Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
File: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft (raw, json)
Hash identifier: h3LNK+FGy4fvtp5WuFXhKDhBhDOSIhIzXvupTlyX8cw=
Subject key identifier: E1:C6:10:3A:A7:22:0A:56:F9:6B:15:F1:9F:94:59:13:98:34:A3:A0
Authority key identifier: 64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
Certificate issuer: /CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Certificate serial: 0194C49A6FF4499C6D103D144182F1F16058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
Manifest number: 0CDA
Signing time: Sun 02 Feb 2025 03:00:43 +0000
Manifest this update: Sun 02 Feb 2025 03:00:43 +0000
Manifest next update: Mon 03 Feb 2025 03:00:43 +0000
Files and hashes: 1: HzvKGtUs7sPJzismOjvVuToO40U.roa (hash: k2eXr/bkVJcJ9MGb6TTJoQRt6lF8uUxgmHehUrD684g=)
2: ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl (hash: LULk6hu9diY6AKnnahHOMw1XoNsi129mDcMmsybFM7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:9a:6f:f4:49:9c:6d:10:3d:14:41:82:f1:f1:60:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641c78fc1748bdcc6a6c88c67d283e1d02d9dcc8
Validity
Not Before: Feb 2 03:00:43 2025 GMT
Not After : Feb 3 03:00:43 2025 GMT
Subject: CN=e1c6103aa7220a56f96b15f19f9459139834a3a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:1c:be:1d:f0:c9:5a:ef:1d:cf:11:65:35:
db:fc:99:6e:0c:0b:0e:36:03:8b:33:61:5c:23:e9:
4b:2b:d8:f4:8f:d3:dd:4d:6e:09:d2:7a:e1:da:ac:
60:8e:fe:0e:d2:dd:80:1d:cf:f6:c7:4f:f9:12:93:
39:a5:57:f2:8b:60:c6:4b:5c:76:a7:46:b3:22:c5:
fa:c4:37:f2:d0:d1:83:54:91:df:47:f8:4e:80:3a:
ba:f4:73:85:cc:32:24:8d:47:85:70:88:2c:1c:c2:
84:20:b2:34:77:9e:0b:6f:f9:9a:94:5c:1c:f7:9c:
08:ac:7c:ce:7f:01:98:69:ca:3c:fd:7d:52:09:45:
00:d8:ff:58:7e:73:14:fd:b6:65:ea:47:56:32:b3:
96:87:3c:67:9e:f2:fc:68:a5:97:3e:8f:83:35:ff:
ea:bf:f9:41:4f:34:81:ad:4e:b4:6e:fc:27:db:a2:
14:f2:ce:c9:4c:80:5d:1d:66:1f:6e:0f:14:2f:d2:
56:e0:11:19:88:66:e7:df:59:7e:1d:bb:e7:6c:65:
cd:4d:fe:77:f7:9b:b3:e3:1f:0a:a6:60:e9:00:d4:
c6:33:2c:f6:83:f3:35:e6:1d:0d:91:d2:af:f2:1b:
20:7d:fc:53:c7:c7:63:0b:d4:8a:43:1d:13:09:e5:
2b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C6:10:3A:A7:22:0A:56:F9:6B:15:F1:9F:94:59:13:98:34:A3:A0
X509v3 Authority Key Identifier:
keyid:64:1C:78:FC:17:48:BD:CC:6A:6C:88:C6:7D:28:3E:1D:02:D9:DC:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/ZBx4_BdIvcxqbIjGfSg-HQLZ3Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:84:02:5f:c7:f5:32:30:11:63:0f:33:53:17:3e:ae:41:27:
e3:ae:4f:27:ad:9b:f1:1a:98:fa:49:ef:bc:81:19:42:b2:44:
3d:ab:d6:5e:aa:5b:fa:5e:40:b1:5d:db:fb:8e:cd:24:15:9f:
5a:81:9d:dc:5d:45:f9:fd:67:35:1e:46:74:37:c3:36:ec:47:
4a:af:3e:f3:16:08:64:5f:47:9b:38:7f:a8:8b:f4:e1:0e:3f:
68:65:20:66:a5:45:1a:d7:96:74:d6:f3:90:8d:88:57:ce:7f:
96:c8:75:43:4c:74:2f:ac:76:c2:f0:a0:e4:ee:81:ea:0b:7a:
57:32:ac:e3:5d:52:12:2d:9a:28:2f:39:06:a0:8c:e9:9f:8a:
f5:a3:91:d3:3b:69:ba:7b:7e:cc:98:f1:c3:03:9e:6a:e4:e2:
f4:6f:b1:29:9f:be:a0:3b:ca:81:33:6c:70:5b:48:43:ef:36:
86:b9:84:e7:81:d2:b1:29:5c:cd:d9:a2:18:51:bd:3b:e6:e7:
58:ab:4c:ba:3a:26:75:fd:da:44:f1:c2:61:e1:a0:47:94:f5:
01:41:9d:c0:02:aa:f1:0e:29:15:50:54:36:b8:1c:55:29:14:
a2:a5:65:6b:8c:11:b7:22:70:be:e1:d6:2e:87:42:55:9c:55:
04:dc:da:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEmm/0SZxtED0UQYLx8WBYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MWM3OGZjMTc0OGJkY2M2YTZjODhjNjdkMjgzZTFkMDJk
OWRjYzgwHhcNMjUwMjAyMDMwMDQzWhcNMjUwMjAzMDMwMDQzWjAzMTEwLwYDVQQD
EyhlMWM2MTAzYWE3MjIwYTU2Zjk2YjE1ZjE5Zjk0NTkxMzk4MzRhM2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cIcvh3wyVrvHc8RZTXb/JluDAsO
NgOLM2FcI+lLK9j0j9PdTW4J0nrh2qxgjv4O0t2AHc/2x0/5EpM5pVfyi2DGS1x2
p0azIsX6xDfy0NGDVJHfR/hOgDq69HOFzDIkjUeFcIgsHMKEILI0d54Lb/malFwc
95wIrHzOfwGYaco8/X1SCUUA2P9YfnMU/bZl6kdWMrOWhzxnnvL8aKWXPo+DNf/q
v/lBTzSBrU60bvwn26IU8s7JTIBdHWYfbg8UL9JW4BEZiGbn31l+HbvnbGXNTf53
95uz4x8KpmDpANTGMyz2g/M15h0NkdKv8hsgffxTx8djC9SKQx0TCeUrSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHGEDqnIgpW+WsV8Z+UWROYNKOgMB8GA1UdIwQY
MBaAFGQcePwXSL3MamyIxn0oPh0C2dzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2Ut
NmQyZTExZmUwOGNkLzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lNzJhOWQtOWVhNS00N2RiLWE2N2UtNmQyZTExZmUwOGNk
LzEvWkJ4NF9CZEl2Y3hxYklqR2ZTZy1IUUxaM01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1YQCX8f1
MjARYw8zUxc+rkEn465PJ62b8RqY+knvvIEZQrJEPavWXqpb+l5AsV3b+47NJBWf
WoGd3F1F+f1nNR5GdDfDNuxHSq8+8xYIZF9Hmzh/qIv04Q4/aGUgZqVFGteWdNbz
kI2IV85/lsh1Q0x0L6x2wvCg5O6B6gt6VzKs411SEi2aKC85BqCM6Z+K9aOR0ztp
unt+zJjxwwOeauTi9G+xKZ++oDvKgTNscFtIQ+82hrmE54HSsSlczdmiGFG9O+bn
WKtMujomdf3aRPHCYeGgR5T1AUGdwAKq8Q4pFVBUNrgcVSkUoqVla4wRtyJwvuHW
LodCVZxVBNza6g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:52:02 2025 by rpki-client