20:37:ab:9c:8d:c5:fb:d8:b6:02:
03:c9:d2:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSAA3iC9wTpMw5linNRE4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1NmU0MDdhNmI5OWMwZjA1MjkzMmNjNzc3ZmYwZGU5YjNh
MTk3NGUwHhcNMjUwNDIwMDcwMDU3WhcNMjUwNDIxMDcwMDU3WjAzMTEwLwYDVQQD
EyhhNmQ0ZWRiODA5MWRjNzk5NzgxNjIxMjcxYmFlNzFmYjBkYjUyM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGehEzaT4PP3wZeIhBIBEucnXj0T
0Hp9pVoXXuXkxLEYkseMCWhjTTnWvo08hGuOeM7ylmTckmlOZnR0x9w0Ik2mM7qq
X5ZcVaKY0uVXQSl+wq5phvkRSKUNyAONS12fnEPl3gUFlzJjXf0HY6vARtsWv0Ki
OaJrRVYjoWPKT+vulm2y6b4cQM3JKHfa2RuBo9lrMrdgqiBSCyzESy6JPNlKthb0
qpK7okbivx01JELbzLjRAqSMDRWJhpeZ6wSShTIzaTecl7rJ9k8N5eEfdtNYl/EM
Yu/6n7aIskMnjwu+m8SKKQuKZLnKg7W1H4i3+vdLi5d4Q/ZKRzmu/TeXNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbU7bgJHceZeBYhJxuucfsNtSO6MB8GA1UdIwQY
MBaAFGVuQHprmcDwUpMsx3f/DemzoZdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlc1QWVtdVp3UEJTa3l6SGRfOE42Yk9obDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YWY2YmEtY2VjOS00MTRjLWI3NjYt
YzAxNWE5ZDRmOGVmLzEvWlc1QWVtdVp3UEJTa3l6SGRfOE42Yk9obDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YWY2YmEtY2VjOS00MTRjLWI3NjYtYzAxNWE5ZDRmOGVm
LzEvWlc1QWVtdVp3UEJTa3l6SGRfOE42Yk9obDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMCYnE5k
8tLubBTkr8FxljTUCFUfj/tXoQuhVA/zBy/aS2d2XtAwzZpC0gP8bTSwXZj213+6
7HI1029bns+bkQ4TkX+qlOlHz8KzrAYCjSEsYcE3IdMbn6WClDsYvnm7T0gGNJB7
kJiUDKJRTeSvlBz9bc8OsPAfmMFujjGlJjL4MUyqUQmrx2L6+DAzO2Pb+CaNPao+
CIZ6nLfv1wV2SpdqvamRjI/MFUhg62rgPx7r6OV/IiZhYBtvudtyoPPpXR78If3B
WxG8JQft7f1V0pqCY/mJEPHH1eYsdfqbkG0jEGdSeL4DrlNxDqVJh8BzS+4gN6uc
jcX72LYCA8nSiQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:10 2025 by rpki-client