Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft (raw, json)
Hash identifier: NdjOUeNOWq26uaGGJDCdNPw3BIBHfpEZZZOWBJ9Sjto=
Subject key identifier: 5B:89:33:42:6E:A0:07:BA:DC:F8:40:28:89:2D:44:52:DE:6E:C4:A7
Authority key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Certificate issuer: /CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Certificate serial: 01964EFE7C1CC9748F8157FC0694A493B53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
Manifest number: 0564
Signing time: Sat 19 Apr 2025 17:00:22 +0000
Manifest this update: Sat 19 Apr 2025 17:00:22 +0000
Manifest next update: Sun 20 Apr 2025 17:00:22 +0000
Files and hashes: 1: 1c920Ct5rOPHF_34AgNrTQyTHns.roa (hash: 3ha9UyAf61XbEV4U4pqec4b6uB2FvJUFQO9xEs0mMB8=)
2: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl (hash: OCM+eJSrpAvf7a6p5/wqS5LgRdAqtH4tgFg4tcubcvc=)
3: ovafsYtoE7DXZrX76_DbhwiFBFI.roa (hash: B3oTrNBu7iXQWRfAVFRfxlkERw0m92wTQifsPR2uF3I=)
4: uS_eNJttBX5d2bBiNGi8o_-V1qw.roa (hash: 4uBi6d9Ejt3VJlBosKZzOt8ocCYLF07d22+zXDAl+n0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:7c:1c:c9:74:8f:81:57:fc:06:94:a4:93:b5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Validity
Not Before: Apr 19 17:00:22 2025 GMT
Not After : Apr 20 17:00:22 2025 GMT
Subject: CN=5b8933426ea007badcf84028892d4452de6ec4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:fc:ef:08:f6:59:5d:ea:67:89:ef:9d:ce:
f2:f2:3d:a5:cb:4c:bc:4f:51:cf:f5:35:91:90:5d:
e3:ca:04:f0:ca:47:47:03:52:d5:87:10:d7:bf:8f:
b0:66:a4:bd:82:65:ef:8b:95:c8:cc:ca:49:44:fe:
ef:d4:c3:57:39:b3:66:08:05:fa:d1:31:86:45:e4:
5f:9c:36:8f:5d:11:90:6a:fc:b5:a3:48:e9:a7:00:
ac:64:f4:62:5e:0d:22:92:99:45:43:87:97:51:92:
55:b7:ed:be:dd:29:06:3c:61:23:71:41:7b:38:59:
2e:92:0f:ea:c4:b9:ac:c5:c5:09:98:0b:fe:2f:92:
8a:90:22:91:2b:f2:3a:6b:11:d7:49:0a:da:3a:98:
f5:98:07:eb:42:42:9a:c7:2b:7b:3a:65:0f:57:86:
9a:36:cf:bc:f4:93:40:15:ea:bd:87:84:29:99:cd:
e9:ce:23:e1:05:47:c7:2d:d7:03:d7:e0:ea:da:20:
af:e3:9e:16:aa:c6:d5:f3:73:62:22:ac:5f:18:d1:
b5:51:21:71:84:32:e0:aa:39:8c:41:e0:8a:8d:bf:
74:c2:f3:7a:94:3f:84:3f:c4:36:36:7d:2a:e6:da:
94:51:ce:13:47:5c:02:fa:e1:0a:f1:ea:8b:ff:f1:
44:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:33:42:6E:A0:07:BA:DC:F8:40:28:89:2D:44:52:DE:6E:C4:A7
X509v3 Authority Key Identifier:
keyid:64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:b2:cf:0b:93:5b:08:a6:1d:48:01:ed:8f:f6:97:3e:e8:
80:3f:34:32:2d:d5:37:d4:c0:12:2d:fb:fc:56:a2:06:e3:6f:
5e:0a:0f:d7:ea:81:b3:b3:a2:4d:ab:de:51:27:03:cc:c2:46:
3d:24:9b:19:d2:6f:24:01:63:99:9f:26:f7:4a:73:c2:7a:c2:
6f:36:14:06:46:d7:dd:c5:95:ca:95:b6:c5:2f:73:0a:19:61:
1e:f4:3a:3e:c3:0b:84:d8:63:83:fe:62:0a:ae:8f:82:ff:d4:
e6:5a:15:4b:fe:36:27:96:dd:d4:d0:06:39:72:ac:38:e4:e0:
ba:b0:8a:9f:a6:47:ad:60:a8:84:59:10:cf:0e:cb:80:ee:b8:
f5:65:05:ec:52:c3:2e:2b:36:60:9d:5b:e7:81:41:36:4a:a3:
6b:03:10:13:d1:90:f1:e0:79:27:dd:92:5b:31:73:f0:25:ca:
63:74:81:98:5b:9c:2e:29:64:7c:d1:35:cc:3f:c4:5d:90:dc:
02:96:98:f8:06:7c:3b:d9:ec:58:e4:9e:a9:ec:2e:be:27:36:
c1:ac:32:5d:cb:1c:16:27:60:1a:dd:80:be:f0:c7:47:0a:e1:
db:fd:20:a4:32:e1:1c:08:7f:48:76:09:4c:ad:ab:86:03:b8:
a1:cf:b2:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZO/nwcyXSPgVf8BpSkk7U9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDg2NGFlOTJiZDdjZWFiNTA4M2JjYzcxMTAxZWYwNDY3
NmY4YWMwHhcNMjUwNDE5MTcwMDIyWhcNMjUwNDIwMTcwMDIyWjAzMTEwLwYDVQQD
Eyg1Yjg5MzM0MjZlYTAwN2JhZGNmODQwMjg4OTJkNDQ1MmRlNmVjNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJj87wj2WV3qZ4nvnc7y8j2ly0y8
T1HP9TWRkF3jygTwykdHA1LVhxDXv4+wZqS9gmXvi5XIzMpJRP7v1MNXObNmCAX6
0TGGReRfnDaPXRGQavy1o0jppwCsZPRiXg0ikplFQ4eXUZJVt+2+3SkGPGEjcUF7
OFkukg/qxLmsxcUJmAv+L5KKkCKRK/I6axHXSQraOpj1mAfrQkKaxyt7OmUPV4aa
Ns+89JNAFeq9h4Qpmc3pziPhBUfHLdcD1+Dq2iCv454WqsbV83NiIqxfGNG1USFx
hDLgqjmMQeCKjb90wvN6lD+EP8Q2Nn0q5tqUUc4TR1wC+uEK8eqL//FEDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuJM0JuoAe63PhAKIktRFLebsSnMB8GA1UdIwQY
MBaAFGTYZK6SvXzqtQg7zHEQHvBGdvisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAt
MmMwNWNjOTIyMDAxLzEvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MGIyYzQtMWQ0YS00YjkxLWIwZDAtMmMwNWNjOTIyMDAx
LzEvWk5oa3JwSzlmT3ExQ0R2TWNSQWU4RVoyLUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxqyzwuT
WwimHUgB7Y/2lz7ogD80Mi3VN9TAEi37/FaiBuNvXgoP1+qBs7OiTaveUScDzMJG
PSSbGdJvJAFjmZ8m90pzwnrCbzYUBkbX3cWVypW2xS9zChlhHvQ6PsMLhNhjg/5i
Cq6Pgv/U5loVS/42J5bd1NAGOXKsOOTgurCKn6ZHrWCohFkQzw7LgO649WUF7FLD
Lis2YJ1b54FBNkqjawMQE9GQ8eB5J92SWzFz8CXKY3SBmFucLilkfNE1zD/EXZDc
ApaY+AZ8O9nsWOSeqewuvic2wawyXcscFidgGt2AvvDHRwrh2/0gpDLhHAh/SHYJ
TK2rhgO4oc+yEg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 19:01:25 2025 by rpki-client