Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
File: ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft (raw, json)
Hash identifier: X/+3i9W5l2/SwfHet3BkdL/KXTew8JQLPvU4U14DD3M=
Subject key identifier: CE:D8:8E:19:5C:A1:1E:07:01:08:3F:3A:92:6C:F7:56:CC:EB:23:CF
Authority key identifier: 64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
Certificate issuer: /CN=64366a73915f9090d4b1083897aa402577e163de
Certificate serial: 01958FCF53B03FF09A2F13B1B0AEF3C81057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
Manifest number: 047A
Signing time: Thu 13 Mar 2025 14:01:24 +0000
Manifest this update: Thu 13 Mar 2025 14:01:24 +0000
Manifest next update: Fri 14 Mar 2025 14:01:24 +0000
Files and hashes: 1: UMWovwfUscq8UXa7HcOk99jOyUw.roa (hash: qIZD+/8tTRjxnDRolqscZk7I94oyVCzhMP8LFn0HeeI=)
2: ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl (hash: kU6RWHU1nFuKt/ssy7lQ9YWJ+lzgsklzfBfy/8yGCMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:53:b0:3f:f0:9a:2f:13:b1:b0:ae:f3:c8:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64366a73915f9090d4b1083897aa402577e163de
Validity
Not Before: Mar 13 14:01:24 2025 GMT
Not After : Mar 14 14:01:24 2025 GMT
Subject: CN=ced88e195ca11e0701083f3a926cf756cceb23cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3f:71:93:23:c3:07:fd:93:7b:a8:7f:b5:59:
08:0c:46:d7:0e:0f:d2:9f:3f:45:22:a8:4a:6e:c4:
e8:f8:58:04:81:c7:ca:ff:99:d0:97:e7:d4:00:76:
4a:8e:ff:16:67:4a:c6:cf:9a:66:b3:8f:00:4e:d1:
15:cd:f7:07:7b:c9:ad:1b:89:f8:87:c3:53:90:d8:
49:66:70:8e:65:a3:6a:ba:b8:9b:bf:d3:6c:c9:8b:
ea:50:a9:29:96:61:e6:d1:5c:31:92:05:6b:ee:7a:
03:08:d4:38:b0:30:2d:ec:88:8e:54:b4:27:2e:b1:
39:bd:dd:b9:c6:5c:f6:bb:9c:24:d0:d6:0e:22:6e:
26:44:6d:f7:29:c7:f5:69:87:08:3d:88:e1:81:e8:
2a:d9:cc:35:a7:a6:5c:6d:a3:2e:59:b1:20:ee:0f:
b3:d0:32:15:e7:9e:71:cc:ac:42:d3:4d:75:e3:c3:
d8:9a:e8:ac:1a:63:48:7b:18:f8:19:ec:fa:5c:28:
79:51:b6:e7:16:f4:f6:2e:b9:7a:04:9c:9f:27:76:
ae:d5:8d:20:91:2c:40:18:5b:6d:4b:18:68:6f:02:
da:e3:c4:9b:e6:24:3d:af:5e:50:ec:69:a7:17:7e:
21:a0:da:ed:ae:d4:ed:87:5e:a3:43:fe:c4:9d:a0:
7a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:8E:19:5C:A1:1E:07:01:08:3F:3A:92:6C:F7:56:CC:EB:23:CF
X509v3 Authority Key Identifier:
keyid:64:36:6A:73:91:5F:90:90:D4:B1:08:38:97:AA:40:25:77:E1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDZqc5FfkJDUsQg4l6pAJXfhY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1baff1-dda3-4304-b1b3-5182eede2a29/1/ZDZqc5FfkJDUsQg4l6pAJXfhY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5f:6a:d5:2a:20:67:d3:2f:2e:0c:56:47:78:9d:9e:ff:ca:
1a:f7:20:1d:17:2e:b7:3c:e0:9e:a9:ae:0a:fc:05:44:00:56:
64:3b:7b:75:f8:1d:7e:07:59:7c:e0:81:fe:82:74:82:ad:92:
60:8f:b6:2a:8a:21:e1:67:6f:e7:9d:d5:ab:c6:8f:d9:e7:9d:
fc:c0:93:21:d8:f4:16:8c:4c:8a:57:98:bd:0f:42:9a:64:0f:
65:e3:bc:5c:c0:a1:06:fe:fd:f9:8c:27:e6:bd:5b:c3:50:e7:
70:d3:b5:44:ea:f4:c0:6f:21:f8:c2:fd:62:d0:a5:f7:17:5a:
ba:d3:70:72:ec:88:f7:47:6b:94:58:60:7e:3f:86:ad:c0:92:
4e:bb:6a:fd:83:16:ca:90:58:79:ec:6f:28:f6:81:93:20:c7:
a2:03:64:41:d2:f1:d5:1f:d0:38:a8:07:fb:97:cf:14:97:d8:
24:b7:fe:02:d9:9e:dc:91:77:78:16:14:76:bd:80:42:e5:e4:
ea:bc:4b:85:74:7e:d0:9a:0f:94:5a:6c:a4:da:75:5f:6e:90:
98:ab:0d:bb:e1:96:e1:82:02:ae:09:52:4a:9f:0e:58:76:7f:
6d:ce:5b:26:44:88:22:6d:b3:2e:fc:72:91:2e:2a:84:f2:17:
3f:cb:54:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPz1OwP/CaLxOxsK7zyBBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MzY2YTczOTE1ZjkwOTBkNGIxMDgzODk3YWE0MDI1Nzdl
MTYzZGUwHhcNMjUwMzEzMTQwMTI0WhcNMjUwMzE0MTQwMTI0WjAzMTEwLwYDVQQD
EyhjZWQ4OGUxOTVjYTExZTA3MDEwODNmM2E5MjZjZjc1NmNjZWIyM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7D9xkyPDB/2Te6h/tVkIDEbXDg/S
nz9FIqhKbsTo+FgEgcfK/5nQl+fUAHZKjv8WZ0rGz5pms48ATtEVzfcHe8mtG4n4
h8NTkNhJZnCOZaNquribv9NsyYvqUKkplmHm0VwxkgVr7noDCNQ4sDAt7IiOVLQn
LrE5vd25xlz2u5wk0NYOIm4mRG33Kcf1aYcIPYjhgegq2cw1p6ZcbaMuWbEg7g+z
0DIV555xzKxC001148PYmuisGmNIexj4Gez6XCh5UbbnFvT2Lrl6BJyfJ3au1Y0g
kSxAGFttSxhobwLa48Sb5iQ9r15Q7GmnF34hoNrtrtTth16jQ/7EnaB69QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM7YjhlcoR4HAQg/OpJs91bM6yPPMB8GA1UdIwQY
MBaAFGQ2anORX5CQ1LEIOJeqQCV34WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xYmFmZjEtZGRhMy00MzA0LWIxYjMt
NTE4MmVlZGUyYTI5LzEvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8xYmFmZjEtZGRhMy00MzA0LWIxYjMtNTE4MmVlZGUyYTI5
LzEvWkRacWM1RmZrSkRVc1FnNGw2cEFKWGZoWTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYl9q1Sog
Z9MvLgxWR3idnv/KGvcgHRcutzzgnqmuCvwFRABWZDt7dfgdfgdZfOCB/oJ0gq2S
YI+2Kooh4Wdv553Vq8aP2eed/MCTIdj0FoxMileYvQ9CmmQPZeO8XMChBv79+Ywn
5r1bw1DncNO1ROr0wG8h+ML9YtCl9xdautNwcuyI90drlFhgfj+GrcCSTrtq/YMW
ypBYeexvKPaBkyDHogNkQdLx1R/QOKgH+5fPFJfYJLf+Atme3JF3eBYUdr2AQuXk
6rxLhXR+0JoPlFpspNp1X26QmKsNu+GW4YICrglSSp8OWHZ/bc5bJkSIIm2zLvxy
kS4qhPIXP8tUXg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:30 2025 by rpki-client